Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/324xQMHqfVn48kcFlWiVdffHgTs.roa
File: 324xQMHqfVn48kcFlWiVdffHgTs.roa (raw, json)
Hash identifier: qXkCqpcT0IZv6rheVcs5oNhxEGv8i/COJn1bP4KXOwU=
Subject key identifier: DF:6E:31:40:C1:EA:7D:59:F8:F2:47:05:95:68:95:75:F7:C7:81:3B
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019E1825E50015A13F48A2761DA3548D5D16
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/324xQMHqfVn48kcFlWiVdffHgTs.roa
Signing time: Mon 11 May 2026 17:46:37 +0000
ROA not before: Mon 11 May 2026 17:46:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153371
IP address blocks: 178.239.124.0/24 maxlen: 24
178.239.125.0/24 maxlen: 24
178.239.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:18:25:e5:00:15:a1:3f:48:a2:76:1d:a3:54:8d:5d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 11 17:46:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df6e3140c1ea7d59f8f2470595689575f7c7813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:50:8a:17:7a:cd:b1:7e:03:bb:94:4f:93:
fd:25:88:f1:1d:bc:fd:f9:c7:6b:71:23:16:19:4d:
a2:aa:04:65:e1:2f:18:31:57:24:68:68:c4:a0:4b:
60:09:26:09:b3:4f:71:bb:d7:51:5b:d6:02:17:f8:
98:4d:4a:61:03:fa:87:f5:0b:e6:99:95:47:7e:08:
12:c1:99:08:a2:f0:fd:1f:ca:96:35:c5:ad:2d:75:
68:a0:db:8a:a1:2e:98:4f:05:d9:f8:76:b2:b1:72:
0a:dd:73:ce:29:d4:93:63:3a:3d:ed:cb:6a:3e:07:
6c:07:d1:f8:88:2e:b4:47:c4:e5:4e:54:1a:8e:55:
fb:41:34:5c:5e:d0:ed:71:cd:e6:a4:d2:bb:92:6f:
2f:92:df:d4:e0:a7:90:88:a7:1e:84:0a:dd:17:6e:
2e:26:3d:99:4c:22:97:48:4c:fa:ba:c6:87:d7:4e:
87:07:b2:f4:a7:0f:fd:ba:b4:e2:0c:d4:fa:f6:3d:
c8:3a:73:fa:e7:d1:8d:40:cf:50:2d:45:8c:49:c9:
41:f2:e8:b3:f6:d7:22:9c:f6:74:f0:01:ac:8d:58:
0f:f1:c7:3b:90:f9:87:9b:c7:3a:5c:d7:55:af:6f:
a6:e5:aa:31:8e:6a:39:76:16:4a:0f:56:12:66:45:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6E:31:40:C1:EA:7D:59:F8:F2:47:05:95:68:95:75:F7:C7:81:3B
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/324xQMHqfVn48kcFlWiVdffHgTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.124.0-178.239.126.255
Signature Algorithm: sha256WithRSAEncryption
8b:29:7c:9c:7d:fa:7d:64:29:2b:29:1d:52:4e:8a:22:18:70:
4b:21:94:7c:46:72:bc:86:da:ec:2d:7c:bc:8e:6c:79:87:40:
18:21:6c:0a:3e:a0:87:eb:68:c5:2d:e1:0e:1b:65:14:45:58:
7b:ce:d8:36:99:58:95:5b:79:4e:25:c3:a9:11:7c:c3:72:69:
ab:c1:a4:a6:09:89:b1:54:78:48:55:8c:d1:7d:9f:50:f3:31:
6e:f4:6a:67:b3:41:aa:0d:77:5f:84:3e:65:f8:72:d8:3d:03:
d3:4d:8d:e0:dc:95:ee:cc:18:b9:3a:48:50:cf:f3:c8:1a:7d:
79:19:ba:5d:f0:89:bb:48:2a:6e:f2:ca:91:5d:d0:ea:52:2e:
5d:9b:a7:ea:47:d5:a0:29:9e:fe:5e:33:2e:f5:6c:8a:b9:d2:
cf:ff:34:21:9c:98:31:3b:7e:78:8a:0f:80:a5:f6:d0:25:86:
8b:02:37:05:2a:8a:da:43:a2:99:df:38:66:d5:62:e2:2e:d7:
ba:5b:eb:16:57:70:ca:2f:14:07:60:b8:24:67:a3:9a:07:86:
45:cb:38:a3:74:f8:6f:c0:6b:69:df:21:84:f5:09:8c:cf:07:
9d:a8:5c:c4:b3:13:f2:16:b2:cd:3f:f7:94:34:75:47:de:39:
e5:9f:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:52 2026 by rpki-client