Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/1-R5mS3vQxda14zkYTBdx-uss5s0.roa
File: 1-R5mS3vQxda14zkYTBdx-uss5s0.roa (raw, json)
Hash identifier: D/EpBBKxkeyfp01PRA3bZWqKbf3ZOlLqd0HjKXt5iCg=
Subject key identifier: F9:1E:66:4B:7B:D0:C5:D6:B5:E3:39:18:4C:17:71:FA:EB:2C:E6:CD
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019E1D1ACF750E4A92E9919E6CB6E9E9008A
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/1-R5mS3vQxda14zkYTBdx-uss5s0.roa
Signing time: Tue 12 May 2026 16:52:36 +0000
ROA not before: Tue 12 May 2026 16:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 178.239.116.0/24 maxlen: 24
178.239.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:1a:cf:75:0e:4a:92:e9:91:9e:6c:b6:e9:e9:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 12 16:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f91e664b7bd0c5d6b5e339184c1771faeb2ce6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:11:c2:4b:da:a0:4c:19:d7:32:64:a1:51:
2e:03:ba:4e:c4:26:c8:d2:54:09:a8:29:9c:93:b8:
8d:05:ff:34:60:42:d0:f4:92:ca:85:fc:80:92:f2:
65:77:bd:c0:f9:c9:99:eb:63:46:d5:7b:06:18:b3:
0f:9f:d6:fa:1f:e7:6b:db:9d:1c:6e:fc:bc:ae:c7:
af:5b:ea:6f:e8:54:b0:b6:fd:35:62:ea:b0:0b:12:
74:f7:54:db:c3:6a:93:a1:fa:96:f1:d6:c7:e7:a4:
ce:37:99:b6:fe:46:d0:24:d1:e5:43:30:5c:02:ee:
25:d7:a2:cc:16:69:cb:d2:19:45:f3:4f:6d:2e:12:
ce:8a:85:f3:74:ef:29:41:01:86:0c:31:3e:03:77:
2c:74:db:48:ef:cf:60:53:d6:3e:43:f0:47:fb:a6:
a4:23:8b:16:8f:1d:e3:8f:23:3c:3a:8d:5a:30:e2:
2e:1c:2a:3a:13:23:57:80:cb:57:42:a5:e8:30:ee:
11:b4:cd:ef:76:0c:63:47:7a:2b:12:a4:be:58:dd:
d7:51:db:93:3c:17:dc:12:0f:9f:87:9b:22:25:14:
e6:27:1c:7c:0a:08:12:2e:3a:b6:7c:73:ed:1e:1d:
4a:0b:bd:2e:d0:95:46:07:1f:e0:cf:ba:33:38:a0:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:66:4B:7B:D0:C5:D6:B5:E3:39:18:4C:17:71:FA:EB:2C:E6:CD
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/1-R5mS3vQxda14zkYTBdx-uss5s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.116.0/24
178.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ee:8c:1a:1f:01:a0:1e:34:c7:2f:28:1c:b7:22:4c:32:75:
a3:76:d3:ad:47:5b:6b:6f:fd:79:7a:6f:e1:ea:01:1c:b2:5a:
96:ff:ba:f2:bb:f8:b3:c4:73:9b:0b:a8:74:ad:10:22:0f:34:
26:48:c7:83:5d:12:d3:3c:ef:11:09:43:92:a6:27:89:1b:cb:
53:d6:03:a2:91:3f:f6:28:7e:c7:bd:70:2a:62:88:94:eb:4d:
bf:eb:9f:2d:ad:21:f0:aa:42:1f:68:e1:bc:99:ce:8f:9b:66:
12:e4:1e:57:9f:b8:5e:d6:c0:05:d4:41:0e:55:d6:06:a6:bd:
c4:f6:28:e1:d9:67:a6:c4:cd:fc:5a:2b:7e:fd:31:29:fb:9d:
a1:7b:8f:c0:4c:ba:e8:81:7d:5f:17:0a:41:3e:a4:ae:0b:b5:
cb:4a:ca:ac:d6:45:8b:2f:36:cd:be:98:f4:46:4f:16:6d:98:
bc:f0:2f:5e:3b:96:93:75:e3:af:1b:19:a4:ed:08:05:e6:af:
ac:23:69:4b:bc:74:87:2d:7e:5f:ed:2c:cc:f8:05:63:14:c2:
ea:ef:53:a6:f7:06:07:43:31:5d:6a:0f:a4:c3:f6:40:5e:ec:
a1:b9:1f:a0:da:38:51:4f:5b:d4:2f:06:6e:b4:0d:6b:ce:68:
fa:38:b6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:55 2026 by rpki-client