Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Yh1Pu3omjFqFioYc7w0nlh6vuYo.roa
File: Yh1Pu3omjFqFioYc7w0nlh6vuYo.roa (raw, json)
Hash identifier: qbSIIrTOAk2JzmKybF5usvbx3miNgZQBlAltzZRdStI=
Subject key identifier: 62:1D:4F:BB:7A:26:8C:5A:85:8A:86:1C:EF:0D:27:96:1E:AF:B9:8A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A154E077C9E9FDB6575C185FE83EA19B87
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Yh1Pu3omjFqFioYc7w0nlh6vuYo.roa
Signing time: Mon 19 Oct 2026 15:55:59 +0000
ROA not before: Mon 19 Oct 2026 15:55:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218358
IP address blocks: 2a0c:b641:f20::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:e0:77:c9:e9:fd:b6:57:5c:18:5f:e8:3e:a1:9b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 19 15:55:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=621d4fbb7a268c5a858a861cef0d27961eafb98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:e0:16:36:59:74:45:6f:7c:a1:5e:18:74:
b6:a6:2b:0a:3f:c3:88:7f:13:6d:31:15:8a:77:46:
67:36:48:cf:4c:e1:ee:2f:f1:50:ec:d6:16:e4:3f:
40:7c:c8:7c:67:55:e3:81:4c:8c:ab:25:5c:fc:74:
3b:55:28:11:9d:90:46:e6:cf:de:30:92:60:03:6c:
6f:2b:3d:45:8e:1b:d5:e2:41:4d:cb:ff:6e:e9:75:
18:58:f8:47:97:83:72:34:81:61:1f:c9:97:76:0d:
75:04:ba:53:97:d2:10:94:22:e0:f6:88:70:38:a9:
87:23:8d:00:98:64:3f:2a:4b:14:ae:f4:42:a7:7f:
90:33:7e:89:78:fa:b9:99:c4:7b:fa:ee:55:c1:95:
29:a9:73:ad:db:2c:a0:18:27:77:03:65:f4:3f:20:
66:94:40:6e:21:e5:e7:42:e1:a6:78:2c:09:7b:e2:
36:9e:4f:79:31:6f:9d:27:24:a5:dd:c7:5d:41:72:
a2:60:76:b6:54:ba:2c:1f:ea:a7:98:59:29:89:2a:
36:0d:c4:7f:2e:3c:12:93:11:c8:1b:94:47:86:92:
45:87:c8:a1:b8:fb:a9:d8:08:b8:23:de:27:9b:07:
b0:20:7c:e1:5b:28:e7:11:c0:a8:e4:2c:92:9a:bd:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:4F:BB:7A:26:8C:5A:85:8A:86:1C:EF:0D:27:96:1E:AF:B9:8A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Yh1Pu3omjFqFioYc7w0nlh6vuYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f20::/44
Signature Algorithm: sha256WithRSAEncryption
3c:9e:d0:ca:a2:b6:68:0f:ba:1d:7a:dd:8c:59:fa:b6:03:01:
81:84:83:36:9e:46:2e:dc:df:52:21:01:f8:b2:bf:4f:36:93:
30:54:7a:98:7f:94:c5:21:3f:8e:dd:a1:fc:4b:e2:9c:fb:92:
4d:34:d0:86:14:06:22:5d:26:ba:97:3d:31:4a:f4:0f:b6:82:
6f:87:b1:45:de:f5:00:82:08:50:3f:b5:9a:d8:de:bb:f2:d2:
61:6c:72:d2:d6:32:c5:46:13:35:1b:59:68:4b:33:22:45:3e:
08:93:e0:5c:02:ea:22:f6:4c:8e:80:04:05:3f:eb:39:c1:62:
64:cf:66:17:e5:03:88:af:1a:1f:1c:54:f5:94:48:28:77:fa:
95:ee:a9:15:12:12:99:1b:32:75:7a:20:35:12:fc:da:5f:14:
86:4b:4c:89:bd:12:d4:90:98:e4:21:45:e6:5f:0e:cd:a6:30:
78:f3:f8:ee:74:a8:4c:20:6c:3c:00:85:59:9c:dc:75:e2:2d:
bd:7f:2e:08:bd:cb:94:bc:07:a1:c4:2f:a0:e0:00:5a:73:a3:
37:2c:d0:7e:5e:f3:c2:cd:8e:2a:03:dc:9b:90:d9:8e:0e:b9:
a1:33:f2:16:82:48:29:5f:a3:0a:3f:04:85:06:d2:bc:a9:79:
4b:b4:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:51:06 2026 by rpki-client