Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jvNt8sB9C29lZV5Jc7b7rbSXOUc.roa
File: jvNt8sB9C29lZV5Jc7b7rbSXOUc.roa (raw, json)
Hash identifier: kosj1nxF60EEv5vZWVxl3eM2ZROe8ODyeJw76tQLfDw=
Subject key identifier: 8E:F3:6D:F2:C0:7D:0B:6F:65:65:5E:49:73:B6:FB:AD:B4:97:39:47
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A0E82B265B83AA822E86AE838AE52EF3DB
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jvNt8sB9C29lZV5Jc7b7rbSXOUc.roa
Signing time: Mon 28 Sep 2026 13:18:56 +0000
ROA not before: Mon 28 Sep 2026 13:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218558
IP address blocks: 2a0c:b641:ed0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:2b:26:5b:83:aa:82:2e:86:ae:83:8a:e5:2e:f3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 28 13:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ef36df2c07d0b6f65655e4973b6fbadb4973947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:97:2b:c0:4c:b5:21:13:62:96:b6:c2:86:
fa:13:29:5a:04:a2:f5:75:46:db:e9:04:d2:23:a1:
f9:17:b2:6a:35:5a:22:8e:42:ea:cc:84:5c:eb:fc:
53:f2:8d:97:fa:c6:95:8f:8f:22:fe:1b:ee:12:dc:
aa:7a:5d:3b:5b:05:d5:44:0f:9d:ae:03:4b:a7:bd:
01:95:4a:8a:fc:b2:2d:32:d8:b1:92:1b:97:f4:e7:
1a:0a:2c:56:ea:dc:f1:28:73:0b:20:bd:31:1d:f9:
02:30:e6:2d:62:50:6d:11:7f:06:c0:d0:18:3e:b6:
87:75:51:0b:ea:9c:30:b4:b9:85:eb:13:7c:b8:c6:
13:7e:ec:07:e5:b9:fa:24:b0:90:a3:a3:94:c8:4d:
c5:7c:01:b7:a4:77:0f:d5:ff:a4:60:90:ae:19:6e:
fb:95:a0:7f:dc:91:1f:01:3f:aa:62:68:d0:4b:a7:
12:a3:d1:25:e0:b6:9b:70:9a:ba:b2:79:e9:0c:67:
47:06:b5:49:38:15:9b:95:9c:c5:9b:d1:9c:21:c7:
db:4a:69:63:9d:a6:6b:8b:15:19:52:8a:44:3f:8d:
3c:66:d7:a8:8a:21:51:84:65:46:bd:a4:99:b0:00:
16:2d:cd:12:75:af:a4:a5:2e:52:aa:9c:73:ed:46:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F3:6D:F2:C0:7D:0B:6F:65:65:5E:49:73:B6:FB:AD:B4:97:39:47
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jvNt8sB9C29lZV5Jc7b7rbSXOUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ed0::/44
Signature Algorithm: sha256WithRSAEncryption
3a:a9:94:e4:3c:2d:8b:4c:3c:10:be:eb:7a:c1:2d:07:c3:f0:
5e:2f:b0:12:fc:b9:73:6c:61:24:57:fc:68:1a:17:74:32:11:
09:83:23:f9:fb:e5:76:5e:b6:48:1a:4f:b7:37:0d:5e:f7:ce:
18:0c:2c:07:85:42:28:fc:78:11:22:98:c1:0c:8b:f5:a6:e4:
fa:26:f8:59:1d:7d:bc:38:f6:0b:25:4a:46:1f:14:8e:d1:c4:
39:80:0c:9f:21:b6:df:57:80:8d:fa:37:6a:d7:a0:e1:b5:17:
2e:24:fb:61:64:4e:a0:91:3a:02:c1:41:c1:06:c5:68:a6:2d:
46:15:b7:bb:e7:17:6e:76:e3:0e:a9:d3:bb:b8:76:8d:36:b7:
ca:34:35:c9:1c:e3:43:e5:e4:32:86:0d:45:e7:94:cd:86:eb:
9d:0a:b8:5c:f8:65:e3:ef:16:4c:92:88:03:68:4e:80:69:40:
ef:55:00:bd:ca:23:cd:d0:a4:6f:ab:51:d6:f6:37:31:3e:78:
bc:b2:0a:dd:11:ef:66:b7:08:a8:b7:08:d0:06:d9:1a:f9:98:
61:2f:2c:e3:11:b4:3e:17:9c:cf:60:96:73:0f:60:b0:00:b4:
95:4b:fb:a2:df:74:31:e7:c3:28:db:98:fa:fd:3f:6c:bf:21:
fb:26:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 19:21:20 2026 by rpki-client