Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OaPX6IW3QCjmK9dL10bG3iqXbxs.roa
File: OaPX6IW3QCjmK9dL10bG3iqXbxs.roa (raw, json)
Hash identifier: SKQH9I6ttULxq2PlKKMhwI1LdJXdSyCZ9JzKRE9WMgg=
Subject key identifier: 39:A3:D7:E8:85:B7:40:28:E6:2B:D7:4B:D7:46:C6:DE:2A:97:6F:1B
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019DD8E096E59D2B21BA60F7CA52DB4D5A3E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OaPX6IW3QCjmK9dL10bG3iqXbxs.roa
Signing time: Wed 29 Apr 2026 10:54:50 +0000
ROA not before: Wed 29 Apr 2026 10:54:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2a0c:b641:420::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:e0:96:e5:9d:2b:21:ba:60:f7:ca:52:db:4d:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Apr 29 10:54:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39a3d7e885b74028e62bd74bd746c6de2a976f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:c7:e5:31:8a:0e:32:c0:89:ac:8e:93:5d:
33:35:74:fc:9e:d3:d1:16:4e:4c:49:75:49:2d:ca:
10:19:12:65:b9:8b:67:c8:f7:72:fd:37:05:6f:4f:
3a:7e:78:c5:fa:f7:f2:0c:31:e0:0f:0f:7d:8c:12:
6c:3a:e5:0c:73:35:f1:61:75:15:4d:fd:86:90:5c:
23:8a:3c:69:65:8a:78:58:1a:5a:1f:a0:64:7b:c9:
4e:3c:3e:c4:b4:e2:d1:c5:0a:92:79:42:f3:ee:37:
cf:87:a4:a3:9f:1a:1a:15:43:89:9e:ad:bd:6b:2c:
de:f8:b4:70:d7:73:e1:6c:d9:1c:82:20:ce:2a:98:
11:de:97:a4:73:3c:2c:e6:74:13:6f:a8:b7:40:07:
18:02:5a:81:1c:83:0e:ae:a3:52:db:2b:cb:b3:40:
29:f3:2b:16:a1:88:c5:5e:27:40:f7:54:89:ff:16:
44:f8:da:31:32:ab:3d:79:3a:8c:79:30:85:75:c7:
5f:f3:86:93:1f:b5:d7:2b:62:7e:58:78:62:d7:78:
4b:62:d0:2e:87:27:3b:b0:28:b3:93:4e:51:6c:76:
15:31:12:8b:20:fc:b9:18:b2:62:2f:17:47:c2:f2:
e9:7f:43:88:5b:90:a3:cf:d5:e4:f9:f8:35:08:58:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:D7:E8:85:B7:40:28:E6:2B:D7:4B:D7:46:C6:DE:2A:97:6F:1B
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OaPX6IW3QCjmK9dL10bG3iqXbxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:420::/44
Signature Algorithm: sha256WithRSAEncryption
45:92:fe:30:fe:8a:f7:a0:16:81:30:bb:17:65:fb:2e:0e:e1:
56:40:e4:cf:b6:45:ce:68:5a:52:48:0e:be:63:cb:91:4a:ae:
91:93:aa:d8:9a:aa:5c:ae:58:b1:a1:40:a8:82:93:cf:d1:f6:
aa:95:59:72:b3:d7:c3:7a:8f:74:db:bd:83:29:12:ab:8f:38:
75:0b:ff:e1:a1:18:28:28:ab:b7:3b:b7:3f:0d:00:7d:7a:c9:
ed:4d:30:58:19:a0:86:2b:44:fd:1d:d7:1e:a8:00:6f:2f:95:
2f:0c:92:9b:c2:8d:e5:36:7b:de:da:2f:8b:b2:42:2f:bf:a5:
89:20:fa:06:83:6f:d7:55:22:ae:50:f3:a5:31:79:de:c9:ff:
07:f2:a7:0b:e1:8d:ea:b0:29:4e:bb:22:ea:af:4a:c8:2e:31:
0c:85:38:8a:90:7c:72:68:ca:8a:7d:d3:e8:78:14:a3:59:f4:
56:f4:1f:c3:9c:d0:9e:dd:8f:bc:87:1d:84:fd:f8:b2:f0:19:
81:70:b3:50:57:11:e4:85:5c:88:8b:c5:43:cb:77:ea:8a:70:
d4:c0:ea:9e:db:7d:2e:b9:6c:47:c5:68:f2:8f:1d:3c:ad:0c:
30:5b:a8:3f:11:eb:eb:db:99:08:9a:9c:1b:00:ba:b4:fc:75:
96:6f:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:50 2026 by rpki-client