Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/96ne4EpEtX06wL-cbFFx-qIGr90.roa
File: 96ne4EpEtX06wL-cbFFx-qIGr90.roa (raw, json)
Hash identifier: MV4P6OZnpp1lPP6doCsSMEvrku/T0NbRiCYKnCmPoaY=
Subject key identifier: F7:A9:DE:E0:4A:44:B5:7D:3A:C0:BF:9C:6C:51:71:FA:A2:06:AF:DD
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019FB32382A0DA60996D9D84C4F4C583F3F1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/96ne4EpEtX06wL-cbFFx-qIGr90.roa
Signing time: Thu 30 Jul 2026 13:07:56 +0000
ROA not before: Thu 30 Jul 2026 13:07:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219096
IP address blocks: 2a0c:b641:e30::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:23:82:a0:da:60:99:6d:9d:84:c4:f4:c5:83:f3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 30 13:07:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7a9dee04a44b57d3ac0bf9c6c5171faa206afdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:b5:77:9a:79:51:fd:90:1a:a3:89:2b:4b:
8a:8d:01:48:c8:37:b6:bc:3a:5f:05:52:26:13:b3:
b2:07:cc:2d:c9:4b:07:6a:af:b0:71:7c:d3:f6:a4:
bc:25:8b:94:19:b8:ac:91:88:71:66:dd:84:31:8f:
9a:08:29:ef:76:ac:79:12:1b:ca:a3:de:83:22:be:
d3:af:b3:cb:40:da:ee:73:52:68:a8:e2:05:87:8f:
c1:89:3c:bb:28:58:d9:71:a9:09:37:db:37:55:98:
47:fe:8c:6f:ce:c1:c9:74:3e:7f:0e:fb:59:de:eb:
1b:fa:c5:ce:a7:37:a3:bd:7a:da:5e:d6:3b:59:9e:
43:81:57:e8:21:b8:82:f4:be:39:c3:67:43:46:c7:
a7:b3:10:df:c8:d8:e0:a1:7e:47:65:76:14:1b:61:
17:d9:c0:82:12:ac:75:b9:f7:36:11:0b:ee:e9:18:
88:f8:9e:89:30:2f:f9:08:6d:34:81:01:e8:2d:37:
9c:79:da:2d:d7:7f:ca:e3:32:50:20:1a:80:e2:bc:
f8:8e:f4:f6:b3:f7:aa:2b:27:43:82:c2:a5:50:2b:
50:a2:78:03:80:01:d8:2e:54:50:15:cf:8d:8f:2b:
fd:ad:52:11:f0:14:62:3b:6c:a4:da:63:61:23:0e:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A9:DE:E0:4A:44:B5:7D:3A:C0:BF:9C:6C:51:71:FA:A2:06:AF:DD
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/96ne4EpEtX06wL-cbFFx-qIGr90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:e30::/44
Signature Algorithm: sha256WithRSAEncryption
33:7b:87:ff:ef:7f:6c:04:e9:95:55:7c:fb:ca:69:75:23:22:
87:56:b6:0f:01:bb:48:7b:4a:06:f2:5c:d7:8a:3a:a2:a2:cc:
91:65:fd:a5:3b:68:0e:62:cd:57:a2:31:fa:ed:de:c0:24:ff:
f3:20:08:82:24:02:ec:f8:a9:0e:09:46:ee:8e:82:ee:2a:81:
98:ae:e1:20:69:68:81:e9:9b:e0:2e:e7:b0:d8:7e:12:26:b5:
20:61:7d:d4:6a:ed:32:70:aa:0d:30:ae:26:0f:e6:a9:65:94:
0d:ab:99:35:e9:ad:8a:43:50:bf:2c:9f:4f:9e:ba:c6:29:77:
d7:b7:5b:3d:c0:6c:96:c7:3e:88:d8:43:1b:45:de:d2:2f:da:
a8:b5:0a:1e:cd:ab:d3:3a:f9:98:f8:9d:1e:45:5c:04:ed:03:
b7:42:9b:89:2c:21:51:5d:f3:b5:b0:79:07:72:69:30:05:09:
a4:28:a7:73:ff:1b:6e:b7:19:c4:cb:96:e5:f6:be:62:08:72:
1c:28:89:e0:de:71:0c:14:23:1a:22:27:73:84:33:0c:f2:51:
e2:8c:93:c9:a0:13:da:b6:76:11:58:c2:01:78:46:e4:c5:5f:
86:12:0e:3a:09:6c:28:ac:c5:a3:bd:57:90:eb:17:7f:8a:f1:
e6:29:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:16 2026 by rpki-client