Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/j3a0sRq26MNn8ZdfuU71xfvtTs8.roa
File: j3a0sRq26MNn8ZdfuU71xfvtTs8.roa (raw, json)
Hash identifier: zNR5DaWhb8qk35wDto3mhP0mtmbvM+fNrllUSLzcvSk=
Subject key identifier: 8F:76:B4:B1:1A:B6:E8:C3:67:F1:97:5F:B9:4E:F5:C5:FB:ED:4E:CF
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0C41A8A099B8447C66BDCF45A001E21C0
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/j3a0sRq26MNn8ZdfuU71xfvtTs8.roa
Signing time: Mon 21 Sep 2026 13:14:28 +0000
ROA not before: Mon 21 Sep 2026 13:14:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 85.239.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:1a:8a:09:9b:84:47:c6:6b:dc:f4:5a:00:1e:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 21 13:14:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f76b4b11ab6e8c367f1975fb94ef5c5fbed4ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:d1:92:a8:4e:05:03:13:83:3e:e5:24:99:
ee:d9:43:d1:0c:90:73:b1:56:28:81:ce:90:4e:7e:
0a:cb:e9:5f:45:cd:44:ba:e6:23:ad:4f:d9:db:ad:
30:52:d2:07:ef:72:a9:4f:57:7a:aa:7d:cd:1f:bd:
55:b7:52:f1:b7:22:68:6e:e4:b3:9e:48:b2:8c:d7:
02:23:a8:ec:47:71:95:8e:8e:28:00:2e:9b:2f:25:
78:fe:a5:42:e7:bf:f5:13:3b:21:04:40:ed:83:d7:
1f:02:06:79:36:a7:4d:51:83:42:34:af:7a:5b:cc:
08:14:07:bb:69:50:89:5c:e1:d8:cf:4e:16:b0:bf:
de:5a:02:26:ed:4f:0f:c4:c1:0e:26:b2:eb:79:d6:
7a:78:fb:eb:75:c4:31:98:20:f2:91:8e:36:da:38:
5f:76:94:47:54:6e:79:9c:55:af:78:e1:7a:20:be:
c9:11:30:20:61:70:a1:9b:39:af:c9:1a:d7:37:7f:
78:69:d7:d3:2a:20:a4:6b:89:36:a6:ca:78:73:2b:
9f:03:ac:a3:2f:20:ad:f1:c6:1e:ad:a0:ec:17:20:
9e:a5:11:b5:09:ed:1f:db:f8:9a:22:06:e1:59:58:
ad:55:06:ca:35:dd:17:25:63:e7:ba:80:b4:20:79:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:B4:B1:1A:B6:E8:C3:67:F1:97:5F:B9:4E:F5:C5:FB:ED:4E:CF
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/j3a0sRq26MNn8ZdfuU71xfvtTs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.152.0/24
Signature Algorithm: sha256WithRSAEncryption
25:78:96:7c:63:69:58:15:b7:a6:08:cf:39:ec:ca:c4:85:94:
48:e1:71:99:71:77:0e:21:4b:05:44:fa:68:7e:71:8d:93:76:
07:b9:7a:68:17:1d:d5:46:fd:20:cc:6b:85:93:56:11:ae:b0:
36:b7:2e:f2:ce:d3:1e:36:16:bf:7e:6a:22:e6:6e:57:a4:2b:
c7:ad:05:c4:77:fb:29:92:f8:6c:d8:68:a8:ab:36:60:d6:bf:
4b:bf:81:7b:fb:c7:11:f6:76:f5:f7:83:60:47:0c:03:f1:00:
f2:b4:c7:f2:eb:80:f3:8a:49:7f:8a:74:81:9d:39:4b:73:8d:
e2:87:1c:49:ea:a8:5d:e3:27:bf:ac:02:fe:65:09:17:3e:3a:
47:18:3c:37:1f:7c:48:b7:41:f2:21:f1:96:1c:eb:dc:5a:a7:
05:d5:ab:0f:e3:23:87:16:52:3a:5e:23:ab:93:7f:02:ea:05:
fc:ab:5d:05:dd:89:a5:1b:0b:ad:b1:82:0e:1c:bf:00:be:9e:
60:8e:dc:37:19:56:ae:44:26:82:c1:81:06:f0:74:4d:bc:a6:
61:6d:ee:ad:0d:ba:8b:c5:09:9f:16:97:33:4e:d0:88:64:bc:
c3:32:4f:cd:6e:07:ff:7e:be:16:5c:dc:99:dd:6d:d3:f1:f1:
90:a4:73:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:15:40 2026 by rpki-client