Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RTu_cfr_CPk7_8hi-nYoH_kmu5Q.roa
File: RTu_cfr_CPk7_8hi-nYoH_kmu5Q.roa (raw, json)
Hash identifier: E+8IUOLl+N9ur98Av+HJxtdhxcrl72cnNR+aWL4Pjns=
Subject key identifier: 45:3B:BF:71:FA:FF:08:F9:3B:FF:C8:62:FA:76:28:1F:F9:26:BB:94
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019E21FD6D46FA917DB6205974943F795C8D
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RTu_cfr_CPk7_8hi-nYoH_kmu5Q.roa
Signing time: Wed 13 May 2026 15:38:37 +0000
ROA not before: Wed 13 May 2026 15:38:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208476
IP address blocks: 2a0c:b641:b80::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:fd:6d:46:fa:91:7d:b6:20:59:74:94:3f:79:5c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 13 15:38:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=453bbf71faff08f93bffc862fa76281ff926bb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:34:73:eb:81:40:09:99:bc:eb:27:cc:c3:
07:32:ad:e4:35:3c:21:0e:09:5d:78:09:76:6b:68:
79:35:50:f9:64:67:60:6f:61:b5:5a:2a:3a:d7:87:
c9:6e:b0:44:2c:98:4e:7d:6e:aa:a8:2c:e1:eb:3b:
27:d4:9e:7d:8b:cb:8e:eb:fd:4d:2f:d2:73:ac:b1:
a3:65:8e:14:32:69:b3:bf:d8:8c:e1:8a:8e:3d:44:
d3:63:4c:24:86:7d:04:80:8a:2c:39:f2:94:97:a7:
b6:db:00:e0:44:e6:07:4e:4d:2f:53:67:d8:ee:e4:
e9:51:57:1a:04:a6:da:4a:d1:ae:8b:53:17:92:a0:
7f:76:7d:1e:06:06:dd:85:12:68:2a:76:c3:70:5f:
58:13:68:51:f7:75:9e:9b:ea:3b:e7:9b:08:25:ef:
bd:36:ec:82:94:2d:f0:10:d8:05:12:fc:bf:97:23:
e0:58:7f:8d:85:f3:20:33:33:89:a1:5c:d3:51:06:
87:46:15:c7:01:a2:f4:b7:0f:f8:98:b3:ef:6e:43:
ca:41:20:d7:c7:ed:ea:1b:80:6f:f9:84:83:41:db:
5d:cc:aa:69:8c:d7:a8:bd:40:32:64:12:af:fe:09:
17:a0:7e:c3:95:75:7b:f9:dc:92:5a:ae:77:b3:84:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3B:BF:71:FA:FF:08:F9:3B:FF:C8:62:FA:76:28:1F:F9:26:BB:94
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RTu_cfr_CPk7_8hi-nYoH_kmu5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b80::/44
Signature Algorithm: sha256WithRSAEncryption
20:4d:40:e7:d3:da:17:3c:ae:fe:77:64:49:10:2e:05:0b:26:
09:2d:e7:6a:f2:36:85:10:f8:dc:62:06:8d:cb:2f:2e:73:f7:
8a:50:a3:a9:3f:f6:56:1a:a3:98:53:59:f9:10:d6:3f:18:a2:
bd:4b:65:08:5b:20:55:57:d5:d9:aa:17:21:ec:70:e0:e0:13:
71:8c:20:2c:89:6e:54:91:e7:97:4f:4a:6f:a8:38:49:a3:48:
8c:22:a2:87:7f:07:df:eb:be:8d:ae:e4:e9:6a:c2:95:67:44:
40:0b:4c:ce:f1:72:b0:33:ae:b9:82:6a:0b:1a:fb:e2:cb:7d:
4d:f9:a0:53:b4:bd:fb:38:25:5d:b0:2e:b8:4f:76:76:d5:fc:
85:c0:b7:f2:3a:a6:52:4b:ad:ff:a7:27:c6:0f:31:c2:f9:a6:
d6:f3:01:dd:24:89:fe:9d:50:b3:cb:5c:ed:d5:fb:0f:b4:49:
22:79:a2:10:ae:d1:cc:73:0b:8a:be:07:54:39:fc:96:a5:95:
5c:d4:2c:00:0f:74:49:92:bc:fd:fd:f7:fd:70:2b:e6:42:4d:
06:bb:f9:11:28:a6:dc:be:68:05:61:9a:8a:fb:30:c7:28:38:
2b:b9:54:34:70:82:9d:1e:d8:93:8b:97:2a:be:55:f5:73:f0:
02:13:02:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ4h/W1G+pF9tiBZdJQ/eVyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYwNTEzMTUzODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTNiYmY3MWZhZmYwOGY5M2JmZmM4NjJmYTc2MjgxZmY5MjZiYjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7M0c+uBQAmZvOsnzMMHMq3kNTwh
DgldeAl2a2h5NVD5ZGdgb2G1Wio614fJbrBELJhOfW6qqCzh6zsn1J59i8uO6/1N
L9JzrLGjZY4UMmmzv9iM4YqOPUTTY0wkhn0EgIosOfKUl6e22wDgROYHTk0vU2fY
7uTpUVcaBKbaStGui1MXkqB/dn0eBgbdhRJoKnbDcF9YE2hR93Wem+o755sIJe+9
NuyClC3wENgFEvy/lyPgWH+NhfMgMzOJoVzTUQaHRhXHAaL0tw/4mLPvbkPKQSDX
x+3qG4Bv+YSDQdtdzKppjNeovUAyZBKv/gkXoH7DlXV7+dySWq53s4SfPQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEU7v3H6/wj5O//IYvp2KB/5JruUMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvUlR1X2Nmcl9DUGs3XzhoaS1uWW9IX2ttdTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQuA
MA0GCSqGSIb3DQEBCwUAA4IBAQAgTUDn09oXPK7+d2RJEC4FCyYJLedq8jaFEPjc
YgaNyy8uc/eKUKOpP/ZWGqOYU1n5ENY/GKK9S2UIWyBVV9XZqhch7HDg4BNxjCAs
iW5UkeeXT0pvqDhJo0iMIqKHfwff676NruTpasKVZ0RAC0zO8XKwM665gmoLGvvi
y31N+aBTtL37OCVdsC64T3Z21fyFwLfyOqZSS63/pyfGDzHC+abW8wHdJIn+nVCz
y1zt1fsPtEkieaIQrtHMcwuKvgdUOfyWpZVc1CwAD3RJkrz9/ff9cCvmQk0Gu/kR
KKbcvmgFYZqK+zDHKDgruVQ0cIKdHtiTi5cqvlX1c/ACEwKF
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:12:25 2026 by rpki-client