Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/awfi8GNpERXoNT4dHxmnOoSWZCU.roa
File: awfi8GNpERXoNT4dHxmnOoSWZCU.roa (raw, json)
Hash identifier: sfLXYI7VmgX7KWoYDBFYlvBM2HL2968+2uvLi7gk0MY=
Subject key identifier: 6B:07:E2:F0:63:69:11:15:E8:35:3E:1D:1F:19:A7:3A:84:96:64:25
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0B4BA5DC8B44A5E941942BF38239206CF
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/awfi8GNpERXoNT4dHxmnOoSWZCU.roa
Signing time: Fri 18 Sep 2026 13:35:07 +0000
ROA not before: Fri 18 Sep 2026 13:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218869
IP address blocks: 85.239.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:ba:5d:c8:b4:4a:5e:94:19:42:bf:38:23:92:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 18 13:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b07e2f063691115e8353e1d1f19a73a84966425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:27:bc:1b:d9:fd:93:42:81:35:9b:a8:da:
1b:44:bb:cc:a3:41:1e:d6:22:1b:d1:b0:5d:90:94:
a7:47:45:99:63:45:7a:6b:9c:c8:2a:84:75:3a:ce:
a2:66:25:ce:a9:57:a1:b1:8e:79:9d:a5:e9:39:96:
b6:3c:92:4f:30:7d:a5:bc:b3:39:b3:bf:fc:a2:93:
4b:26:be:21:3e:e4:af:a6:00:13:55:de:ca:56:6c:
76:7a:0a:2d:53:f8:55:85:01:61:95:6f:d2:df:98:
20:62:ed:25:5c:a5:a0:4b:3f:e1:97:a7:ac:16:58:
c1:09:5e:f1:d5:36:f5:cb:7d:8d:6f:87:a8:e8:74:
18:19:3f:81:39:b7:d6:6f:1d:30:34:87:20:10:6d:
1f:ef:99:a9:f3:5f:ae:f9:b0:dd:38:f6:0a:6c:3b:
01:34:b7:71:be:94:25:44:a3:97:e9:33:51:54:ec:
dc:06:02:2c:b7:10:ca:67:a2:37:d6:a0:77:1e:4c:
dd:3b:7c:0f:fe:ab:1d:e8:b4:d8:d0:41:ad:b2:1a:
c4:96:b0:af:f6:d7:1f:7a:d6:65:52:24:a4:53:c1:
83:24:ef:6a:11:fa:60:2e:fe:dc:9f:3a:1a:d5:c4:
0b:75:88:ae:c8:ad:16:e4:2f:e3:13:ff:e1:07:16:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:E2:F0:63:69:11:15:E8:35:3E:1D:1F:19:A7:3A:84:96:64:25
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/awfi8GNpERXoNT4dHxmnOoSWZCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.145.0/24
Signature Algorithm: sha256WithRSAEncryption
02:84:c7:6a:58:7b:4e:83:07:16:b0:40:05:d8:7a:b4:ed:32:
5d:5a:bd:5f:17:6b:b2:35:61:11:44:c7:e4:42:49:e8:60:be:
d7:23:47:2e:f6:e4:29:a2:08:f3:26:c6:8d:9b:a3:e3:0d:77:
a5:ef:72:76:99:17:f8:94:29:78:f6:ef:40:c9:db:e1:86:b0:
12:be:1a:cc:16:8a:6b:1b:17:1d:60:00:b3:78:d3:78:f8:3e:
fc:c3:59:35:69:e4:9f:c9:6b:cb:c8:08:f0:e7:d0:80:c3:eb:
73:0c:92:20:b4:2b:1e:f5:cc:a5:df:ee:9b:31:8b:be:c1:bc:
4f:96:07:8a:7d:86:c8:22:4d:1e:d8:4e:f5:30:4c:db:8d:18:
fc:26:83:8a:84:9c:26:c0:d5:b5:55:2b:8b:98:e3:bb:bc:f0:
28:ff:2a:fc:92:03:a8:0e:3b:82:2a:b5:3b:d3:b5:b3:37:f2:
06:a0:79:77:73:05:a1:bb:f8:cc:60:d2:72:84:dd:c7:5a:da:
2c:2a:2d:71:c5:1f:a6:35:7c:d7:9e:74:b4:80:1e:cc:3e:4b:
db:ea:a1:8d:ab:57:28:85:df:02:e0:50:92:ec:a3:18:8b:b6:
68:8b:0e:9e:eb:b7:1b:99:9d:ee:ae:7c:c2:a2:eb:f1:77:7b:
ba:6e:03:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC0ul3ItEpelBlCvzgjkgbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwOTE4MTMzNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjA3ZTJmMDYzNjkxMTE1ZTgzNTNlMWQxZjE5YTczYTg0OTY2NDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7knvBvZ/ZNCgTWbqNobRLvMo0Ee
1iIb0bBdkJSnR0WZY0V6a5zIKoR1Os6iZiXOqVehsY55naXpOZa2PJJPMH2lvLM5
s7/8opNLJr4hPuSvpgATVd7KVmx2egotU/hVhQFhlW/S35ggYu0lXKWgSz/hl6es
FljBCV7x1Tb1y32Nb4eo6HQYGT+BObfWbx0wNIcgEG0f75mp81+u+bDdOPYKbDsB
NLdxvpQlRKOX6TNRVOzcBgIstxDKZ6I31qB3HkzdO3wP/qsd6LTY0EGtshrElrCv
9tcfetZlUiSkU8GDJO9qEfpgLv7cnzoa1cQLdYiuyK0W5C/jE//hBxYEeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGsH4vBjaREV6DU+HR8ZpzqElmQlMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvYXdmaThHTnBFUlhvTlQ0ZEh4bW5Pb1NXWkNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe+RMA0G
CSqGSIb3DQEBCwUAA4IBAQAChMdqWHtOgwcWsEAF2Hq07TJdWr1fF2uyNWERRMfk
QknoYL7XI0cu9uQpogjzJsaNm6PjDXel73J2mRf4lCl49u9AydvhhrASvhrMFopr
GxcdYACzeNN4+D78w1k1aeSfyWvLyAjw59CAw+tzDJIgtCse9cyl3+6bMYu+wbxP
lgeKfYbIIk0e2E71MEzbjRj8JoOKhJwmwNW1VSuLmOO7vPAo/yr8kgOoDjuCKrU7
07WzN/IGoHl3cwWhu/jMYNJyhN3HWtosKi1xxR+mNXzXnnS0gB7MPkvb6qGNq1co
hd8C4FCS7KMYi7Zoiw6e67cbmZ3urnzCouvxd3u6bgOe
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:54 2026 by rpki-client