Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YFhB8N5w7zvFqna8rPJVsdLRSMk.roa
File: YFhB8N5w7zvFqna8rPJVsdLRSMk.roa (raw, json)
Hash identifier: 7jDINIC75PYdbNbolcA3Xb0UjJDK+mltQ+VtSmxhjRU=
Subject key identifier: 60:58:41:F0:DE:70:EF:3B:C5:AA:76:BC:AC:F2:55:B1:D2:D1:48:C9
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A187E76293E8AF2C8D9EB55131C7CE5999
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YFhB8N5w7zvFqna8rPJVsdLRSMk.roa
Signing time: Thu 29 Oct 2026 13:44:10 +0000
ROA not before: Thu 29 Oct 2026 13:44:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218244
IP address blocks: 2a0c:b641:fb0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:e7:62:93:e8:af:2c:8d:9e:b5:51:31:c7:ce:59:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 29 13:44:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=605841f0de70ef3bc5aa76bcacf255b1d2d148c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:a6:a2:8d:0b:d2:73:36:a3:42:93:f4:61:
bc:d9:7b:74:67:a7:ac:a1:e1:a6:7c:7c:d9:ef:9b:
a4:74:8d:6c:a1:a0:43:0a:ed:25:57:6e:7c:6c:4c:
92:5f:04:ec:f5:70:ae:9d:8d:97:79:41:16:87:34:
04:d6:39:28:17:c3:bc:40:d7:0c:6e:08:d5:dc:ca:
50:cc:bb:25:de:15:97:1c:c8:d6:6c:78:6b:38:f1:
c6:e8:76:16:19:e8:4e:59:c6:ad:e4:97:ad:08:bc:
95:af:19:ec:58:ce:3f:74:98:59:58:ca:8f:b7:79:
29:4a:be:aa:d4:ee:c2:b7:34:2c:1d:df:b3:5f:9a:
c8:43:5c:78:af:fe:af:e2:64:9e:bc:57:f1:9d:b8:
21:0c:84:9e:c5:ea:f1:e8:d7:f6:61:16:15:9c:20:
88:1e:3d:5e:07:e6:7b:f4:3d:00:72:b4:30:9f:fd:
1e:0e:9c:89:77:18:61:6b:06:55:3d:4f:a7:fe:1b:
a2:36:07:03:e0:7a:eb:d2:e4:11:86:8e:91:bd:f0:
0b:f9:91:ed:4e:dc:8a:77:35:58:f2:d7:c0:8b:27:
14:0a:19:5d:03:65:c1:ae:b1:c2:ab:be:ed:b3:d1:
6d:43:79:fe:4b:37:7c:fc:8b:99:6f:c4:d3:1e:e3:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:41:F0:DE:70:EF:3B:C5:AA:76:BC:AC:F2:55:B1:D2:D1:48:C9
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YFhB8N5w7zvFqna8rPJVsdLRSMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:fb0::/44
Signature Algorithm: sha256WithRSAEncryption
5d:f4:dc:09:5c:4e:52:9b:0e:8f:d3:65:c2:dc:e5:96:78:02:
26:c3:21:72:95:f1:00:c2:a8:eb:1b:ed:d9:af:cc:4f:cb:c9:
05:b9:60:37:3f:ea:c3:a8:8e:66:00:53:7f:4f:7a:c8:c2:c5:
5f:a8:9b:48:ad:34:8e:f9:d9:55:a3:08:d2:38:d7:52:72:ec:
69:5d:c5:0e:bb:0c:25:9e:62:20:6c:d1:a8:4c:51:38:dc:80:
bf:22:8d:12:91:d4:ef:db:02:61:db:ed:81:f6:f1:de:98:89:
19:1c:5a:6b:28:64:38:50:86:d6:81:a1:df:36:b3:7b:c5:77:
85:2e:68:d4:c9:8a:e4:6a:e7:d2:d2:5a:53:61:7b:e9:fe:1b:
53:75:03:c4:67:62:33:02:2c:8a:50:11:aa:32:f9:26:d3:1b:
23:31:84:86:fc:91:b9:ff:34:59:6f:ac:68:16:eb:d2:0a:e6:
ac:2e:cf:c4:34:98:d0:21:ff:2d:6a:e2:f9:a8:6e:43:f5:dd:
de:97:1c:7c:c2:e1:81:c2:fc:c2:54:bb:cc:0d:ce:04:e8:21:
47:4b:6d:4a:8f:ba:90:7c:19:f1:9e:0f:1f:41:69:eb:33:bd:
6b:a8:87:d2:6a:b0:46:7d:d9:6b:80:97:a9:b3:3f:44:25:5f:
24:3e:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:44:38 2026 by rpki-client