Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YuXjJvbiSDn3IxfP8RybgEZDVpg.roa
File: YuXjJvbiSDn3IxfP8RybgEZDVpg.roa (raw, json)
Hash identifier: 6h/nILTTZUw5z04wGO07HnqCBzs8iGmnn8Ol0OZcKis=
Subject key identifier: 62:E5:E3:26:F6:E2:48:39:F7:23:17:CF:F1:1C:9B:80:46:43:56:98
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A13AE9F4EA2BB998F847C290EEF47B8C18
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YuXjJvbiSDn3IxfP8RybgEZDVpg.roa
Signing time: Wed 14 Oct 2026 14:56:13 +0000
ROA not before: Wed 14 Oct 2026 14:56:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218404
IP address blocks: 2a0c:b641:ef0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:e9:f4:ea:2b:b9:98:f8:47:c2:90:ee:f4:7b:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 14 14:56:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62e5e326f6e24839f72317cff11c9b8046435698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:97:48:66:56:82:0e:02:ad:57:44:6c:bc:
25:83:5a:ff:3e:8a:e1:aa:da:8a:2c:f3:53:69:67:
d8:ad:b4:0e:93:4a:a2:6a:f6:4f:fc:f0:9f:31:bd:
0f:ea:5e:44:eb:75:6a:e9:30:7e:66:59:79:f8:01:
47:64:cf:3b:b7:fa:70:f1:5a:09:51:c8:58:75:ad:
fb:fc:37:d0:a1:49:4a:c8:b0:ae:a1:78:24:05:29:
c2:2c:16:44:d4:0f:7c:18:ac:71:18:f6:be:63:29:
56:e4:58:f0:5d:6f:17:7d:ff:11:8e:3b:c1:54:16:
f0:4b:23:77:d1:5e:61:a1:bd:9b:f7:4c:b6:9a:a0:
4a:57:04:9a:f3:68:8c:fd:61:f4:e7:4a:da:f8:13:
50:b2:73:4d:6b:66:08:cc:f3:e9:73:23:63:41:e3:
07:1f:64:01:c7:99:52:22:fd:15:63:64:b3:5e:02:
b0:9b:fb:da:c8:c9:dd:c4:9e:3d:ce:bb:f3:3c:1b:
87:47:ba:e1:50:09:60:8c:c7:79:4b:77:d3:01:55:
9f:98:19:81:fa:11:38:7c:03:59:54:99:cf:19:51:
48:2c:3a:9e:2c:2a:b4:cf:39:6c:b8:e8:fc:5a:2c:
47:98:a7:60:7b:ae:eb:5b:54:2d:3f:d7:bb:70:91:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E5:E3:26:F6:E2:48:39:F7:23:17:CF:F1:1C:9B:80:46:43:56:98
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YuXjJvbiSDn3IxfP8RybgEZDVpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ef0::/44
Signature Algorithm: sha256WithRSAEncryption
84:ba:a0:73:b4:7f:bb:8a:dd:98:4d:ad:1f:7b:e3:56:00:0f:
57:69:9a:73:2c:42:9f:87:f0:a6:48:79:64:df:90:a3:4c:c4:
a9:54:3c:45:8d:f8:8c:a9:ef:68:d3:49:b4:1c:ff:bc:5d:a6:
ec:bb:f4:dd:00:91:c8:35:21:9c:e8:87:30:ec:28:8c:37:d5:
53:db:39:f1:f0:5a:1f:2e:e6:fa:21:af:ea:0d:05:c6:31:83:
82:e0:db:f2:5d:5f:fc:ef:cd:78:4c:ee:d2:7b:1c:c0:87:bb:
a1:39:d4:f8:b7:ba:d6:cf:d4:21:c4:90:b0:44:5b:6d:68:66:
e6:9a:a9:23:dd:63:15:e0:58:ab:e4:87:ae:c3:cf:8a:be:79:
93:2f:ff:d0:a6:ef:eb:e8:b7:96:55:d8:21:d0:95:b4:eb:d3:
77:fb:01:82:d6:e6:7a:33:9f:b2:84:b1:49:2c:0f:af:a4:1a:
93:65:f3:71:9d:55:2d:bc:77:1f:61:a9:7c:3d:34:0f:67:8f:
61:1b:c3:fd:bf:f1:4c:65:ae:0c:37:16:9b:64:bb:85:6e:02:
d6:5c:77:da:12:4a:1f:71:49:18:05:e7:11:48:12:3e:fa:ef:
a9:d1:b5:19:d6:11:4b:c3:2a:b5:56:97:e0:01:bd:ac:1c:9e:
cc:47:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:07:47 2026 by rpki-client