Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4RxhitUKGE5w5xZ2VQWkDvnBkO0.roa
File: 4RxhitUKGE5w5xZ2VQWkDvnBkO0.roa (raw, json)
Hash identifier: gnPmu8hpg9kkUKNDSc2L7hD9fC64I96cCnI+Li8PqJE=
Subject key identifier: E1:1C:61:8A:D5:0A:18:4E:70:E7:16:76:55:05:A4:0E:F9:C1:90:ED
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019FB3322733C664E173AD1D484224EB3A58
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4RxhitUKGE5w5xZ2VQWkDvnBkO0.roa
Signing time: Thu 30 Jul 2026 13:23:56 +0000
ROA not before: Thu 30 Jul 2026 13:23:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219097
IP address blocks: 2a0c:b641:670::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:32:27:33:c6:64:e1:73:ad:1d:48:42:24:eb:3a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 30 13:23:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e11c618ad50a184e70e716765505a40ef9c190ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:b0:3e:8e:15:bd:8d:6a:7c:f1:fe:ae:9a:
9c:0b:dd:d9:24:e7:7c:9d:cf:9c:ec:07:ab:62:e4:
89:5d:11:be:40:a2:04:d5:36:77:f9:9b:39:40:19:
3c:43:cc:62:18:ec:9a:37:c0:b8:c4:66:45:ba:19:
05:07:b0:35:1f:e5:84:c6:e6:56:74:f1:e1:54:c8:
c9:6e:d4:cb:dd:0f:56:e7:2d:c0:51:fa:c7:db:93:
a1:2e:a9:dc:cb:d3:49:93:96:25:cc:97:cd:e5:b2:
73:2c:e6:b1:c2:2c:a0:22:ca:2f:a4:e8:ab:20:ef:
53:18:a2:77:0c:25:df:41:e8:3d:e8:12:f7:27:b0:
45:b8:ca:cf:ec:2f:26:ed:d8:f9:8b:87:48:55:57:
fa:0c:71:b2:5f:7d:e9:84:41:2a:63:26:da:58:4c:
df:1e:4c:4f:54:81:7e:e2:09:35:a8:48:22:70:3e:
5d:a6:fd:79:af:60:6e:46:f6:a7:c3:d4:95:5a:13:
88:1f:a8:4c:69:79:27:71:fa:0a:1f:6a:47:ca:48:
00:b1:1e:7a:78:05:fb:cc:08:40:5a:86:03:12:52:
69:dc:95:29:66:be:74:df:c5:55:a2:a0:ee:fd:c7:
42:fe:3b:c7:57:a4:ce:fe:58:e0:18:7c:49:56:36:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:61:8A:D5:0A:18:4E:70:E7:16:76:55:05:A4:0E:F9:C1:90:ED
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4RxhitUKGE5w5xZ2VQWkDvnBkO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:670::/44
Signature Algorithm: sha256WithRSAEncryption
77:bd:14:17:b5:67:a3:ed:f3:ff:c0:30:61:4a:39:bb:09:32:
da:9a:d0:27:af:58:c2:64:4e:93:61:b4:ab:ab:ca:d0:f1:50:
40:32:52:1b:e9:33:10:b3:c7:76:23:da:02:a8:e1:b7:98:11:
c1:97:af:85:9b:c2:30:2f:ee:2c:18:14:1e:9c:cf:d6:a2:84:
b3:a9:7b:da:b9:ac:53:a7:65:b1:dd:77:3d:e0:7e:8e:11:3d:
7b:c2:3d:fb:9b:53:ce:eb:dd:a1:3f:67:74:f6:9b:bf:47:4d:
b5:ca:ef:55:a2:39:5a:3a:70:38:3e:4c:b7:d0:ca:a1:b6:af:
29:ad:7d:6e:a0:84:c0:59:69:e8:4f:d1:0d:53:6c:48:0b:76:
f5:fd:af:02:ef:cc:e8:9f:95:92:71:82:a5:84:58:e6:71:89:
04:63:61:d1:71:5d:e3:7a:5a:da:30:d3:3c:39:b4:a9:ac:75:
c1:41:8f:90:59:1d:d8:a9:9e:34:e2:48:93:a7:bb:ec:67:47:
a5:53:90:bf:55:02:a5:68:a1:46:3e:a3:a3:e8:21:e7:f5:af:
a7:ef:32:4b:4b:82:12:95:f2:08:15:0b:05:55:ea:45:de:a9:
6e:ab:ea:16:2f:b2:2a:11:07:0a:f8:bb:1d:b2:50:84:bb:9c:
67:ec:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:32 2026 by rpki-client