Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wP8YndEx-IZwFt0QR1in8DB8dGU.roa
File: wP8YndEx-IZwFt0QR1in8DB8dGU.roa (raw, json)
Hash identifier: Z+y13b7iMj2+kaOd8vLdmPLnWJSzP0op2SPci/FSbxQ=
Subject key identifier: C0:FF:18:9D:D1:31:F8:86:70:16:DD:10:47:58:A7:F0:30:7C:74:65
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0B4B888620491CF4DBBA9FF4507A9D5C6
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wP8YndEx-IZwFt0QR1in8DB8dGU.roa
Signing time: Fri 18 Sep 2026 13:33:07 +0000
ROA not before: Fri 18 Sep 2026 13:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 85.239.148.0/24 maxlen: 24
92.62.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:b8:88:62:04:91:cf:4d:bb:a9:ff:45:07:a9:d5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 18 13:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0ff189dd131f8867016dd104758a7f0307c7465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:a6:1a:ef:ba:bb:9b:55:55:6e:67:24:1d:
07:29:3f:94:22:a9:f4:b1:16:e1:a8:63:66:14:57:
fe:93:07:93:c3:34:d0:82:a0:f4:6c:f2:d4:89:95:
36:a8:82:13:8c:78:11:93:ff:c5:cb:fb:73:af:e9:
2a:05:4c:4e:da:0c:22:62:e5:29:f0:f9:d8:0a:a7:
99:d9:5b:d9:bf:dd:e9:ea:d5:a0:68:ae:c0:47:ae:
c8:a0:9e:04:d9:18:3c:dc:ef:b1:fc:2b:55:15:2e:
0a:0b:14:d1:f1:c6:ab:5a:83:78:e2:d8:56:77:37:
55:f5:b4:c9:ed:62:24:80:78:45:af:72:af:08:8b:
6d:8f:ce:58:ad:b5:3e:bd:0d:54:13:cc:d7:88:73:
63:95:df:44:2e:df:d8:6d:0a:3a:11:69:42:a5:2a:
cf:e0:c4:6c:56:ae:b7:30:07:2c:a7:f4:35:64:9c:
69:1b:80:68:95:b5:19:3d:c1:86:6d:18:f8:e5:65:
10:36:c3:2f:a5:b0:db:bb:0c:29:c8:cf:ff:03:c0:
a7:1b:82:46:22:36:d3:2b:3e:7a:6d:7b:ac:6f:bf:
db:97:7b:9f:aa:14:ab:70:7e:77:79:dc:0d:71:af:
da:33:f5:38:25:8b:5a:88:20:b5:9c:0b:3a:d9:d3:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:18:9D:D1:31:F8:86:70:16:DD:10:47:58:A7:F0:30:7C:74:65
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wP8YndEx-IZwFt0QR1in8DB8dGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/24
92.62.253.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1d:5d:e9:2d:a1:d1:15:ad:f8:f7:03:d2:2d:83:73:95:6e:
99:ee:2c:28:24:00:16:95:35:c3:85:63:52:16:1c:b4:35:77:
dd:34:6d:de:9a:90:0e:80:c9:e2:8c:19:0f:36:fb:fb:5e:41:
44:9c:b0:96:ee:e2:84:7d:1e:a4:d7:94:5f:77:46:cd:2f:81:
09:9b:5e:1a:99:c1:0f:74:e2:d1:32:a2:e8:d7:42:d2:01:54:
ba:78:d3:00:f8:c1:ad:b8:e5:86:94:d9:74:35:b9:3e:45:d6:
f7:66:67:12:aa:31:83:cd:79:8b:2c:07:e2:7c:ff:fb:67:e0:
3a:93:c3:5a:df:45:51:d8:79:55:06:b0:47:a2:78:4d:73:d1:
df:b1:d4:cf:20:0d:f3:da:2d:30:91:c3:e6:2a:c4:14:69:00:
1f:21:65:9a:7a:33:13:95:bd:00:85:fe:fb:25:ee:50:81:c3:
9c:37:62:3e:3d:16:15:70:99:d0:9f:a7:67:a7:3f:8b:ef:69:
06:4a:1e:9d:95:63:ae:7f:e3:6e:ff:97:b7:8a:79:af:d7:34:
42:25:f0:07:1b:b7:23:5d:df:bc:2a:6b:c6:4c:12:7d:c0:39:
d4:85:eb:b3:e3:c9:af:3a:78:fd:e0:3c:1f:4e:fc:1d:5c:55:
b2:06:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:54:07 2026 by rpki-client