Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/kwsJ9mKNbzP38_uBUbgeN1xPfUk.roa
File: kwsJ9mKNbzP38_uBUbgeN1xPfUk.roa (raw, json)
Hash identifier: kbvypn6X1aEEM7QJLlIxGQRwXTb6E9CSMNuhK10B6oE=
Subject key identifier: 93:0B:09:F6:62:8D:6F:33:F7:F3:FB:81:51:B8:1E:37:5C:4F:7D:49
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019E1D1AD015AE60313BFBE5EE03DEF2A016
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/kwsJ9mKNbzP38_uBUbgeN1xPfUk.roa
Signing time: Tue 12 May 2026 16:52:36 +0000
ROA not before: Tue 12 May 2026 16:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 178.239.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:1a:d0:15:ae:60:31:3b:fb:e5:ee:03:de:f2:a0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 12 16:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=930b09f6628d6f33f7f3fb8151b81e375c4f7d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fd:07:2c:0d:63:58:58:95:60:03:4a:bb:62:
46:02:13:69:ff:56:3b:81:16:a6:75:84:94:e1:c5:
f6:d0:9c:11:0e:46:11:20:b1:8e:57:75:a6:0b:ba:
e7:52:1c:76:09:67:6e:6a:f0:f7:f4:62:35:f2:23:
cb:90:12:78:d8:72:cc:29:cd:e1:8a:b9:6c:6b:f4:
1d:bf:b7:e0:60:dc:84:c9:d1:ea:fd:50:f8:ed:60:
70:14:fc:25:6a:fc:2e:5a:66:03:1b:c5:30:40:3e:
5f:c1:dc:75:c1:37:c1:27:79:44:96:f5:42:b5:c8:
27:10:c2:4e:6d:cb:e7:01:f6:93:40:7e:d4:af:d6:
9d:25:07:78:e1:c6:8f:59:5c:b1:6c:0c:c3:82:2c:
dc:d6:13:eb:be:82:5e:ab:80:8b:ab:c3:ce:ce:bd:
2d:d3:83:f8:f0:79:b4:d6:a0:cb:80:17:52:e6:50:
5d:ac:04:ee:c8:9a:75:28:fe:bc:31:13:3c:5e:dc:
0f:90:33:b4:f9:4d:b5:74:b1:88:e9:60:d4:52:1a:
42:76:e2:e5:eb:75:86:09:4b:71:4a:70:b1:33:9b:
be:78:c4:ba:64:7c:fa:20:53:80:86:c5:4c:f9:80:
d6:70:4a:b0:5a:4a:05:ce:dd:c9:81:38:f9:75:73:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0B:09:F6:62:8D:6F:33:F7:F3:FB:81:51:B8:1E:37:5C:4F:7D:49
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/kwsJ9mKNbzP38_uBUbgeN1xPfUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.123.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6d:53:19:5a:2b:fd:0c:1a:8d:5e:87:17:5a:fa:98:00:57:
ce:5e:be:40:d0:e5:e7:50:67:66:2c:bd:6b:3c:02:be:c2:8d:
f0:e3:8a:12:15:fc:b6:88:90:dc:21:f8:80:79:64:d7:85:9a:
4d:53:39:ac:bc:ba:04:a8:21:3b:c1:e2:8b:fe:6c:e3:6a:15:
00:1a:f0:d5:00:af:cb:fd:75:59:43:a0:1a:ac:9d:b9:04:54:
00:33:1f:2e:9f:9b:1d:81:e9:51:0d:f1:bb:53:50:15:14:b6:
c5:3d:58:4c:7c:f3:b6:47:ab:35:25:99:27:b5:8d:40:00:dd:
b6:b4:84:0c:6a:d5:20:5d:2f:ab:44:db:b6:ab:fa:23:cd:d9:
e4:de:16:3d:e0:37:31:85:59:7c:2f:5e:56:e9:f9:58:69:4b:
df:35:12:78:79:d3:ee:d6:12:08:dd:59:20:ea:9f:fa:10:c6:
b9:42:87:c6:9a:40:27:40:27:81:93:1e:d5:9a:90:97:30:b3:
71:f2:93:14:f3:ef:2f:21:60:8c:c8:49:d8:9d:2d:02:6f:d2:
38:07:e5:b1:12:f6:02:43:0b:ac:35:07:dc:ba:b3:5e:4e:a9:
29:f6:1e:5c:d0:b9:59:a2:4e:53:97:d5:6f:32:c8:9b:74:4d:
ba:97:bb:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4dGtAVrmAxO/vl7gPe8qAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwNTEyMTY1MjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzBiMDlmNjYyOGQ2ZjMzZjdmM2ZiODE1MWI4MWUzNzVjNGY3ZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7f0HLA1jWFiVYANKu2JGAhNp/1Y7
gRamdYSU4cX20JwRDkYRILGOV3WmC7rnUhx2CWduavD39GI18iPLkBJ42HLMKc3h
irlsa/Qdv7fgYNyEydHq/VD47WBwFPwlavwuWmYDG8UwQD5fwdx1wTfBJ3lElvVC
tcgnEMJObcvnAfaTQH7Ur9adJQd44caPWVyxbAzDgizc1hPrvoJeq4CLq8POzr0t
04P48Hm01qDLgBdS5lBdrATuyJp1KP68MRM8XtwPkDO0+U21dLGI6WDUUhpCduLl
63WGCUtxSnCxM5u+eMS6ZHz6IFOAhsVM+YDWcEqwWkoFzt3JgTj5dXOlnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMLCfZijW8z9/P7gVG4HjdcT31JMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEva3dzSjltS05ielAzOF91QlViZ2VOMXhQZlVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu97MA0G
CSqGSIb3DQEBCwUAA4IBAQB2bVMZWiv9DBqNXocXWvqYAFfOXr5A0OXnUGdmLL1r
PAK+wo3w44oSFfy2iJDcIfiAeWTXhZpNUzmsvLoEqCE7weKL/mzjahUAGvDVAK/L
/XVZQ6AarJ25BFQAMx8un5sdgelRDfG7U1AVFLbFPVhMfPO2R6s1JZkntY1AAN22
tIQMatUgXS+rRNu2q/ojzdnk3hY94DcxhVl8L15W6flYaUvfNRJ4edPu1hII3Vkg
6p/6EMa5QofGmkAnQCeBkx7VmpCXMLNx8pMU8+8vIWCMyEnYnS0Cb9I4B+WxEvYC
QwusNQfcurNeTqkp9h5c0LlZok5Tl9VvMsibdE26l7sc
-----END CERTIFICATE-----
Generated at Tue May 12 22:05:47 2026 by rpki-client