Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uCyp7edaD_FjDLAkrX-yd7YyosM.roa
File: uCyp7edaD_FjDLAkrX-yd7YyosM.roa (raw, json)
Hash identifier: H363TajADyWFFQRAZogsXe8eGfsIjzygEgpBq+DbJGs=
Subject key identifier: B8:2C:A9:ED:E7:5A:0F:F1:63:0C:B0:24:AD:7F:B2:77:B6:32:A2:C3
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A1544C84E4303D616C972118420AD8D190
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uCyp7edaD_FjDLAkrX-yd7YyosM.roa
Signing time: Mon 19 Oct 2026 13:14:23 +0000
ROA not before: Mon 19 Oct 2026 13:14:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218366
IP address blocks: 2a0c:b641:f00::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:4c:84:e4:30:3d:61:6c:97:21:18:42:0a:d8:d1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 19 13:14:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b82ca9ede75a0ff1630cb024ad7fb277b632a2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:08:92:65:4d:43:d2:43:f1:cf:e8:1e:9b:
33:49:e2:54:0e:e1:fe:36:93:97:f7:66:44:8c:7c:
a5:e5:ef:2d:98:cd:d8:3d:a8:60:2a:e7:42:38:c6:
cd:37:2e:cd:cd:d2:fa:3a:16:5e:16:25:45:96:07:
c1:44:f5:97:b0:67:64:a3:31:af:54:b8:32:cf:e9:
53:13:69:3d:1b:9d:e9:70:37:8e:ff:89:3d:83:c0:
74:6d:34:9b:37:cb:d5:24:bc:8b:53:45:f7:ac:1e:
e8:28:f8:5f:72:a4:02:68:4c:20:96:de:22:f7:88:
cc:37:ff:2e:1b:c3:b1:b2:43:88:ce:ce:03:ca:96:
77:a6:95:0b:c6:7f:b0:63:ea:c6:90:c3:f6:f2:48:
98:fe:b0:7e:45:84:12:9a:98:ef:b0:0b:67:87:2d:
69:8d:01:97:e1:db:c6:8b:f0:04:4b:d8:1d:08:33:
c5:8e:76:3f:d7:09:eb:c5:6a:d8:db:d0:56:57:a8:
5f:84:32:c1:0f:f4:80:e2:3a:cf:f2:18:4b:c9:41:
14:d1:b5:6f:71:fd:36:d2:7a:7b:ba:79:58:81:c3:
9d:bc:55:6d:bb:f5:ba:7b:f3:28:82:7c:9a:25:a9:
97:73:8f:11:82:14:39:86:2a:1c:19:6f:d8:c3:0c:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2C:A9:ED:E7:5A:0F:F1:63:0C:B0:24:AD:7F:B2:77:B6:32:A2:C3
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uCyp7edaD_FjDLAkrX-yd7YyosM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f00::/44
Signature Algorithm: sha256WithRSAEncryption
38:54:b3:8c:cb:98:9b:13:23:b7:5d:38:9e:77:9a:84:ee:03:
96:00:1e:7f:97:89:c5:6a:58:32:27:78:2f:c0:91:2d:dd:27:
4b:ba:d7:a0:4c:ad:8c:63:fe:3f:73:d9:fc:04:73:b7:9b:04:
76:04:5a:1d:4a:1c:38:50:24:6a:a1:f8:a2:91:5f:1c:8e:1f:
d7:15:14:70:c0:28:31:9b:c7:b5:ea:38:6a:0d:23:d5:aa:da:
92:33:65:30:cd:c3:7d:4d:21:09:c2:c7:6f:b5:00:a0:c8:6b:
c4:19:2c:1a:b5:fc:24:8a:8f:1e:c6:15:7b:0e:8c:33:7a:72:
83:de:f8:59:64:63:b8:13:09:47:60:7f:e5:9d:88:7d:3b:4d:
84:b4:c4:15:0d:73:b4:18:a0:b0:10:37:0c:8e:21:07:c6:fd:
89:7b:ad:6e:8d:32:49:e5:6b:3a:7e:2c:9e:77:7f:3b:83:e5:
42:65:44:ea:6d:80:eb:9e:d6:1d:aa:88:63:90:c1:39:b6:ae:
50:89:c0:07:c5:f8:cd:76:cd:70:dc:39:34:3f:df:d8:78:d4:
0b:c3:69:ce:f7:bc:34:fe:8c:bb:15:f0:8e:43:1d:67:df:56:
db:c1:78:94:c2:59:6f:d8:8e:bc:00:cb:f3:81:c5:9f:a8:9e:
06:e9:c2:17
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaFUTITkMD1hbJchGEIK2NGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYxMDE5MTMxNDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODJjYTllZGU3NWEwZmYxNjMwY2IwMjRhZDdmYjI3N2I2MzJhMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sQIkmVNQ9JD8c/oHpszSeJUDuH+
NpOX92ZEjHyl5e8tmM3YPahgKudCOMbNNy7NzdL6OhZeFiVFlgfBRPWXsGdkozGv
VLgyz+lTE2k9G53pcDeO/4k9g8B0bTSbN8vVJLyLU0X3rB7oKPhfcqQCaEwglt4i
94jMN/8uG8OxskOIzs4DypZ3ppULxn+wY+rGkMP28kiY/rB+RYQSmpjvsAtnhy1p
jQGX4dvGi/AES9gdCDPFjnY/1wnrxWrY29BWV6hfhDLBD/SA4jrP8hhLyUEU0bVv
cf020np7unlYgcOdvFVtu/W6e/MognyaJamXc48RghQ5hiocGW/Ywww0vQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLgsqe3nWg/xYwywJK1/sne2MqLDMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvdUN5cDdlZGFEX0ZqRExBa3JYLXlkN1l5b3NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQ8A
MA0GCSqGSIb3DQEBCwUAA4IBAQA4VLOMy5ibEyO3XTied5qE7gOWAB5/l4nFalgy
J3gvwJEt3SdLutegTK2MY/4/c9n8BHO3mwR2BFodShw4UCRqofiikV8cjh/XFRRw
wCgxm8e16jhqDSPVqtqSM2UwzcN9TSEJwsdvtQCgyGvEGSwatfwkio8exhV7Dowz
enKD3vhZZGO4EwlHYH/lnYh9O02EtMQVDXO0GKCwEDcMjiEHxv2Je61ujTJJ5Ws6
fiyed387g+VCZUTqbYDrntYdqohjkME5tq5QicAHxfjNds1w3Dk0P9/YeNQLw2nO
97w0/oy7FfCOQx1n31bbwXiUwllv2I68AMvzgcWfqJ4G6cIX
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:11:37 2026 by rpki-client