Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vqxzXB44hUs0RUDOgbgowxjjxtA.roa
File: vqxzXB44hUs0RUDOgbgowxjjxtA.roa (raw, json)
Hash identifier: 1sxdbVQkq0D+I5ITMd1NWYN6+uOz3z21dA63+JaajaI=
Subject key identifier: BE:AC:73:5C:1E:38:85:4B:34:45:40:CE:81:B8:28:C3:18:E3:C6:D0
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019D8D8422D0433F7D6E062F8799BB780128
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vqxzXB44hUs0RUDOgbgowxjjxtA.roa
Signing time: Tue 14 Apr 2026 19:42:20 +0000
ROA not before: Tue 14 Apr 2026 19:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215287
IP address blocks: 178.239.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:84:22:d0:43:3f:7d:6e:06:2f:87:99:bb:78:01:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Apr 14 19:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beac735c1e38854b344540ce81b828c318e3c6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:18:86:b6:a4:82:09:ac:ab:63:b8:96:01:
88:65:d5:98:46:b5:96:e7:d3:f0:35:e2:e1:be:fa:
9c:4f:29:5f:24:b8:af:de:51:06:66:7f:2e:00:34:
55:c4:52:6d:c2:36:05:6c:ae:d8:59:37:c9:2d:a0:
ad:fd:0e:df:78:1d:1f:61:45:fd:e8:a1:42:aa:cc:
75:82:82:46:b8:0a:93:e0:d0:e7:10:66:ef:bf:9e:
f7:22:18:57:b4:9a:ae:04:33:bd:af:2c:ce:ea:bc:
c3:ea:dc:2b:9b:f4:5b:09:ed:b9:df:46:87:a6:da:
d0:c5:09:b4:47:c8:73:fe:cb:2b:fc:31:1e:98:38:
20:6a:33:b1:57:ca:2c:b5:e4:ac:35:c5:d6:ef:3f:
5b:14:6a:26:df:26:97:8a:f7:39:49:25:18:66:f7:
5b:06:d2:c7:0a:70:ec:57:55:08:4f:b3:00:c0:ac:
41:17:9a:b3:b4:07:66:e8:29:dc:b2:59:eb:27:36:
4c:e9:d3:57:aa:1e:a5:aa:35:10:3c:0c:d3:54:46:
7d:c9:00:b6:1a:23:07:91:9f:f6:06:f1:92:33:a0:
44:b4:24:f3:35:ac:6a:5e:b6:88:8d:2a:cb:f9:7e:
70:9e:50:42:e4:ef:17:27:06:e5:d3:e4:9f:e5:02:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AC:73:5C:1E:38:85:4B:34:45:40:CE:81:B8:28:C3:18:E3:C6:D0
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vqxzXB44hUs0RUDOgbgowxjjxtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f2:a0:79:19:ac:4e:7f:41:6f:93:e5:6d:6d:07:2d:4c:f9:
a1:8a:89:ac:92:9e:72:ec:c7:7d:ed:01:d9:53:a8:d0:7a:80:
eb:7e:55:57:de:33:05:42:bb:37:d4:3d:19:5e:a3:b2:c8:2f:
93:44:6c:f3:65:ee:bd:a8:4e:91:73:f0:09:c3:89:79:d6:35:
a8:4b:8c:10:56:e2:f7:83:fe:e3:d0:7a:38:96:11:fd:8c:fd:
f3:ea:00:75:1c:b1:0d:31:5f:07:1d:00:eb:2a:dd:1d:9d:97:
38:61:e7:36:da:47:66:c1:b6:75:99:f1:cf:44:fe:96:d8:e1:
1c:f8:52:71:d8:6d:ea:42:eb:db:4a:c4:2b:47:39:c2:dd:5f:
e9:d6:79:05:95:d2:99:4d:e9:45:6a:50:f7:b8:09:54:02:31:
10:4a:e5:08:7f:c0:39:42:46:8a:26:60:e5:7d:73:d7:bb:40:
d2:96:d0:ec:3f:b4:fc:a7:68:33:72:01:21:09:97:41:84:85:
6e:ec:75:9b:45:e7:c3:d6:67:a3:50:c1:eb:1d:fb:92:58:ab:
b6:53:d8:ee:1e:86:b6:80:ad:14:1f:fb:7e:b5:bc:d1:92:4e:
a2:1e:84:1e:ce:92:18:a7:77:7a:15:9c:70:61:02:0f:3c:0b:
45:4f:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:08 2026 by rpki-client