Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UF1LQDcY6IjIgcxUtKGcVW-UeHI.roa
File: UF1LQDcY6IjIgcxUtKGcVW-UeHI.roa (raw, json)
Hash identifier: 5PaaM8G/Rs1/e8wB/tfjWOi4KAVRMhMTeio97Bzs1/g=
Subject key identifier: 50:5D:4B:40:37:18:E8:88:C8:81:CC:54:B4:A1:9C:55:6F:94:78:72
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019F1DE072986855D83EAF6CCF993EEC03C7
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UF1LQDcY6IjIgcxUtKGcVW-UeHI.roa
Signing time: Wed 01 Jul 2026 13:31:16 +0000
ROA not before: Wed 01 Jul 2026 13:31:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215865
IP address blocks: 2a0c:b641:620::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:e0:72:98:68:55:d8:3e:af:6c:cf:99:3e:ec:03:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 1 13:31:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=505d4b403718e888c881cc54b4a19c556f947872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:12:de:ad:77:76:3f:91:37:ea:95:5c:62:
81:1c:1d:a8:75:a4:36:2c:10:f6:00:db:dd:b0:4d:
6b:c0:07:47:34:f4:60:48:ff:40:b0:43:4e:f2:ba:
f3:ab:a6:dc:dc:67:d8:51:ca:02:82:a6:03:35:f6:
a4:4a:1c:e0:17:74:99:5e:bd:11:ad:be:ee:41:b2:
63:32:08:35:fe:39:57:11:6a:8b:cb:10:af:a3:86:
f3:f4:cc:70:a8:17:b9:a8:fc:d7:79:d7:08:a7:36:
ad:65:b5:48:19:c9:cc:c6:09:00:22:42:e7:10:41:
ca:70:2e:c3:6c:b7:9d:77:52:83:51:29:1f:4b:b1:
2d:b2:49:cc:97:9d:76:a0:bb:0b:11:9f:0e:e4:0b:
7b:5e:cc:d4:e3:3c:6b:1f:e5:9c:2e:58:4b:26:56:
c5:13:1f:a4:fd:0c:0a:1d:0f:4c:7e:dc:f0:ff:0d:
95:7d:36:cb:09:05:bd:e7:67:84:c1:84:7b:43:11:
3a:7c:22:6e:67:fc:ac:6e:fc:4b:cd:cf:8d:b4:60:
66:e4:4a:d2:97:30:a1:4a:68:b0:41:1e:a7:75:4a:
f3:11:2a:56:d3:6e:0d:7e:61:49:7e:a4:54:82:74:
eb:24:3b:7a:d4:1a:7e:5e:9a:51:19:3b:78:c0:15:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5D:4B:40:37:18:E8:88:C8:81:CC:54:B4:A1:9C:55:6F:94:78:72
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UF1LQDcY6IjIgcxUtKGcVW-UeHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:620::/44
Signature Algorithm: sha256WithRSAEncryption
54:f9:2b:e2:6e:b1:7a:e2:3e:4b:af:4e:bc:78:dc:70:e3:bb:
90:da:da:55:10:9f:04:26:67:0e:65:d8:d4:c1:86:cf:9f:68:
b7:8c:c2:99:d7:88:08:4f:b5:70:3c:df:3d:56:bd:e3:8f:15:
b9:0b:34:2a:53:a6:84:d3:4c:ce:fe:26:ac:74:09:c2:24:da:
dd:56:f8:02:96:5a:b7:ba:a6:e4:e7:36:89:49:8d:c5:63:fd:
43:60:ee:be:ac:46:c6:27:56:c3:ea:cd:6f:0b:c3:36:cf:4d:
59:53:ca:e8:c9:62:ef:70:b5:d9:1d:72:97:9a:ec:ff:36:7d:
46:34:ea:5a:e1:fa:c4:bc:a7:cb:d5:da:e3:9d:31:65:7a:ab:
57:93:dc:be:2b:0c:a0:a1:a4:5f:ca:b0:44:17:cd:df:0f:b7:
ef:55:d2:52:8f:0a:95:1b:02:36:cf:0d:d5:2f:24:d3:3b:94:
5d:f5:f9:34:eb:c4:b9:72:d0:93:8a:d3:e9:ab:87:a6:53:33:
4a:e5:5a:16:a8:a5:68:10:2d:78:61:b0:97:45:40:ca:07:b6:
c4:cb:13:35:2e:7b:ae:3c:fd:b9:20:4b:8a:2f:01:af:24:31:
1f:50:ad:70:94:b3:5d:6d:9f:2d:88:ef:37:5e:dd:a4:ad:76:
6f:cf:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:05 2026 by rpki-client