Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Y1ZlHKNCPrc7e79kBhfaNhMUDUw.roa
File: Y1ZlHKNCPrc7e79kBhfaNhMUDUw.roa (raw, json)
Hash identifier: IILen65zKF8k8x27v9Z9sgm6cdE9QyJkA40gfeC7wCs=
Subject key identifier: 63:56:65:1C:A3:42:3E:B7:3B:7B:BF:64:06:17:DA:36:13:14:0D:4C
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0D2F6F3B62A2C0151EBC839F1AF080FB0
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Y1ZlHKNCPrc7e79kBhfaNhMUDUw.roa
Signing time: Thu 24 Sep 2026 10:29:54 +0000
ROA not before: Thu 24 Sep 2026 10:29:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 178.239.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:f6:f3:b6:2a:2c:01:51:eb:c8:39:f1:af:08:0f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 24 10:29:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6356651ca3423eb73b7bbf640617da3613140d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:fe:dc:8d:9a:d5:6e:ca:13:27:a7:af:f7:
64:ed:8b:80:49:f8:b3:80:11:2a:9b:2d:8e:b2:79:
41:5f:9a:03:89:fc:ae:2a:dd:f3:d9:9e:12:ff:2d:
a0:df:e7:39:b5:30:90:2d:8c:e1:a2:3d:7c:fa:49:
6e:2c:6b:9b:24:df:e0:dd:c1:69:3b:eb:33:7b:1b:
08:e2:85:d1:ff:83:7f:10:0c:45:14:9c:dd:ee:04:
a4:c2:d7:73:7f:5a:8d:e4:4a:30:57:19:ae:3e:14:
77:52:30:e3:50:34:62:77:0a:c5:65:6f:19:53:17:
2d:19:af:8f:e8:e4:0a:81:4c:0c:1a:40:b6:87:72:
3d:bd:a0:ce:ee:f1:f5:b3:79:0e:47:02:da:7a:fe:
f4:b4:b1:65:f1:f7:01:f2:54:b1:d2:ef:da:52:82:
0e:2b:c0:03:3e:d1:74:11:f8:bc:40:08:e6:d1:22:
0a:c4:3e:4a:62:f4:88:00:b4:68:b0:3d:c1:52:17:
06:04:2a:ee:19:e3:eb:3a:1c:0c:0b:b9:d4:e8:bd:
54:33:7c:20:d9:22:79:d3:98:73:c0:43:2c:b9:77:
e8:8c:26:d8:72:2a:96:5b:b0:39:e8:4d:a3:45:fd:
14:b8:33:1e:ee:3c:77:1d:07:a1:db:bb:e1:90:0b:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:56:65:1C:A3:42:3E:B7:3B:7B:BF:64:06:17:DA:36:13:14:0D:4C
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Y1ZlHKNCPrc7e79kBhfaNhMUDUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.116.0/24
Signature Algorithm: sha256WithRSAEncryption
be:df:ed:50:a5:25:0e:bc:f6:76:c1:3d:6d:e5:ae:fb:41:8a:
d9:c7:7f:27:24:4f:55:aa:3e:56:ac:8f:0f:9e:e6:ad:41:f3:
7d:28:05:7d:e5:61:49:ae:6c:07:e8:74:84:a1:a2:a5:55:8e:
67:1a:fe:28:39:8a:fb:47:5c:a9:9d:f9:55:ff:a8:af:fa:a1:
77:28:ae:51:6d:8e:e1:af:0e:15:4d:a4:dd:d0:b1:0b:b5:b0:
ed:f7:d9:c0:6c:9c:2d:88:fa:9c:bf:9e:93:94:9a:76:44:15:
56:74:0c:3b:8e:28:21:4c:a3:b3:ef:e1:78:6d:8f:81:39:66:
27:4a:49:5b:c2:d6:a6:4d:3f:17:65:c0:36:fc:de:ea:3d:8f:
65:a0:3a:71:20:f6:0e:63:86:5c:c5:f0:03:f3:37:ad:b8:38:
18:7b:44:80:0a:e6:5a:44:cb:a5:5f:9b:57:35:31:e8:96:58:
5f:f7:81:1b:3c:bb:dd:e8:ff:4f:3f:f9:35:9b:91:71:28:f3:
0c:23:ff:cf:69:3b:c5:d5:45:de:fb:8c:e8:13:78:74:78:36:
ac:2c:4c:72:2d:78:4d:de:37:47:2a:4b:68:4c:03:82:53:e8:
02:76:1d:d4:5e:af:cd:81:10:67:ca:b2:f1:5e:40:83:1a:3c:
2c:6d:ed:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDS9vO2KiwBUevIOfGvCA+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwOTI0MTAyOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzU2NjUxY2EzNDIzZWI3M2I3YmJmNjQwNjE3ZGEzNjEzMTQwZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulT+3I2a1W7KEyenr/dk7YuASfiz
gBEqmy2OsnlBX5oDifyuKt3z2Z4S/y2g3+c5tTCQLYzhoj18+kluLGubJN/g3cFp
O+szexsI4oXR/4N/EAxFFJzd7gSkwtdzf1qN5EowVxmuPhR3UjDjUDRidwrFZW8Z
UxctGa+P6OQKgUwMGkC2h3I9vaDO7vH1s3kORwLaev70tLFl8fcB8lSx0u/aUoIO
K8ADPtF0Efi8QAjm0SIKxD5KYvSIALRosD3BUhcGBCruGePrOhwMC7nU6L1UM3wg
2SJ505hzwEMsuXfojCbYciqWW7A56E2jRf0UuDMe7jx3HQeh27vhkAvovwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGNWZRyjQj63O3u/ZAYX2jYTFA1MMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvWTFabEhLTkNQcmM3ZTc5a0JoZmFOaE1VRFV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu90MA0G
CSqGSIb3DQEBCwUAA4IBAQC+3+1QpSUOvPZ2wT1t5a77QYrZx38nJE9Vqj5WrI8P
nuatQfN9KAV95WFJrmwH6HSEoaKlVY5nGv4oOYr7R1ypnflV/6iv+qF3KK5RbY7h
rw4VTaTd0LELtbDt99nAbJwtiPqcv56TlJp2RBVWdAw7jighTKOz7+F4bY+BOWYn
SklbwtamTT8XZcA2/N7qPY9loDpxIPYOY4ZcxfAD8zetuDgYe0SACuZaRMulX5tX
NTHollhf94EbPLvd6P9PP/k1m5FxKPMMI//PaTvF1UXe+4zoE3h0eDasLExyLXhN
3jdHKktoTAOCU+gCdh3UXq/NgRBnyrLxXkCDGjwsbe3c
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:58:01 2026 by rpki-client