Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1rU9Z_5txC8WTbh7tCpZP8f6Fts.roa
File: 1rU9Z_5txC8WTbh7tCpZP8f6Fts.roa (raw, json)
Hash identifier: yw+TBz6GcUL5hukXzy8OgQiFby8dhxBv1KvvVo5I8x0=
Subject key identifier: D6:B5:3D:67:FE:6D:C4:2F:16:4D:B8:7B:B4:2A:59:3F:C7:FA:16:DB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019E920D12C46F4E7819DBCC9ED09D15F9E9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1rU9Z_5txC8WTbh7tCpZP8f6Fts.roa
Signing time: Thu 04 Jun 2026 09:53:10 +0000
ROA not before: Thu 04 Jun 2026 09:53:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219536
IP address blocks: 2a0c:b641:c10::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:0d:12:c4:6f:4e:78:19:db:cc:9e:d0:9d:15:f9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 4 09:53:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6b53d67fe6dc42f164db87bb42a593fc7fa16db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:35:9d:5d:26:ee:b5:16:69:4e:2e:c1:ce:
b3:53:f2:15:41:11:43:92:5c:e7:6b:72:57:0e:5f:
6d:72:a8:82:cd:b2:82:9a:64:46:a2:dd:2e:04:30:
89:a5:b8:eb:91:82:f1:59:dc:6f:05:07:6a:3c:f0:
c3:7b:73:03:6e:90:db:0c:06:b7:e5:64:64:1c:0b:
73:85:64:54:db:20:54:c7:63:5b:b9:c9:c8:9b:12:
96:15:26:54:ad:fe:f9:48:96:e6:42:f1:b3:f6:07:
8d:31:9f:a3:f1:3b:92:e5:24:f7:18:37:f0:ac:f6:
f2:3e:c1:38:84:9b:e9:e7:74:18:46:93:69:1a:c2:
d9:b1:10:33:4d:22:d0:97:2c:d9:1f:7a:32:79:78:
2c:92:e0:7b:03:f5:f4:8a:27:55:dc:f4:7c:dd:02:
2d:5f:d3:de:dd:d1:ce:e4:73:9b:bf:07:cf:c8:2f:
0a:2f:fa:32:13:71:78:3f:23:28:1c:09:77:08:c4:
5f:4b:45:d0:97:aa:fe:79:f1:8f:68:e2:95:f5:6b:
14:bc:24:9f:8f:44:f8:d7:33:3a:42:3b:88:22:a6:
0d:35:c2:76:df:91:61:df:1f:4f:72:e0:65:11:5c:
c0:bb:66:9c:0e:be:99:16:8c:51:ba:79:a4:98:da:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:3D:67:FE:6D:C4:2F:16:4D:B8:7B:B4:2A:59:3F:C7:FA:16:DB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1rU9Z_5txC8WTbh7tCpZP8f6Fts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:c10::/44
Signature Algorithm: sha256WithRSAEncryption
78:77:4c:87:0f:0c:f6:74:c6:15:9a:d3:0d:22:ed:7a:b8:80:
aa:0b:40:5e:26:b6:7f:18:b1:3a:d0:1b:d7:9d:f5:a4:d0:e7:
d7:71:e2:e8:ce:c7:cc:10:b5:f2:26:17:2c:5e:da:ca:04:3f:
ef:47:8f:eb:af:f6:3d:d1:68:35:c7:3f:f5:82:ff:9d:66:04:
59:a5:fd:fc:c8:67:82:6b:29:49:f0:aa:b0:05:ac:af:ac:53:
cf:2f:ca:81:50:83:34:95:6f:b0:46:5b:af:24:c5:74:5f:77:
f2:7b:e7:26:3d:3f:36:02:ee:11:cc:28:d8:21:e9:8e:f4:52:
1e:ef:52:8a:0a:60:96:0d:55:11:04:f1:85:16:42:b7:ea:b4:
6f:3a:f5:9b:9d:f8:6f:f8:7c:3e:00:23:c1:2c:78:6b:94:26:
13:28:f4:59:1d:03:e9:f1:69:cd:90:17:fd:4c:6f:92:43:59:
69:05:d5:05:66:d5:a9:9b:45:7c:91:8e:67:7f:6a:18:86:fd:
49:5f:65:46:b4:7e:09:1b:25:95:1d:9e:d9:8b:8a:5e:8f:9b:
bf:3f:41:1d:c5:a5:bc:aa:fa:32:3a:e2:f1:46:b9:9a:c9:0b:
d3:dc:2a:3e:26:19:9e:6f:92:42:3f:4d:85:25:b2:ef:1b:42:
af:69:6a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:12:26 2026 by rpki-client