Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FeeP9WGQVq0FvjfLJl4OQ9AIX5o.roa
File: FeeP9WGQVq0FvjfLJl4OQ9AIX5o.roa (raw, json)
Hash identifier: eAA8tS++PlB/7K1SpMeerbRFneeIt5vnbqvKbYFPT3w=
Subject key identifier: 15:E7:8F:F5:61:90:56:AD:05:BE:37:CB:26:5E:0E:43:D0:08:5F:9A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019F83C1F8C0A212E129CC4E92595C4FD9A4
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FeeP9WGQVq0FvjfLJl4OQ9AIX5o.roa
Signing time: Tue 21 Jul 2026 08:19:15 +0000
ROA not before: Tue 21 Jul 2026 08:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219170
IP address blocks: 2a0c:b641:2d0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:c1:f8:c0:a2:12:e1:29:cc:4e:92:59:5c:4f:d9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 21 08:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15e78ff5619056ad05be37cb265e0e43d0085f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:38:e2:24:5d:d0:cf:93:b0:5b:ab:76:47:
2f:87:7e:a0:e5:14:f4:fe:c9:81:00:1e:f5:8b:33:
57:65:2a:98:d8:24:37:af:4b:25:67:c0:7e:99:7a:
ea:73:53:2d:0c:a4:0b:8b:46:51:53:0d:e0:90:e5:
28:e4:da:c8:34:60:f3:83:3f:49:ca:67:35:21:07:
5c:ed:bd:7a:8d:46:6b:02:fa:50:fa:6b:39:c5:c5:
8a:7c:7a:f9:94:46:59:2a:82:41:71:bf:b7:49:81:
80:6e:ae:d3:d5:cc:81:c4:c5:ed:32:50:8e:a1:d2:
8b:ea:02:c8:bd:0f:0a:8b:9c:22:54:d8:0b:de:e3:
57:da:e9:7e:bd:d0:d4:4b:0b:3b:1f:92:ee:65:f0:
cd:e2:c4:79:eb:28:a3:93:3f:18:90:40:69:ef:09:
e3:a1:68:68:c6:cf:6b:e7:5c:fc:18:42:c2:6c:8a:
3d:a5:77:b2:fa:fe:a2:83:fa:57:6e:a7:c0:17:3a:
cd:71:08:d7:61:da:91:cc:b1:65:27:3c:e9:72:37:
23:0a:da:93:fa:f4:1d:1d:01:18:04:ef:69:4b:bf:
4e:b3:ad:ce:64:e7:58:ed:91:39:0e:63:87:60:7a:
b6:27:12:cf:b9:0e:a1:5e:09:4d:6f:ef:5e:25:42:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E7:8F:F5:61:90:56:AD:05:BE:37:CB:26:5E:0E:43:D0:08:5F:9A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FeeP9WGQVq0FvjfLJl4OQ9AIX5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
86:de:bd:c9:59:47:95:d1:bb:98:db:2a:b2:20:bb:10:c7:e5:
f9:a7:81:14:32:17:2b:a4:21:aa:41:fc:26:eb:08:a7:37:bd:
06:77:74:7d:44:93:86:62:db:ae:b4:a1:43:7c:3f:da:b2:65:
76:61:60:f0:2e:40:13:96:0f:94:5e:53:0a:60:73:8b:37:25:
a8:14:0b:5a:13:72:e2:ca:89:17:72:ab:71:ef:ac:5a:ca:43:
26:57:ff:ae:f2:60:fa:fa:3e:12:45:a7:a2:34:35:34:64:46:
f7:70:32:d8:97:d7:1e:6d:6a:4e:4f:2f:87:e3:92:68:64:72:
82:1d:18:e2:92:a3:88:62:04:bf:b3:66:e8:2f:c3:62:e9:56:
1d:3d:e8:1b:ea:54:ce:e4:65:8a:12:1d:37:d1:6e:77:ce:ec:
1b:e6:c9:51:e7:73:06:e5:48:4f:9e:cd:2d:f5:66:e7:5a:ae:
84:70:9b:2b:89:99:83:e1:fc:f7:2d:f6:75:b7:f5:f3:95:f9:
b0:94:26:38:f7:ff:a0:c2:69:4b:dd:91:f8:7e:f6:76:e1:d9:
66:32:59:a2:bc:33:e1:f1:64:22:0e:bc:be:79:08:d2:f4:76:
3d:51:cd:c8:db:df:6b:e5:0f:97:e6:ab:e7:eb:88:6c:b3:21:
aa:d3:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client