Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LLtyi6Rbk1hzYIGaMCWFlgkDfdw.roa
File: LLtyi6Rbk1hzYIGaMCWFlgkDfdw.roa (raw, json)
Hash identifier: FfjdrJk4T/LcH96K0hAj6HBRb2gvpViVkn8I4GgDkHE=
Subject key identifier: 2C:BB:72:8B:A4:5B:93:58:73:60:81:9A:30:25:85:96:09:03:7D:DC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019E6FC60067155969D2684E00B337053E2C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LLtyi6Rbk1hzYIGaMCWFlgkDfdw.roa
Signing time: Thu 28 May 2026 18:08:27 +0000
ROA not before: Thu 28 May 2026 18:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197191
IP address blocks: 2a0c:b641:460::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:c6:00:67:15:59:69:d2:68:4e:00:b3:37:05:3e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 28 18:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cbb728ba45b93587360819a3025859609037ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:01:07:46:08:a3:cd:f2:a1:36:3c:3f:57:
1d:01:3a:82:e7:62:74:e4:37:48:ff:fa:46:5a:37:
02:38:d6:86:87:86:f3:cd:64:b1:cf:6a:0c:90:f9:
31:cb:0c:78:c4:09:f7:60:01:7b:4f:2a:37:84:44:
ee:7a:fa:0d:f8:cb:b2:e5:84:b3:b8:00:5a:23:ac:
08:4d:85:f1:3c:92:d7:ad:c7:94:dc:8d:b9:f7:f6:
76:a1:30:3b:59:de:e7:dc:64:71:dc:a4:cb:8d:23:
6d:66:94:d2:17:65:ed:43:b4:1b:2c:86:69:ed:00:
0f:ea:10:c3:8d:88:1c:8c:d0:d7:fc:09:27:1c:42:
b1:85:34:70:bc:e6:4b:b1:23:83:e6:22:23:32:43:
da:60:26:e7:dd:e1:c0:27:ba:f5:d7:d7:54:13:89:
f9:c7:ea:c8:9f:73:b3:d1:4b:a6:11:24:fe:5e:8b:
0f:cf:a9:a8:03:f4:3d:6b:50:24:41:ce:8d:6b:95:
b5:20:2d:aa:c2:ba:88:1a:69:3f:87:7b:63:98:ed:
9b:15:a6:b0:ee:8f:16:14:66:66:26:e0:03:75:50:
a8:24:35:bb:e5:09:3a:91:d8:bb:32:06:28:f0:c3:
64:54:2c:f5:40:b6:82:b6:27:51:a2:63:36:d9:ff:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BB:72:8B:A4:5B:93:58:73:60:81:9A:30:25:85:96:09:03:7D:DC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LLtyi6Rbk1hzYIGaMCWFlgkDfdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:460::/44
Signature Algorithm: sha256WithRSAEncryption
03:fc:b0:ca:c5:3b:c3:77:e7:35:da:d2:24:f1:d6:45:da:3d:
c4:c5:9b:8d:fb:f3:ea:d9:e9:c6:bb:3f:25:af:0a:49:9d:5f:
c1:5d:5a:27:5a:36:85:af:4f:f7:23:d6:40:c2:a1:0b:4a:3f:
14:a0:ec:21:fd:34:41:76:69:fd:b5:c2:96:41:43:59:de:be:
ed:db:ef:f0:8b:c2:42:44:8c:4c:78:44:68:8e:8e:85:81:54:
6c:5c:53:9b:5c:99:f8:13:68:c7:63:a4:56:c0:2d:c5:59:f7:
23:24:4a:39:a7:7f:44:ea:ab:98:2a:a6:b4:59:47:64:ac:00:
4b:03:7f:18:6d:95:ee:e4:66:e5:10:bc:19:38:60:97:cf:2f:
f5:39:86:e0:5f:8f:70:02:da:c3:10:72:b6:16:b0:96:f7:c7:
b6:da:44:8e:fc:e8:46:c2:5f:9d:13:49:d6:4e:75:15:75:1f:
89:4c:0b:35:18:e2:82:d8:d1:61:46:58:2f:f5:28:26:a7:7e:
1b:35:6d:9b:52:6c:db:c3:78:8c:5a:c0:e8:e1:8d:62:5f:87:
f7:48:96:04:53:19:9c:21:87:12:f0:c9:6b:65:d5:7f:0b:90:
6f:e7:7c:29:73:03:92:76:3e:16:db:71:62:a2:4b:1c:2c:97:
a4:fa:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:12:26 2026 by rpki-client