Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xBHP5HN5u-6WX2d5XDm0oE7A92s.roa
File: xBHP5HN5u-6WX2d5XDm0oE7A92s.roa (raw, json)
Hash identifier: 1O13LoxB2HXimoNb6PtORAnxJjTyRZRAN8l50i7AfZM=
Subject key identifier: C4:11:CF:E4:73:79:BB:EE:96:5F:67:79:5C:39:B4:A0:4E:C0:F7:6B
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A154A7B40096986A7B18A43D3F8B975820
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xBHP5HN5u-6WX2d5XDm0oE7A92s.roa
Signing time: Mon 19 Oct 2026 14:53:59 +0000
ROA not before: Mon 19 Oct 2026 14:53:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218360
IP address blocks: 2a0c:b641:f10::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:a7:b4:00:96:98:6a:7b:18:a4:3d:3f:8b:97:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 19 14:53:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c411cfe47379bbee965f67795c39b4a04ec0f76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:76:0c:d1:40:42:2a:80:c7:2c:b9:4e:e2:
c7:58:13:6c:ee:dd:8d:5b:7a:92:57:bb:29:57:87:
13:33:96:0e:65:af:38:40:5c:fa:a0:f7:c3:7e:14:
69:ff:3f:f1:a7:86:dd:4d:0b:af:c1:49:ae:75:ed:
9f:94:01:0b:d2:63:f8:62:35:a1:4f:f6:b0:fc:dc:
e2:ba:79:b5:68:be:11:3f:c3:dd:5f:f3:9c:82:a1:
ab:22:d0:d8:e1:58:6c:7f:10:64:64:c4:b8:8e:48:
84:4f:e2:03:9b:dd:be:2a:84:6e:a2:16:9c:cb:3f:
79:17:46:a9:80:be:65:e0:02:c4:e2:59:ed:ad:4b:
d9:57:72:65:35:a0:ed:a2:af:d4:74:86:be:df:f4:
64:1d:c2:9b:32:16:99:b1:e4:8c:66:58:0a:e2:3f:
75:e6:bd:e2:d9:4d:b9:7e:98:75:65:41:c4:32:81:
a1:87:fc:1b:86:64:7b:c2:4e:f0:e0:b3:15:bc:a5:
12:65:4a:83:ec:8a:9d:da:5b:63:13:5c:3b:96:87:
07:3d:21:30:16:f5:da:95:32:79:89:57:bd:04:96:
57:20:6a:55:11:f6:a2:79:4d:a7:76:8a:ac:f1:3b:
07:01:fd:e2:92:52:75:b6:56:1d:72:4d:68:2b:b2:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:11:CF:E4:73:79:BB:EE:96:5F:67:79:5C:39:B4:A0:4E:C0:F7:6B
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xBHP5HN5u-6WX2d5XDm0oE7A92s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f10::/44
Signature Algorithm: sha256WithRSAEncryption
2c:0e:ec:b2:ec:dd:80:c6:31:50:7f:d6:e1:d6:63:32:1e:ec:
2f:fb:0f:ca:1e:be:fd:f3:d1:69:f8:70:ea:ba:f6:24:23:f9:
3b:7d:dc:7c:97:bf:45:99:5e:63:9a:3d:1f:84:e8:8a:a7:00:
ab:04:fc:06:28:c8:94:fe:ec:94:41:17:34:30:c1:d1:95:90:
d2:ff:bd:fe:37:f0:0a:14:4a:94:fe:90:98:e1:34:9e:e0:27:
ba:aa:48:29:89:3d:0f:40:10:c0:2c:aa:bc:8a:b8:3f:77:88:
c9:5a:9c:1b:7b:76:6f:81:56:aa:9b:76:6d:fb:79:12:19:99:
68:14:6e:4a:34:3e:d0:a8:fe:9d:40:ef:fd:08:8d:31:af:7e:
63:aa:54:ed:61:35:35:b9:79:b7:8f:9b:df:b9:9a:f6:ff:1b:
b2:36:a6:bd:47:29:28:a0:75:ef:aa:fa:33:6b:72:70:11:4c:
6b:21:17:d2:15:b9:ff:8b:1e:09:66:c7:01:ce:2d:d9:54:ef:
3e:df:16:39:d7:df:7b:fc:60:8e:33:d2:e3:e7:0c:19:6f:b4:
85:cd:d9:d8:60:af:1a:fe:74:7d:da:da:88:78:74:30:a5:18:
e8:73:8d:3f:69:87:b5:cb:de:5e:06:d6:14:54:f7:27:68:c1:
82:51:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:11:43 2026 by rpki-client