Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/aFbjtxPFJ5_bBBa2f1yaRlishmM.roa
File: aFbjtxPFJ5_bBBa2f1yaRlishmM.roa (raw, json)
Hash identifier: KO178O4wixMHuh64KZfvpg6EtGIQgNYtaZhN3X3e3PI=
Subject key identifier: 68:56:E3:B7:13:C5:27:9F:DB:04:16:B6:7F:5C:9A:46:58:AC:86:63
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A195D6849C0DA6B518D54CD9F6B6D1F41C
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/aFbjtxPFJ5_bBBa2f1yaRlishmM.roa
Signing time: Sun 01 Nov 2026 06:40:26 +0000
ROA not before: Sun 01 Nov 2026 06:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50124
IP address blocks: 178.239.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:d6:84:9c:0d:a6:b5:18:d5:4c:d9:f6:b6:d1:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Nov 1 06:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6856e3b713c5279fdb0416b67f5c9a4658ac8663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:a0:9f:17:47:8b:0c:49:f0:b0:89:0b:d9:
7d:93:a8:7b:4b:0c:41:38:cc:9e:ef:06:54:9d:a2:
e1:9e:a9:60:37:e4:45:aa:58:e6:a7:76:b5:ef:77:
13:eb:bb:68:fb:a0:2c:53:55:0e:8e:21:b0:65:dd:
fd:8a:6e:80:49:b8:43:31:e5:26:82:56:1e:ba:3d:
ef:43:d1:9d:ac:0d:87:63:47:9a:8b:46:8b:cc:21:
fc:ca:8e:a9:98:18:32:52:7f:e7:24:1b:b9:48:58:
dd:47:06:0a:3c:96:82:f7:59:bd:b2:2e:65:4b:b3:
ab:28:5b:65:19:86:2c:4f:75:b7:1f:09:51:9b:0f:
e4:cf:d6:69:d8:47:6a:8a:c4:e3:3e:ce:be:77:b5:
f8:a4:3a:01:24:29:41:06:43:7f:f3:6e:ca:c7:b4:
4d:df:62:ee:6d:d1:d9:58:9d:ba:14:f0:85:be:13:
48:a8:3a:40:43:72:d2:98:ac:e7:54:83:35:7b:8c:
90:8e:f7:ba:d8:25:91:b5:be:32:d8:53:61:80:1a:
88:4d:85:d7:bf:d2:21:64:75:7d:f2:1a:8a:a9:81:
73:34:37:7e:0d:7b:8a:96:f6:91:cc:14:e2:82:a3:
05:d2:66:aa:fb:41:17:d7:04:b9:6f:7f:2c:a7:3a:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:56:E3:B7:13:C5:27:9F:DB:04:16:B6:7F:5C:9A:46:58:AC:86:63
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/aFbjtxPFJ5_bBBa2f1yaRlishmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.114.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:16:05:30:45:bf:55:ed:1c:14:fc:1d:f7:78:2b:e4:0a:da:
92:24:8d:be:a1:83:6c:fe:81:e2:c6:7e:9b:7b:f0:1d:45:a5:
07:24:58:2a:f8:20:b4:e0:83:e2:d3:62:5b:9f:8c:83:c9:0e:
f3:33:33:46:29:f0:69:0f:f2:fc:a4:f7:e4:8d:56:d0:c0:e3:
82:66:4e:89:93:79:6c:25:98:23:f6:21:05:96:ac:b2:07:96:
43:c1:2a:da:84:95:fb:a7:63:b3:04:b0:f5:55:d6:91:15:74:
e1:9f:e1:fe:13:fa:12:46:7c:59:2b:78:eb:e5:09:06:99:09:
5d:06:a2:0e:d2:85:04:3a:bc:bf:bb:ab:f4:ce:d6:a5:39:3a:
5b:e7:be:03:e3:40:67:57:c9:82:a0:3b:37:ef:d0:fe:db:a4:
29:fa:b3:f6:77:53:13:9e:90:88:2e:a2:8c:1f:0b:57:89:3c:
d3:70:3a:4b:5a:26:92:ec:af:9a:89:d9:75:ed:20:50:76:6a:
3f:2f:d6:fe:9e:88:05:f1:03:12:a3:be:6f:34:11:28:5c:e1:
fc:ba:dc:33:2d:f7:cf:64:bb:05:3d:f7:1a:66:c0:97:72:99:
94:2b:60:7a:e6:0e:c6:8f:b8:6d:e3:e3:e4:1f:16:07:f6:54:
be:13:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:07:56 2026 by rpki-client