Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa
File: kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa (raw, json)
Hash identifier: cX0Aca9kGYKiN/9m9sBSvjG37vCXXVdWtb4rGx97cf8=
Subject key identifier: 90:0E:CF:75:9B:F5:04:76:3D:F6:31:69:62:EE:6B:9D:71:79:1A:9C
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23690B128ADDCC7411B6336C7B78311E
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50338
IP address blocks: 5.39.202.0/23 maxlen: 23
2a04:7bc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0b:12:8a:dd:cc:74:11:b6:33:6c:7b:78:31:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=900ecf759bf504763df6316962ee6b9d71791a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:35:6c:90:49:04:47:83:67:ad:0c:79:40:
78:0b:b6:51:0d:5a:b8:c4:1c:33:06:7b:9d:b8:1c:
a4:34:e2:50:b1:54:3b:91:58:ab:8b:9e:13:d0:6c:
8a:f3:33:ee:d3:c6:e1:43:53:81:48:a4:83:9f:e3:
39:4b:a3:1f:05:f8:fd:d8:e0:7e:a8:0e:44:b5:78:
05:b3:56:7c:b9:83:31:1b:bf:af:44:8b:37:5d:8a:
43:8e:96:7c:aa:49:46:e2:05:ae:ad:bc:8e:77:c1:
df:fa:6c:2a:32:25:74:91:3c:00:7e:ca:af:4d:65:
74:d0:e8:56:47:8e:e8:b7:03:36:b0:68:32:4e:36:
97:28:84:78:12:2e:bf:37:4b:31:bd:0f:43:4b:27:
11:6a:e3:68:fd:11:3d:a8:45:ed:42:29:c7:ed:ac:
0e:1e:91:af:43:99:9f:4c:e7:28:dd:d3:d9:c4:86:
7b:6e:10:76:ab:eb:bb:15:ee:48:1a:c3:ed:2b:b9:
f2:32:91:3d:66:7c:76:1c:b1:d9:d0:7b:80:10:cc:
6c:d9:65:fe:f1:89:8e:50:3f:7c:7c:b0:e8:fd:f0:
8d:9b:95:87:2e:0b:0f:9e:42:ff:c6:a6:b9:c0:c9:
a1:bc:04:26:05:d0:2b:aa:6b:c5:7a:05:cd:f2:21:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:CF:75:9B:F5:04:76:3D:F6:31:69:62:EE:6B:9D:71:79:1A:9C
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.202.0/23
IPv6:
2a04:7bc1::/32
Signature Algorithm: sha256WithRSAEncryption
77:7e:4a:fe:6e:b5:54:1a:d9:87:9e:ff:2e:0f:87:92:1f:a5:
63:b3:fd:ca:85:0b:ac:cf:e9:cb:98:95:77:35:30:9d:0e:c7:
1b:75:22:03:34:77:26:df:05:85:cd:70:c3:67:99:15:79:f7:
67:34:21:e8:f4:ed:ba:06:4c:5f:82:ae:a1:54:74:98:dc:1d:
5b:00:94:70:6b:4c:fc:5d:47:13:1f:9b:b3:95:9a:c0:f9:bc:
21:58:4a:8b:6c:23:27:fc:e5:63:dd:27:a3:a6:07:be:2f:a2:
18:7c:cf:0d:09:d8:02:cb:6f:12:e0:8a:dc:2f:68:3e:16:c3:
38:f8:df:9b:cf:7a:9a:1f:14:62:86:d4:8b:e1:ea:2d:77:b9:
c1:c2:bf:d0:ae:21:4f:22:0c:1f:3e:fe:8d:d0:01:ff:f7:38:
f4:38:0b:a0:31:a2:94:84:11:41:b6:e2:bc:a2:18:8d:a2:df:
bd:9b:0c:8f:ba:c6:2d:eb:85:08:45:55:69:56:22:53:77:5c:
69:f9:ee:14:4a:75:be:26:e2:1c:50:6a:d1:1b:b2:59:ac:ff:
c5:55:af:ca:e1:4d:79:20:f9:96:2f:26:cc:c1:9b:25:a8:df:
ae:56:97:de:b1:dd:56:79:15:73:f8:16:9f:80:3f:25:26:56:
49:fd:4a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:53 2026 by rpki-client