Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/IHuUBRRglCfbdvNbUV-iKz5DV1g.roa
File: IHuUBRRglCfbdvNbUV-iKz5DV1g.roa (raw, json)
Hash identifier: qJLmg+dRTAnoWSboDQ2BZ6yMf1SO5CUNSe2jQzY22es=
Subject key identifier: 20:7B:94:05:14:60:94:27:DB:76:F3:5B:51:5F:A2:2B:3E:43:57:58
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019FF0FE65B1EB059CA1F9E12E46A2360C93
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/IHuUBRRglCfbdvNbUV-iKz5DV1g.roa
Signing time: Tue 11 Aug 2026 13:23:51 +0000
ROA not before: Tue 11 Aug 2026 13:23:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218998
IP address blocks: 2a0c:b641:e70::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:fe:65:b1:eb:05:9c:a1:f9:e1:2e:46:a2:36:0c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 11 13:23:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=207b940514609427db76f35b515fa22b3e435758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:a1:16:fe:b9:a7:1b:2f:48:3a:a4:10:10:
27:20:c4:d1:4b:cf:8a:ae:5e:71:69:8c:c3:e6:18:
6b:3a:4c:83:f4:d0:ee:bd:8b:ac:a0:6f:6f:d5:71:
d1:17:a1:d5:a7:67:19:03:65:85:fc:33:e1:58:58:
eb:d2:24:12:a6:ef:56:e0:37:14:a5:62:d5:06:1c:
dc:16:8d:68:58:18:35:33:74:dc:e5:d2:9e:f1:f5:
3f:97:be:0d:23:f6:89:24:86:bf:56:5a:6d:2f:49:
bd:67:9c:d5:e6:dc:9e:54:2e:af:d1:40:cc:6c:c7:
ed:57:12:9d:10:d0:e3:f3:76:ce:9b:ae:5a:68:c8:
b4:87:de:23:3a:07:4a:bf:88:e6:6f:ee:31:e0:d7:
29:e8:d2:99:8b:c4:9e:12:29:b0:6f:6f:20:14:2b:
5e:00:df:2d:04:e9:ab:75:5b:d6:7a:95:05:78:9c:
f4:7e:73:b5:08:9b:94:70:43:cb:29:ad:f5:35:69:
a6:77:02:f2:16:74:7d:06:70:0e:31:6d:1d:ff:8c:
e9:25:d2:ce:bf:1c:66:58:5c:67:f9:d2:4b:a4:c5:
42:df:96:a5:b9:97:b7:ac:89:a6:18:f4:c4:a2:c2:
53:e5:3a:32:72:ea:f1:d9:79:8a:1d:59:cb:af:ac:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7B:94:05:14:60:94:27:DB:76:F3:5B:51:5F:A2:2B:3E:43:57:58
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/IHuUBRRglCfbdvNbUV-iKz5DV1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:e70::/44
Signature Algorithm: sha256WithRSAEncryption
2a:8e:68:30:25:26:50:b9:ef:08:a2:29:30:a4:db:88:0b:7d:
91:0f:83:aa:cf:f4:1b:38:45:42:af:11:5c:c4:88:dd:2c:f7:
ed:0e:e6:a1:3d:fe:77:1d:7a:15:32:c5:91:ec:36:ea:e0:2b:
4a:35:ef:9a:fc:fa:f3:f9:73:5e:3e:9c:76:9f:fd:67:35:a8:
19:65:01:11:60:a3:12:eb:b6:63:62:8c:ff:3d:5f:4b:03:2c:
e6:3b:9b:d5:14:66:1c:6d:f3:d6:d4:b2:3e:1d:dd:f2:d0:fa:
45:67:5a:d0:41:1f:0c:79:a6:d4:39:bb:ac:62:84:24:2e:52:
d4:a2:a2:a5:1a:0b:26:81:5b:0b:93:2d:2b:1a:90:9a:7d:bc:
16:b9:65:bc:7a:f0:59:7e:4e:12:80:cd:cd:ed:c5:0a:72:5a:
1d:88:03:4a:e2:60:3a:f5:3f:bf:47:ba:97:73:30:4b:31:ca:
3b:53:e8:88:9f:e5:e3:91:b6:e1:31:10:90:f5:12:f9:83:be:
57:4f:be:da:89:a4:9d:13:d5:e4:5a:e2:eb:b6:63:81:0e:fa:
f8:e2:a0:cd:a8:3d:d8:fe:69:8b:07:10:3d:fb:1e:a6:85:0f:
dd:e1:23:01:e6:9f:ae:a2:72:6b:17:c9:38:f1:22:25:80:e7:
1a:12:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:24 2026 by rpki-client