Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HicB_aJ-pO3xk60xnyuvyiTIYdI.roa
File: HicB_aJ-pO3xk60xnyuvyiTIYdI.roa (raw, json)
Hash identifier: SqT4IKP5aANKITKWd8JXl256zMDN2F/CHfXI4vkJjHc=
Subject key identifier: 1E:27:01:FD:A2:7E:A4:ED:F1:93:AD:31:9F:2B:AF:CA:24:C8:61:D2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A0E7B070D4DC2B429B0CC73A1D49D230A0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HicB_aJ-pO3xk60xnyuvyiTIYdI.roa
Signing time: Mon 28 Sep 2026 11:04:55 +0000
ROA not before: Mon 28 Sep 2026 11:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218564
IP address blocks: 2a0c:b641:c90::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:b0:70:d4:dc:2b:42:9b:0c:c7:3a:1d:49:d2:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 28 11:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e2701fda27ea4edf193ad319f2bafca24c861d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:19:34:1f:a3:d0:d5:6d:d8:c8:fc:00:b8:
06:66:96:5d:9e:b4:e8:ed:52:4b:31:2a:52:c4:3a:
5e:65:ea:81:92:f4:b0:44:09:62:86:0b:6f:47:d0:
dc:2a:39:6d:11:37:47:aa:bc:e5:e2:b7:6d:c5:5c:
0d:65:bc:6d:22:44:d3:fd:e2:70:a7:c8:2c:e8:a7:
9c:37:ef:25:15:3a:06:7c:3f:46:cf:c6:80:e0:e2:
6a:7f:61:39:cc:75:2d:7a:c4:17:08:24:44:fa:02:
cd:68:b1:cc:e0:58:14:0d:0a:f2:a4:0f:de:cf:4f:
8f:55:1e:78:8f:05:0f:b8:0f:62:9a:b9:c7:34:07:
a2:18:55:fa:20:70:82:6d:02:49:42:1e:c2:1b:64:
e3:10:f3:d9:62:6d:0f:00:f6:7e:53:81:11:e4:03:
9d:c5:a7:83:08:7f:1c:ca:1a:e2:ca:fe:e5:60:b7:
5b:18:75:02:cb:d8:78:72:6d:00:f4:b0:41:f4:c7:
c5:a9:a9:e9:4d:eb:b3:e2:66:e2:c5:d7:5b:ec:1d:
04:ea:0b:ac:5e:33:76:84:ff:ca:9b:e2:47:d5:7b:
f6:5e:e8:c3:8f:3a:89:dd:33:d3:0c:17:32:cf:0e:
31:9d:b2:ca:fe:9e:a8:bc:19:81:1a:77:5f:fb:71:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:01:FD:A2:7E:A4:ED:F1:93:AD:31:9F:2B:AF:CA:24:C8:61:D2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HicB_aJ-pO3xk60xnyuvyiTIYdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:c90::/44
Signature Algorithm: sha256WithRSAEncryption
8d:fb:79:8b:47:20:59:65:86:5c:a7:16:9a:24:26:ed:2b:b2:
5c:3d:84:2d:23:79:77:f4:a4:e4:a8:c8:59:6c:b9:72:dd:f1:
9f:da:1e:c4:7b:0d:0e:fb:7b:2c:84:64:d2:12:94:bb:8e:04:
3b:d3:55:a8:a3:c9:eb:60:65:0d:72:50:39:59:9c:64:dc:a6:
8a:38:ba:98:4c:c8:3b:dd:f4:f3:e9:9b:fb:ab:ae:17:7d:03:
9d:90:43:2a:2d:fe:84:b4:df:db:05:c4:8d:b6:09:eb:2e:36:
c2:ec:f3:b7:db:da:c2:e0:8b:2c:4a:09:86:9b:99:c3:02:02:
38:19:79:4f:2a:b7:6e:a5:51:f2:8f:03:42:0f:b9:b1:14:25:
17:0f:00:1b:a7:ea:10:68:97:4c:6e:ba:d3:0c:56:1b:76:38:
a7:14:ec:eb:3a:f1:f0:fd:fb:cf:3b:f0:98:9c:88:8d:c0:10:
65:3e:b5:7c:87:f8:2c:63:9f:d1:32:aa:c0:94:b6:0f:ad:37:
4b:05:28:28:6d:99:0b:64:73:37:d1:ce:f0:96:86:e1:9d:cc:
d5:7d:f0:25:af:f3:3d:2d:74:01:dd:5e:4b:78:ab:2b:dd:0a:
bc:e6:09:68:f0:aa:ca:90:a4:0d:8d:e2:92:48:f9:b9:95:f6:
91:fd:fe:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:50:54 2026 by rpki-client