Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ss7N7_bam7oabNiT_2z8BllJ4L4.roa
File: ss7N7_bam7oabNiT_2z8BllJ4L4.roa (raw, json)
Hash identifier: Hk2WtsGuLo60mBNcmf4cLOLAoeMJa8oKKaLiicJEe4k=
Subject key identifier: B2:CE:CD:EF:F6:DA:9B:BA:1A:6C:D8:93:FF:6C:FC:06:59:49:E0:BE
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A154BCC2E3C36296C56370883C350025A6
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ss7N7_bam7oabNiT_2z8BllJ4L4.roa
Signing time: Mon 19 Oct 2026 15:16:59 +0000
ROA not before: Mon 19 Oct 2026 15:16:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218357
IP address blocks: 2a0c:b641:f30::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 13:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:bc:c2:e3:c3:62:96:c5:63:70:88:3c:35:00:25:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 19 15:16:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2cecdeff6da9bba1a6cd893ff6cfc065949e0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:66:60:e1:bd:fd:c3:e6:3f:0b:56:aa:25:
e8:4b:7f:4d:47:7d:47:bf:f4:0b:a9:c0:71:8b:96:
6a:69:9e:b5:8f:98:13:46:30:f7:fb:a3:70:56:2e:
52:d5:25:29:7d:3c:19:bd:11:20:a2:0e:92:06:47:
fc:4b:0e:30:d8:dd:96:ab:a5:6e:c0:7b:68:52:d9:
ca:2a:c9:25:96:7b:eb:89:0b:60:d3:59:f8:bd:04:
ad:e4:5f:45:c0:5f:64:ae:36:95:4f:4a:6c:b6:0a:
30:51:df:27:33:18:ee:00:8a:9d:ab:b2:b6:09:02:
ea:ff:6d:06:6d:44:db:ea:39:7a:ee:70:af:8b:54:
37:80:16:60:0a:fe:ec:91:a3:f0:41:19:66:eb:72:
7e:7d:94:6a:90:ca:4f:c8:7c:6e:75:f3:38:06:53:
f9:e8:77:bc:e5:20:f4:f4:a9:97:04:13:1d:ff:3b:
e0:6d:5f:d5:4f:28:27:33:8f:3e:36:74:9a:85:d2:
d7:85:37:ef:8c:86:1e:10:03:8f:fd:a8:6f:49:d3:
52:fd:e9:38:91:bf:5a:c4:d1:71:81:de:d0:29:a1:
c4:ca:0b:79:1b:7d:c0:92:04:f6:07:29:04:c9:bf:
a2:f2:1c:b4:64:64:ae:92:82:a0:44:af:55:c6:fd:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CE:CD:EF:F6:DA:9B:BA:1A:6C:D8:93:FF:6C:FC:06:59:49:E0:BE
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ss7N7_bam7oabNiT_2z8BllJ4L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f30::/44
Signature Algorithm: sha256WithRSAEncryption
5e:84:3b:65:76:3d:d2:38:d4:15:d0:75:f2:de:82:95:3d:1e:
0e:84:e3:bc:ae:bd:6f:fd:f6:6b:30:e6:b4:95:58:2b:ca:75:
3a:86:b7:9b:8b:86:48:98:77:a6:55:63:c4:b1:27:ed:63:e3:
2f:f6:af:e7:29:a7:c0:e7:37:5e:9f:76:ac:97:e9:12:50:b3:
22:b3:34:01:28:3b:a8:86:31:63:21:d9:7c:da:5e:30:d1:f8:
b5:fe:76:91:3d:e9:a3:50:5a:0c:3e:a5:80:7a:d8:62:d4:3a:
e3:5a:2a:c4:b3:54:3b:53:2f:e4:13:d1:1c:18:cd:1b:b0:28:
cb:22:22:3e:14:d9:53:21:9e:e0:d2:ad:63:35:f3:c2:0a:8e:
a8:ac:a2:78:71:d5:83:e4:d0:37:2e:d3:c9:54:11:32:c3:09:
78:c0:62:3c:7b:64:45:b1:04:41:cc:1e:b4:d0:38:f1:7f:52:
04:2e:95:54:80:82:6a:32:60:f4:2d:59:63:a4:df:c2:4d:d4:
9c:7d:2e:6e:e9:a4:1b:41:0e:20:32:f1:ae:57:97:92:53:5d:
73:34:7b:54:50:30:2c:9c:f2:10:0b:a0:9f:00:62:f0:54:7e:
66:85:e8:fc:ad:5d:d7:5a:cd:ee:bf:8d:3e:cb:48:61:c2:ee:
d7:bf:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 23:36:20 2026 by rpki-client