Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-1UqCLjPyyinmdbWHLkmX_uTRTQ.roa
File: 1-1UqCLjPyyinmdbWHLkmX_uTRTQ.roa (raw, json)
Hash identifier: TDshacqov78wx8FUbp+n0Fj7TWpi3ZCDHBvcC1Bx+VQ=
Subject key identifier: FB:55:2A:08:B8:CF:CB:28:A7:99:D6:D6:1C:B9:26:5F:FB:93:45:34
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A02397D5F1E1794D23EFD38C3D3C2F4C56
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-1UqCLjPyyinmdbWHLkmX_uTRTQ.roa
Signing time: Fri 21 Aug 2026 09:12:28 +0000
ROA not before: Fri 21 Aug 2026 09:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218912
IP address blocks: 2a0c:b641:ea0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:97:d5:f1:e1:79:4d:23:ef:d3:8c:3d:3c:2f:4c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 21 09:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb552a08b8cfcb28a799d6d61cb9265ffb934534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:a6:24:98:b9:4f:cd:1e:6e:37:3f:b9:63:
3c:74:a8:23:0a:05:65:20:a1:7c:99:b9:ef:46:de:
38:b4:b9:7a:28:c2:2d:1e:4f:af:f2:5e:3c:0a:7c:
c9:f3:ab:09:58:30:60:42:63:5b:8b:67:3f:48:81:
22:88:f2:10:de:98:6d:f7:74:5f:5d:da:17:66:82:
43:80:23:5d:ce:15:74:76:9c:86:46:c1:b9:c6:9a:
54:b5:76:11:e0:35:34:5d:03:3a:20:3d:10:ad:0d:
ac:99:89:3e:b3:7c:cd:1a:83:8c:b6:19:0b:e0:96:
1c:87:3b:8e:41:ed:64:8e:2f:62:a0:48:d9:dc:63:
33:cd:71:35:32:23:6c:06:c3:d9:f2:ff:f5:95:0b:
98:dd:ef:45:c5:20:06:56:6a:c3:00:e9:5d:0d:f2:
5f:de:9b:8a:39:ec:96:4c:c7:f4:d1:34:63:84:75:
22:29:ba:5c:7e:11:e4:5c:95:7a:25:f9:a7:73:1e:
20:63:8c:59:ae:7e:51:c7:f0:8f:33:ea:88:bf:aa:
39:c5:40:d9:26:0e:ce:f7:b5:9c:a1:fe:bc:43:3d:
83:ff:1d:d2:78:b0:2b:10:12:ec:7f:d6:b3:1c:0a:
e5:01:a6:93:4f:3e:31:e1:64:21:fc:f0:a1:33:d0:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:2A:08:B8:CF:CB:28:A7:99:D6:D6:1C:B9:26:5F:FB:93:45:34
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-1UqCLjPyyinmdbWHLkmX_uTRTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ea0::/44
Signature Algorithm: sha256WithRSAEncryption
59:16:9c:f9:5a:e0:a9:36:e7:7c:c3:ca:15:d5:b2:5b:d9:c9:
c1:d2:07:4b:c6:ee:d2:d5:c1:e0:1a:1b:72:ff:0c:32:53:a3:
ca:17:f3:7e:97:17:f9:91:51:41:ca:f6:f7:35:c6:19:76:a7:
8c:a1:f9:f6:84:ef:e0:90:aa:96:88:15:1c:15:3b:61:d7:54:
58:58:3f:dc:8b:74:2f:3c:0d:dd:9a:b9:1b:c9:c1:0c:b6:40:
90:43:3c:bf:87:04:06:32:7a:16:10:7e:cc:17:cd:69:7f:5e:
bd:7f:8d:ac:de:2b:e5:bb:a2:21:75:d9:43:2c:67:47:8f:10:
5a:35:e3:40:ba:a4:e6:02:a1:94:57:9e:1b:6a:f6:81:78:5b:
1e:34:8d:97:c0:a2:a7:8a:c8:6a:6e:21:9b:81:d5:cd:c3:6e:
0f:c3:25:b4:c5:94:38:ef:9a:07:c1:24:15:3e:5b:1a:0f:22:
84:f7:6f:49:32:61:6b:23:06:84:3d:02:56:f1:78:61:3c:5b:
df:e3:7d:1d:22:73:d0:64:48:b0:49:d3:5a:ca:77:5d:3d:7d:
20:fa:91:80:3c:be:50:67:00:84:f3:a6:50:88:e2:9c:33:d8:
2a:b0:71:81:b7:5b:6d:38:1f:1d:1a:4a:fd:59:42:08:ee:94:
a6:01:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:15 2026 by rpki-client