Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JNT3G87Ywq5LlKDuBrx6RgdO4qA.roa
File: JNT3G87Ywq5LlKDuBrx6RgdO4qA.roa (raw, json)
Hash identifier: NUpAfTY3NRSmBVcA7bfXhIuUxdUD0TxoFK1xRpoUfOU=
Subject key identifier: 24:D4:F7:1B:CE:D8:C2:AE:4B:94:A0:EE:06:BC:7A:46:07:4E:E2:A0
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019FDB8FB07708FB33E2F0BD9753C43AA3E2
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JNT3G87Ywq5LlKDuBrx6RgdO4qA.roa
Signing time: Fri 07 Aug 2026 09:30:54 +0000
ROA not before: Fri 07 Aug 2026 09:30:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219031
IP address blocks: 2a0c:b641:e40::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:8f:b0:77:08:fb:33:e2:f0:bd:97:53:c4:3a:a3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 7 09:30:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24d4f71bced8c2ae4b94a0ee06bc7a46074ee2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:16:4f:d7:d3:69:f7:0a:8d:dc:73:06:0d:
1a:56:c9:1a:c2:82:c2:4d:b8:b1:59:07:42:2b:8a:
1b:b9:d8:4f:7d:2f:27:2d:73:f3:95:7b:f9:76:e1:
d0:b3:32:93:14:84:c3:57:56:04:d3:8c:4a:68:17:
e6:b1:6c:05:28:b9:a4:35:3f:5d:fd:80:14:41:20:
11:68:48:9b:54:81:9f:80:1e:5d:a7:0e:8d:0b:ce:
f2:c6:a3:11:a3:37:c8:ff:b1:2b:aa:93:93:e6:41:
68:fe:70:11:ef:b8:fa:62:42:61:39:19:48:a7:4a:
74:1a:35:77:14:4b:9f:01:2b:be:72:c3:5a:9f:50:
53:f1:12:a5:07:ba:f7:4c:69:a0:e0:e5:46:ad:88:
75:af:34:26:2c:7e:27:40:c8:b3:7e:21:bc:89:f4:
d5:07:f4:55:a1:f9:af:84:c9:bc:8e:2e:84:ec:55:
34:99:be:8f:09:a6:09:34:f0:b7:61:11:95:63:e7:
0c:b0:01:07:72:28:33:15:dd:35:fd:80:95:67:6b:
f0:e1:1b:1c:f2:c8:bb:71:ed:fb:50:b0:90:da:d6:
6e:74:ba:2e:c1:25:1f:96:bc:90:5d:06:ca:35:d9:
c8:ea:83:6d:00:b1:67:da:b7:48:7c:66:bd:6e:c9:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:F7:1B:CE:D8:C2:AE:4B:94:A0:EE:06:BC:7A:46:07:4E:E2:A0
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JNT3G87Ywq5LlKDuBrx6RgdO4qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:e40::/44
Signature Algorithm: sha256WithRSAEncryption
12:5c:9f:83:4c:7a:3f:4b:14:4d:e9:ed:57:24:c4:b2:09:59:
b1:5d:7d:7b:7d:55:39:f1:ff:05:05:33:73:60:ad:50:1f:fe:
42:d0:da:46:cc:89:31:e1:2d:b3:40:7c:b2:ae:5b:ed:97:eb:
2e:90:1d:c4:f2:a8:19:01:71:2a:0f:df:5c:ed:12:7b:7f:81:
6b:09:93:79:30:36:6f:a5:69:63:f1:b4:28:ae:21:b0:c1:69:
68:d8:b7:8c:98:11:fe:fd:23:f0:c1:9c:fc:94:ff:50:54:42:
4a:ff:4a:ff:21:65:84:95:9d:91:48:c6:ec:26:37:07:e8:43:
df:cf:a1:33:6c:c7:3c:cf:70:55:c4:12:b0:e3:13:52:f4:e9:
5f:e3:34:07:4c:87:c9:69:82:ae:32:32:39:1f:3b:b4:bd:59:
01:09:96:64:c9:55:80:88:58:94:a3:13:e8:b7:46:2b:7b:ef:
b4:57:48:aa:32:4e:fb:ba:b7:26:3d:98:60:c1:f5:d7:74:1f:
84:90:95:8b:f6:9b:3b:06:b8:ca:85:bc:15:5d:e2:6f:e3:02:
a1:64:32:4d:27:bb:19:7b:48:85:58:17:41:3d:f0:27:17:1e:
62:23:19:3a:cb:fd:e5:3e:36:2c:94:bd:8a:b2:1c:1c:d7:0e:
76:98:7b:aa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ/bj7B3CPsz4vC9l1PEOqPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYwODA3MDkzMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGQ0ZjcxYmNlZDhjMmFlNGI5NGEwZWUwNmJjN2E0NjA3NGVlMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb8WT9fTafcKjdxzBg0aVskawoLC
TbixWQdCK4obudhPfS8nLXPzlXv5duHQszKTFITDV1YE04xKaBfmsWwFKLmkNT9d
/YAUQSARaEibVIGfgB5dpw6NC87yxqMRozfI/7ErqpOT5kFo/nAR77j6YkJhORlI
p0p0GjV3FEufASu+csNan1BT8RKlB7r3TGmg4OVGrYh1rzQmLH4nQMizfiG8ifTV
B/RVofmvhMm8ji6E7FU0mb6PCaYJNPC3YRGVY+cMsAEHcigzFd01/YCVZ2vw4Rsc
8si7ce37ULCQ2tZudLouwSUflryQXQbKNdnI6oNtALFn2rdIfGa9bsk1gwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCTU9xvO2MKuS5Sg7ga8ekYHTuKgMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvSk5UM0c4N1l3cTVMbEtEdUJyeDZSZ2RPNHFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQ5A
MA0GCSqGSIb3DQEBCwUAA4IBAQASXJ+DTHo/SxRN6e1XJMSyCVmxXX17fVU58f8F
BTNzYK1QH/5C0NpGzIkx4S2zQHyyrlvtl+sukB3E8qgZAXEqD99c7RJ7f4FrCZN5
MDZvpWlj8bQoriGwwWlo2LeMmBH+/SPwwZz8lP9QVEJK/0r/IWWElZ2RSMbsJjcH
6EPfz6EzbMc8z3BVxBKw4xNS9Olf4zQHTIfJaYKuMjI5Hzu0vVkBCZZkyVWAiFiU
oxPot0Yre++0V0iqMk77urcmPZhgwfXXdB+EkJWL9ps7BrjKhbwVXeJv4wKhZDJN
J7sZe0iFWBdBPfAnFx5iIxk6y/3lPjYslL2Kshwc1w52mHuq
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:30 2026 by rpki-client