Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Vjsg4GKxUQqtxQeVu_4A7w2dyiY.roa
File: Vjsg4GKxUQqtxQeVu_4A7w2dyiY.roa (raw, json)
Hash identifier: BzuZbj4A1TctMQ0+feeDZadIKwWRebAO7nAI3IdZkos=
Subject key identifier: 56:3B:20:E0:62:B1:51:0A:AD:C5:07:95:BB:FE:00:EF:0D:9D:CA:26
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019F8E02C6D62E6552766CCEC1F85F8BE444
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Vjsg4GKxUQqtxQeVu_4A7w2dyiY.roa
Signing time: Thu 23 Jul 2026 08:06:14 +0000
ROA not before: Thu 23 Jul 2026 08:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 85.239.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:02:c6:d6:2e:65:52:76:6c:ce:c1:f8:5f:8b:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 23 08:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=563b20e062b1510aadc50795bbfe00ef0d9dca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:41:13:eb:53:f1:e4:82:6e:25:3d:36:bc:5a:
11:2a:b1:f7:3d:ed:cd:f1:c0:36:9b:d2:40:18:e3:
a6:63:5b:a6:c4:cb:ad:66:78:00:11:61:19:dc:99:
41:81:5a:28:73:64:fe:76:ab:a3:b9:f0:46:d7:b8:
6c:bb:47:de:53:ac:4e:65:c5:9a:b2:7c:86:cc:17:
74:cd:bf:37:ba:c5:5f:c1:73:1e:a9:07:a4:61:0f:
61:e1:c1:bb:bd:0f:55:92:3a:20:10:6d:b7:03:4e:
eb:71:6d:9b:9d:a1:2f:fc:eb:1e:8b:9b:43:f8:6b:
a9:c9:54:e3:cf:fb:20:4f:f0:8e:d5:fd:8e:34:b9:
f1:b7:fd:d0:11:c2:19:6e:f2:fb:66:72:a2:73:01:
2b:f1:99:14:49:45:d2:24:97:2b:0d:95:5a:70:ba:
11:2e:e0:ea:c0:8a:90:bb:e8:74:34:9b:ba:e3:7d:
43:17:1d:4c:6d:dc:15:f5:f8:2e:e7:6c:5e:ee:8b:
fc:3a:ba:a0:a4:e1:40:dc:5a:f9:a2:6e:e6:d5:90:
e4:b6:ec:2e:f5:d9:c7:4f:89:4a:e4:75:77:aa:1f:
b5:03:6b:2f:df:e1:96:a2:a2:2c:33:fa:1f:47:6f:
b5:39:2e:fb:a7:8d:b8:78:59:c6:75:cb:09:01:7b:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3B:20:E0:62:B1:51:0A:AD:C5:07:95:BB:FE:00:EF:0D:9D:CA:26
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Vjsg4GKxUQqtxQeVu_4A7w2dyiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
50:84:17:60:82:d7:16:eb:25:15:3b:17:da:24:d0:61:20:07:
f1:2b:fe:8d:56:b9:c2:8d:37:fb:fe:d3:d7:bc:d6:d9:5c:b4:
f7:96:d2:de:c2:ac:cb:77:89:d4:bb:c8:3b:6b:89:f8:17:71:
30:f4:c4:e3:b1:af:d3:05:25:a1:8d:8e:d5:25:46:10:eb:33:
3c:59:98:dc:f5:bc:5a:a2:f4:c5:43:05:e1:d7:35:49:cd:6e:
ef:2d:6e:30:e6:a9:cf:ff:7d:97:66:02:e0:af:8d:1f:78:cc:
40:ba:b2:b7:6b:12:da:4c:c8:2f:ea:df:eb:7c:64:5f:5e:99:
53:67:65:19:8b:cb:1f:21:a6:7e:b6:ee:73:19:03:09:d7:1a:
52:bb:5e:cc:b2:20:36:78:ae:bd:d7:32:f8:30:7b:70:e7:9a:
c3:4a:d0:82:03:b3:97:5d:33:30:5f:9e:b5:68:94:47:cb:8f:
77:bc:0c:ce:f3:0d:61:69:4e:9c:ec:dc:1d:34:7b:97:c4:28:
22:7e:34:0f:b6:77:cb:b8:6e:95:1d:7c:7e:61:02:0d:b7:41:
ff:80:2f:91:24:29:fb:a8:97:33:f4:58:0a:06:5b:81:0d:02:
48:5b:6a:2c:00:61:e3:82:eb:bd:3e:e1:46:60:a7:9e:65:5a:
91:e9:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:19:32 2026 by rpki-client