Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4O-0vDZ-HKArkQTHZVBbj-tR4s4.roa
File: 4O-0vDZ-HKArkQTHZVBbj-tR4s4.roa (raw, json)
Hash identifier: IgLgKcEbYK3uS+WDwlGWhIkt/H1I1QEiSHdP3TU8yOM=
Subject key identifier: E0:EF:B4:BC:36:7E:1C:A0:2B:91:04:C7:65:50:5B:8F:EB:51:E2:CE
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A13FA5E71AAF8F10E0A2E432BEE17D1CDF
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4O-0vDZ-HKArkQTHZVBbj-tR4s4.roa
Signing time: Thu 15 Oct 2026 12:59:59 +0000
ROA not before: Thu 15 Oct 2026 12:59:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204765
IP address blocks: 2a0c:b641:8b0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a5:e7:1a:af:8f:10:e0:a2:e4:32:be:e1:7d:1c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 15 12:59:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0efb4bc367e1ca02b9104c765505b8feb51e2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:8f:33:32:ef:a4:eb:2a:67:e1:34:97:d1:
64:cc:a0:1d:70:67:9a:58:1d:fc:06:69:78:c5:13:
dd:99:15:5b:11:30:f5:2a:7c:60:96:01:3f:43:22:
aa:9e:ae:5a:14:1d:a6:36:f7:63:d0:59:96:ae:fc:
75:eb:a6:30:19:0d:78:79:49:fb:ef:ce:81:bc:15:
bd:72:3d:eb:7b:a8:8d:d5:31:bf:00:30:9c:9d:0b:
2d:8c:37:3e:cc:ca:12:6d:c8:96:fc:24:b8:e7:0e:
8a:6b:dd:a1:40:18:9f:2e:72:a7:4f:b0:98:95:76:
b0:93:db:40:95:d3:72:06:a4:81:bc:42:f1:5e:87:
53:7a:ac:e7:14:c5:1d:e7:07:5f:bf:11:cf:74:30:
d3:10:82:50:b7:18:76:65:7d:d5:17:25:a2:aa:f6:
c5:ba:3b:0b:f4:ec:28:3b:37:a9:7c:d8:d5:d9:78:
d8:0c:f1:8a:c1:79:fc:fd:6f:a6:c4:6b:57:d2:8e:
eb:5d:4e:a3:2d:f5:0e:74:0c:07:b9:7f:14:79:ed:
9a:a7:00:97:86:21:88:57:19:3d:87:23:72:1c:7a:
76:65:2a:6a:ab:02:12:2b:57:16:84:aa:7d:ab:92:
70:62:e3:28:17:e5:98:97:f7:e1:26:e2:4d:3b:44:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:B4:BC:36:7E:1C:A0:2B:91:04:C7:65:50:5B:8F:EB:51:E2:CE
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4O-0vDZ-HKArkQTHZVBbj-tR4s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:8b0::/44
Signature Algorithm: sha256WithRSAEncryption
33:08:58:1f:ea:8c:b0:30:c0:30:70:b1:1d:9d:69:2b:9f:e5:
0d:9b:88:1d:46:9f:7b:1d:3c:db:7e:c5:2d:f0:a0:21:ab:bd:
eb:52:15:ad:9a:c6:b1:b1:c6:66:0a:a4:a1:40:22:b7:4e:df:
0b:88:8f:e3:bc:29:35:dd:87:ea:6d:aa:24:32:e1:8b:4d:c4:
6a:c2:ba:2a:67:3d:35:3b:9f:4e:7b:22:9b:1d:35:12:e9:d1:
ed:25:c5:0b:f9:7b:ff:1c:ce:5d:b4:77:da:b7:e0:d3:90:e5:
94:29:7b:3e:fb:a7:c2:54:c3:a6:90:76:ac:33:5e:79:ae:c0:
59:73:41:fb:dd:b2:da:0c:ed:9f:cf:25:21:b9:82:ee:20:5c:
7a:80:a5:f9:4c:d9:6f:a1:10:28:f1:d4:b2:0e:1c:8f:af:b5:
3c:a5:16:17:ba:3c:dd:dc:24:a8:b0:e6:e6:53:8f:a0:4d:b8:
6d:b9:de:a6:f5:fe:10:bf:bb:ac:65:ef:85:f1:ed:fa:c5:bd:
5c:72:40:ad:27:2b:1c:cd:2f:21:7c:87:a5:67:ca:9f:5d:6f:
d1:77:50:9c:23:d7:5d:8b:45:ef:ab:f0:e4:80:c1:9a:55:b8:
de:e4:db:b0:17:e1:cd:28:9a:72:cb:20:18:7f:6f:90:8e:53:
cf:0e:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:31:54 2026 by rpki-client