Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vNjUtTl5TDF7FLt_LUcWXa6UMv0.roa
File: vNjUtTl5TDF7FLt_LUcWXa6UMv0.roa (raw, json)
Hash identifier: dq4TnmZiEM7MrzwPhSEuA5J/9VcYxfK23x7Z1EsSn4o=
Subject key identifier: BC:D8:D4:B5:39:79:4C:31:7B:14:BB:7F:2D:47:16:5D:AE:94:32:FD
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019C55D8BB5FFB57F34B84E037316E22A09C
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vNjUtTl5TDF7FLt_LUcWXa6UMv0.roa
Signing time: Fri 13 Feb 2026 07:13:13 +0000
ROA not before: Fri 13 Feb 2026 07:13:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201398
IP address blocks: 178.239.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:d8:bb:5f:fb:57:f3:4b:84:e0:37:31:6e:22:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 13 07:13:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcd8d4b539794c317b14bb7f2d47165dae9432fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:7b:75:5e:b6:0b:d6:23:8b:b7:04:e6:5d:
80:f0:f9:d4:29:93:a9:7a:ac:95:51:9a:08:ce:e2:
51:42:98:7e:61:9f:7f:35:3c:8c:aa:e1:f6:34:90:
d7:e3:d3:41:2a:6d:97:92:f7:3f:54:9e:02:ba:62:
90:29:1a:d5:ad:48:5b:2f:2e:4a:af:a9:71:58:89:
7f:78:cc:22:6b:f2:c1:57:b1:f5:5b:96:05:96:86:
f3:b8:38:12:72:59:70:b7:2c:00:6f:e5:a2:56:01:
80:90:53:fd:39:e9:1f:55:19:19:4e:a4:b9:71:ac:
aa:50:d1:53:1b:4d:db:b3:ca:0d:95:aa:73:01:49:
4b:35:09:c5:2b:b5:dc:4d:0c:43:c8:df:c4:3a:60:
8c:a3:c8:4e:12:a1:8a:4b:39:07:c0:58:9c:ba:d6:
b5:5e:f6:66:ef:68:83:e6:be:e3:82:c3:83:f2:31:
f2:fa:e3:93:89:9e:1e:2e:8f:f6:ee:51:55:f0:57:
74:38:d6:f0:a0:41:47:5e:d1:15:5e:d9:d5:db:2e:
8d:ab:77:66:42:10:af:47:fe:66:ad:6b:43:4e:de:
3d:42:3e:9d:76:b4:11:22:9a:e8:85:6f:48:a7:7c:
80:b3:60:df:81:28:38:be:c3:76:78:0a:e5:37:39:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:D4:B5:39:79:4C:31:7B:14:BB:7F:2D:47:16:5D:AE:94:32:FD
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vNjUtTl5TDF7FLt_LUcWXa6UMv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
48:44:c2:06:15:25:cf:19:59:63:70:79:88:1a:32:e6:1b:67:
eb:51:c9:25:10:ce:74:79:df:5c:b9:ac:d1:89:3d:a4:ce:62:
19:f9:c9:72:c5:ae:22:fb:fc:ed:1e:04:13:f0:c3:37:69:8f:
6d:c1:01:86:c5:fb:c1:6e:17:42:1e:54:b5:df:8c:fa:2e:6a:
c9:b8:cf:05:51:a8:cc:ce:b5:fb:0a:69:94:6f:c3:f4:21:87:
05:55:08:a4:da:7e:3e:1d:1a:13:b0:ef:b9:4a:c9:43:5c:71:
8d:29:e6:a5:c7:93:9c:d9:31:3a:43:7d:d7:b4:c5:f4:3a:0f:
71:61:9f:d2:b7:81:f8:02:6a:04:bd:8b:68:c5:6e:17:10:67:
a6:23:3d:d4:2a:4a:b5:16:2d:84:b3:17:c7:31:3d:ac:6e:e1:
22:f5:9b:10:d2:ba:cf:28:e3:b0:be:fd:93:d0:1c:34:6a:29:
05:f7:74:30:46:3a:d3:5f:c8:46:84:67:5d:a8:06:e1:f3:0c:
25:a0:9f:11:a0:43:6b:06:90:7b:60:2b:db:bd:88:78:d3:db:
f1:40:13:37:af:c8:f9:2f:cd:0b:98:f8:7d:e4:81:ee:24:ea:
14:7e:60:84:6a:b2:17:fa:76:f2:73:a5:54:3f:04:c2:3e:55:
fd:77:f1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:33 2026 by rpki-client