Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MXQZsZKgwvsxcxvC253tYr0nciw.roa
File: MXQZsZKgwvsxcxvC253tYr0nciw.roa (raw, json)
Hash identifier: Bewm+4UiDAyUI24A1CGv4cQRzIPeEmpBLypDrdkZfOQ=
Subject key identifier: 31:74:19:B1:92:A0:C2:FB:31:73:1B:C2:DB:9D:ED:62:BD:27:72:2C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019ECB4989720733B8E3C48187E32038FAA3
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MXQZsZKgwvsxcxvC253tYr0nciw.roa
Signing time: Mon 15 Jun 2026 12:37:34 +0000
ROA not before: Mon 15 Jun 2026 12:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219437
IP address blocks: 2a0c:b641:db0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:49:89:72:07:33:b8:e3:c4:81:87:e3:20:38:fa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 15 12:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=317419b192a0c2fb31731bc2db9ded62bd27722c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:51:7f:77:3b:b6:a5:1b:1b:ca:12:4e:ae:
67:00:48:7e:c1:c6:26:3f:e9:df:8b:26:97:3d:7a:
6e:33:f7:a3:46:bd:af:96:4b:be:60:44:b7:ef:bb:
b9:e8:a3:22:2f:3e:c2:07:ae:b0:a5:f6:62:a0:e3:
02:f2:e9:9a:38:9a:da:05:5e:a7:61:8f:97:5c:88:
cf:b6:9a:95:c8:24:b5:5f:be:8f:2e:e4:6b:93:df:
45:73:93:cc:5d:3a:a1:ca:45:17:5d:4e:d2:df:5c:
bc:5a:0a:a7:33:d4:ee:35:71:fe:2a:fe:a3:fa:e9:
eb:6a:08:c8:0b:24:44:43:77:ec:cc:3d:f2:d3:5e:
a5:e1:68:29:04:57:c2:97:41:8a:28:9d:d0:0b:c7:
c0:91:b5:f6:b7:1e:b6:43:7f:a0:d0:f1:2b:5b:ae:
44:86:b5:e1:25:90:26:e8:df:ac:fb:f6:7e:a7:2e:
62:71:e8:3a:ce:ad:ad:75:35:1c:83:16:0c:64:46:
7b:5d:50:bf:7d:27:24:50:81:f1:43:9b:fe:5e:26:
1d:9d:2a:a4:fb:6f:ba:f3:7d:1a:4c:a8:de:96:8d:
dd:06:57:df:a2:aa:b2:66:1a:f9:14:d9:3e:f1:5c:
10:41:6c:12:ad:08:2e:1d:17:0b:01:65:a3:44:1a:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:19:B1:92:A0:C2:FB:31:73:1B:C2:DB:9D:ED:62:BD:27:72:2C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MXQZsZKgwvsxcxvC253tYr0nciw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:db0::/44
Signature Algorithm: sha256WithRSAEncryption
42:1a:a8:e7:b8:ac:46:a7:ee:8c:8e:0a:eb:e1:e8:4e:ef:e6:
d9:61:cc:24:5f:e3:25:7c:db:51:d0:d5:52:e4:95:b1:96:d1:
f7:05:ac:4a:52:e2:e2:2e:ba:ed:71:bc:1e:55:c1:5a:db:99:
3b:ed:09:03:19:8a:e1:a7:9b:86:ff:80:62:cc:90:d2:f5:b6:
b9:22:f2:54:8c:90:0b:ae:67:ac:3a:68:e7:a2:4f:f3:5f:b6:
9e:d9:1e:10:33:d5:69:58:fe:14:13:ad:dd:94:e9:80:ed:86:
72:7e:82:b5:22:5e:74:30:b0:9b:c3:e4:a2:eb:a8:2b:46:01:
9a:31:17:1a:25:f6:91:7e:d9:c4:b7:4c:5b:e9:fb:e8:f6:bb:
b8:d7:b4:93:3e:b8:21:ff:7e:f7:2f:86:05:41:2a:cc:91:9f:
5c:f0:c2:1f:22:b4:05:4b:27:3b:49:0b:ab:b7:bb:b7:0f:e3:
b2:35:bd:f6:76:28:fd:5d:b4:1c:b9:aa:d8:6a:24:86:37:e6:
f3:a9:63:f7:6f:d6:5f:56:da:6c:b6:b8:19:cf:f1:f8:a8:84:
df:67:0f:ea:7c:95:f0:06:1d:dc:32:74:2a:58:96:8a:18:85:
68:44:da:34:bc:1c:eb:91:a6:83:b3:b3:b1:76:53:87:77:43:
35:4a:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:05 2026 by rpki-client