Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SvcJbXOOC58WrPJqK7evztH6VhE.roa
File: SvcJbXOOC58WrPJqK7evztH6VhE.roa (raw, json)
Hash identifier: UuGYgE3Z/PVWGPRqfuufK9jsXpUzJVpW/+2rn4Sxjvk=
Subject key identifier: 4A:F7:09:6D:73:8E:0B:9F:16:AC:F2:6A:2B:B7:AF:CE:D1:FA:56:11
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A13ADFE25D86C8C070AE5721AB1B6410EB
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SvcJbXOOC58WrPJqK7evztH6VhE.roa
Signing time: Wed 14 Oct 2026 14:45:13 +0000
ROA not before: Wed 14 Oct 2026 14:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218405
IP address blocks: 2a0c:b641:360::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:df:e2:5d:86:c8:c0:70:ae:57:21:ab:1b:64:10:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 14 14:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4af7096d738e0b9f16acf26a2bb7afced1fa5611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:72:66:b9:58:63:d2:85:63:f9:98:fb:61:
94:31:22:f8:c8:5b:39:37:10:c2:c8:b6:e7:cc:bc:
0f:ae:82:4d:0d:24:d8:44:57:df:b9:98:f5:53:ea:
c7:33:65:8f:46:b1:1d:91:3f:86:38:a2:83:2a:0f:
ba:bb:64:ed:95:25:a1:e1:ee:01:81:55:e7:f1:3f:
a4:06:b3:22:86:9c:a8:eb:3b:0a:5e:6e:29:34:ec:
b7:ae:15:7e:ee:ee:e5:0a:1c:fb:06:0e:c0:b1:a1:
cf:80:d3:7b:9b:e8:4a:31:93:54:f3:86:4c:66:fd:
83:82:cf:fa:30:09:77:2c:de:bd:c4:7c:74:a7:cd:
0b:96:57:be:f3:67:3e:48:57:9a:fb:16:28:e6:eb:
dd:ef:ee:c5:8c:8e:28:2e:82:ed:f3:9f:35:d0:f7:
d0:84:a1:51:f5:5b:81:9c:6a:a7:e0:fb:0f:1b:ab:
4b:eb:8e:55:ae:b9:29:eb:8f:5e:4a:ae:85:65:90:
d8:ef:f6:4b:7f:ba:62:67:1d:18:a2:0b:56:a8:34:
c2:fc:96:e2:ef:9d:0d:05:f2:ac:eb:78:d9:34:70:
5f:07:99:37:03:6a:49:ed:81:b6:dc:42:75:89:fe:
f9:f7:fc:c3:72:b4:0d:e0:10:53:91:c6:ec:53:34:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F7:09:6D:73:8E:0B:9F:16:AC:F2:6A:2B:B7:AF:CE:D1:FA:56:11
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SvcJbXOOC58WrPJqK7evztH6VhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:360::/44
Signature Algorithm: sha256WithRSAEncryption
8e:ba:ec:19:d1:1a:74:f6:b0:eb:f5:43:9a:19:58:76:32:8a:
bf:3a:a0:73:08:29:3f:3d:6f:8e:77:fe:3c:5f:f0:2f:ae:7c:
46:73:22:3d:db:01:6b:fd:34:15:a6:94:b7:92:db:91:cf:d6:
b9:93:cd:48:80:d7:14:36:49:c5:de:7d:4d:9a:52:43:34:70:
fc:13:d1:8a:93:36:f8:0e:10:68:df:4f:1b:85:1e:00:53:89:
a4:c5:b2:b7:35:d0:44:73:35:92:9c:6c:8f:12:bd:64:38:ed:
b2:08:de:aa:eb:da:fc:22:28:e9:51:3e:fa:14:6b:f1:75:bc:
7c:15:c4:97:7b:9b:3d:39:2c:b0:8b:f6:07:69:44:3c:ee:31:
06:5b:13:2f:0a:a0:44:a2:3c:1b:d5:08:5e:67:ce:e8:1d:cd:
0a:3f:c5:2e:e0:db:53:c6:ad:2c:b6:6d:5c:2a:6a:8d:c5:01:
d9:c9:b6:ff:14:34:c6:bc:7f:b8:69:94:70:e8:e6:f5:9d:3c:
90:e9:12:40:b6:d4:2f:b0:26:7a:8d:c8:b8:85:97:a4:1b:79:
9e:40:bf:92:a6:72:db:83:6d:cb:8a:00:f5:f0:10:df:7a:02:
ec:29:28:f6:3d:9d:ac:b1:02:ec:4f:63:9f:fa:c7:c7:cb:44:
49:b7:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:57:22 2026 by rpki-client