Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/D0p6VRoMwtzSbcrEp-j_aGK-mwI.roa
File: D0p6VRoMwtzSbcrEp-j_aGK-mwI.roa (raw, json)
Hash identifier: gGc0fr6Bq1vcVleGMu1sMig59JXY2bXufJd67QAIgIo=
Subject key identifier: 0F:4A:7A:55:1A:0C:C2:DC:D2:6D:CA:C4:A7:E8:FF:68:62:BE:9B:02
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019ECB004BA0F2550925516F419EB6F41A22
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/D0p6VRoMwtzSbcrEp-j_aGK-mwI.roa
Signing time: Mon 15 Jun 2026 11:17:34 +0000
ROA not before: Mon 15 Jun 2026 11:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219441
IP address blocks: 2a0c:b641:dd0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:00:4b:a0:f2:55:09:25:51:6f:41:9e:b6:f4:1a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 15 11:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f4a7a551a0cc2dcd26dcac4a7e8ff6862be9b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:b7:06:97:1d:3d:1a:b6:dd:55:64:c8:b1:
ff:6e:bd:fa:16:2d:54:b7:4c:1f:92:96:c1:c0:6e:
cd:3c:67:c4:18:91:f8:fc:22:7a:50:46:18:24:c5:
d5:2e:5c:45:3e:b1:2a:fb:af:7f:a7:d7:77:35:bd:
17:b5:c7:5c:e5:83:63:4a:e6:67:22:c6:a6:e0:d3:
c3:9d:a6:45:c7:fc:e4:72:3e:dc:c4:f9:92:60:ba:
d1:d5:c0:a0:49:bb:cd:7c:fa:db:28:80:8b:a2:3b:
ca:ac:a9:7c:c1:06:a0:95:e6:1c:5f:c4:2b:ee:7e:
48:79:35:25:50:76:0b:50:12:61:7d:fd:65:40:8f:
9a:d3:e2:60:8f:44:04:06:33:5d:21:6d:52:bc:92:
03:76:95:c3:cc:6e:63:c9:14:73:01:e3:78:7c:11:
6c:ff:73:05:6b:42:b1:35:4a:4e:eb:80:dd:af:20:
69:79:e6:11:fa:69:29:72:8e:78:db:be:4a:ab:3a:
ac:ef:29:63:fc:4c:55:97:1f:60:42:97:68:2a:49:
0c:2e:12:66:91:82:47:f3:1a:45:d1:05:44:be:b4:
5b:e8:7f:b9:89:a7:0e:bc:41:d0:96:4e:fe:96:8e:
ae:ac:90:e3:eb:54:11:18:c5:75:18:fc:c8:98:cb:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:7A:55:1A:0C:C2:DC:D2:6D:CA:C4:A7:E8:FF:68:62:BE:9B:02
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/D0p6VRoMwtzSbcrEp-j_aGK-mwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:dd0::/44
Signature Algorithm: sha256WithRSAEncryption
85:e6:e5:75:9d:d9:e2:c3:a3:62:36:8c:c6:61:6c:a9:17:52:
f6:78:3e:6f:39:0f:d4:63:b4:ae:68:cb:8b:84:47:6a:d5:ed:
7c:65:28:99:76:fd:7c:78:de:ed:18:c8:59:17:bb:16:8e:b1:
6b:de:41:99:a4:48:c6:c5:50:f0:98:b6:91:4c:ae:55:8c:ce:
98:ad:b5:d3:f9:a1:a9:89:ae:05:45:76:7d:b7:b4:bf:f1:86:
b7:c7:28:33:3c:ef:87:8e:45:6d:85:f6:c2:2c:e9:71:33:09:
9f:5e:76:0d:b4:6e:e2:84:c7:48:80:4a:77:be:80:0a:87:5a:
ec:6b:17:b5:75:c3:1a:18:5b:82:83:08:a0:15:5a:27:03:33:
de:70:a2:c7:1d:17:f8:54:2c:ac:b3:21:1b:19:31:b8:23:2e:
2c:bc:29:a2:7d:ad:41:23:9e:63:2f:9b:4c:2f:32:53:ca:86:
0d:57:e3:12:94:7f:e9:db:36:c4:a9:51:d7:ca:9a:2e:b0:1e:
a1:91:fc:79:72:1b:75:f4:4e:5f:46:89:cf:d4:49:e7:cd:5b:
67:9f:c7:18:7b:6e:d5:6f:a4:4e:95:ce:ac:85:fb:75:57:ab:
94:b2:0e:80:05:62:4e:48:76:cd:1f:5d:b4:ed:8d:f1:1e:bf:
83:04:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client