Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LPicNdqrMJ5WJRliwA_HHSSeOIY.roa
File: LPicNdqrMJ5WJRliwA_HHSSeOIY.roa (raw, json)
Hash identifier: i0C9yKwxnL/d1Q+3DvMQ8Xkb8DgPjqb58F0LdwtiID4=
Subject key identifier: 2C:F8:9C:35:DA:AB:30:9E:56:25:19:62:C0:0F:C7:1D:24:9E:38:86
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A16E94C6431B5F584418D81A2F1DCEB657
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LPicNdqrMJ5WJRliwA_HHSSeOIY.roa
Signing time: Sat 24 Oct 2026 15:43:26 +0000
ROA not before: Sat 24 Oct 2026 15:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213920
IP address blocks: 2a0c:b641:30::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:94:c6:43:1b:5f:58:44:18:d8:1a:2f:1d:ce:b6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 24 15:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cf89c35daab309e56251962c00fc71d249e3886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:be:90:63:a8:26:3f:c3:c8:60:10:df:0f:
13:1f:ee:20:84:76:1b:3e:8c:ee:15:2a:57:ee:45:
40:16:95:75:7d:e0:1a:7f:cd:19:48:ce:35:2b:a7:
97:ee:76:53:4a:40:f3:b7:6a:67:0f:9a:67:ed:02:
df:81:6d:df:95:65:6b:10:db:ed:e2:94:cb:35:ba:
2b:35:1c:97:6e:e3:a6:3f:43:a1:bb:b2:0a:3d:da:
ca:dd:45:05:0d:e1:23:31:4e:8d:b0:d9:25:dc:bb:
43:4a:01:c0:f4:14:3a:b9:e2:1d:c2:91:01:eb:f3:
6f:73:c4:e6:23:f5:7e:df:c2:10:59:e5:4b:e7:5b:
46:c1:3f:1d:4e:9e:55:99:46:8a:06:88:27:67:fa:
88:67:f9:09:e6:27:ed:20:89:b8:af:fe:d8:98:01:
51:c2:56:0d:ac:b8:59:a9:21:0a:b9:7b:e6:b8:fc:
57:24:10:c4:df:db:2c:b1:15:75:c3:b5:3a:39:f3:
8e:99:94:8d:bb:85:11:e9:cd:3e:92:5a:fc:57:be:
fd:14:09:d9:4f:9d:d1:5f:0d:4d:82:31:5b:8e:d2:
d9:3f:91:fe:15:78:16:ad:32:d7:1d:63:9c:2b:3a:
7f:66:3a:8e:3d:4c:8a:e0:fa:6a:66:f6:4e:ce:c1:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:9C:35:DA:AB:30:9E:56:25:19:62:C0:0F:C7:1D:24:9E:38:86
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LPicNdqrMJ5WJRliwA_HHSSeOIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:30::/44
Signature Algorithm: sha256WithRSAEncryption
03:bd:5b:13:b3:0f:63:dc:68:35:f0:a2:42:8d:50:b8:94:70:
37:f0:e0:6c:08:5d:1f:77:93:7a:7a:71:83:33:f9:04:3f:e8:
d9:ae:45:62:96:d7:44:f6:09:e5:95:10:b8:e3:72:38:d6:a4:
5f:8d:da:39:73:d3:c9:46:19:2a:76:44:83:38:68:88:a8:16:
cc:30:86:bb:07:25:cf:72:54:99:a5:b4:ae:77:8b:66:a4:97:
83:1b:29:97:30:b5:b3:f5:02:d3:a5:c6:45:a8:07:54:9e:75:
fe:5e:42:db:6c:d1:3d:43:85:a6:b1:62:7d:59:b6:f3:34:36:
af:7d:d4:48:21:62:53:4d:3c:8d:7e:6c:fe:8d:22:23:28:41:
97:52:04:63:27:d3:8f:17:f7:87:b9:83:b5:1b:eb:1c:f2:94:
be:a8:06:d1:da:d2:86:43:2d:e0:cd:a6:06:b5:3a:57:21:e6:
54:55:50:f4:60:c7:0a:11:cb:52:e9:26:32:08:17:39:c7:24:
2f:bb:97:be:60:0a:fd:72:31:19:58:68:29:16:f4:df:e4:0c:
11:6f:ae:12:b1:80:ef:30:4a:6b:c6:88:1b:8c:04:b1:be:26:
f9:61:6a:46:6c:2b:46:cd:d7:03:82:90:22:df:be:72:22:93:
5a:e8:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:07:13 2026 by rpki-client