Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_oArmS3zS5qewSPly-oBbNQ4xfs.roa
File: _oArmS3zS5qewSPly-oBbNQ4xfs.roa (raw, json)
Hash identifier: dFYwtlNBaSQLtvcbRQsnpXitDVN9+49jgd+dYJD1PfM=
Subject key identifier: FE:80:2B:99:2D:F3:4B:9A:9E:C1:23:E5:CB:EA:01:6C:D4:38:C5:FB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019F6EAD6BB90C1EFE868AB65BED60BBB097
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_oArmS3zS5qewSPly-oBbNQ4xfs.roa
Signing time: Fri 17 Jul 2026 06:04:46 +0000
ROA not before: Fri 17 Jul 2026 06:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214533
IP address blocks: 2a0c:b641:e00::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:ad:6b:b9:0c:1e:fe:86:8a:b6:5b:ed:60:bb:b0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 17 06:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe802b992df34b9a9ec123e5cbea016cd438c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:d4:78:e7:2c:fb:a4:c7:60:59:ed:d0:d7:
1b:ac:ec:50:13:a5:64:25:b1:f5:03:85:ba:67:c6:
21:5e:cc:d1:8b:60:2d:25:64:37:03:c3:cb:06:03:
a5:bc:03:e6:27:fd:55:d2:99:b0:ea:99:45:52:97:
5a:12:84:eb:b3:5a:7b:12:70:98:96:f7:24:cd:16:
de:69:58:d0:d5:0f:46:4e:fe:5f:36:64:0c:38:f7:
9e:c6:9c:c5:c0:97:6f:85:15:a6:5c:31:1b:aa:b7:
6f:35:e6:ae:99:06:1c:db:e2:52:21:e9:a1:a9:11:
d6:a8:ce:57:c4:45:cb:2f:f0:23:28:6a:88:72:2e:
ef:5f:1c:75:77:01:18:1d:ce:3b:62:2b:39:4e:a4:
8a:c0:b6:d8:e9:11:30:e7:65:22:c4:9b:a5:32:ba:
f2:a6:3b:0c:06:c6:5f:0b:5a:4a:c7:8b:65:24:c9:
17:71:57:3e:a4:e6:e1:cc:fb:02:29:d3:5a:87:1d:
09:93:b0:89:e4:25:eb:a2:71:b0:fd:15:8a:40:44:
7a:bc:f0:8f:8d:4a:6b:fb:10:93:7d:b4:16:86:e9:
5c:f0:bc:29:da:78:6a:88:34:6e:95:75:fa:f2:9a:
91:4b:87:78:4e:e2:e8:34:9e:0c:37:8d:87:b7:f8:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:2B:99:2D:F3:4B:9A:9E:C1:23:E5:CB:EA:01:6C:D4:38:C5:FB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_oArmS3zS5qewSPly-oBbNQ4xfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:e00::/44
Signature Algorithm: sha256WithRSAEncryption
88:f1:db:8d:87:83:ad:f8:b2:8e:98:08:d5:61:9a:36:94:71:
48:a1:d8:be:8a:ea:6d:4a:eb:41:f5:00:b9:25:b8:9f:58:31:
62:45:22:ec:a5:60:6c:6b:e7:ea:7f:3e:29:d9:7c:f3:11:27:
fe:55:b1:e4:67:16:e6:47:56:ea:3d:de:11:80:c2:00:a8:d0:
27:b5:93:5c:61:3d:09:37:28:d3:cf:26:a8:ad:54:f5:3c:4a:
1f:1c:2c:16:59:7a:c1:d9:6a:c5:9d:21:8e:0b:bb:d7:06:9d:
2a:e2:c8:f9:7c:65:df:15:8f:5c:85:0e:88:7e:14:b8:28:1f:
a5:48:d8:22:9e:f2:99:b5:12:4f:54:5e:9f:78:26:2e:eb:51:
30:f1:76:32:bc:12:91:3f:c4:ee:d6:0c:64:48:78:1f:51:fe:
1b:0b:0d:0e:f2:55:fc:3b:68:de:35:3f:dc:10:d9:6e:5b:ca:
46:bc:42:03:a1:dc:e5:82:b8:df:89:d4:ff:40:4d:8a:4f:61:
b3:14:a4:07:3f:e1:6e:df:6b:9d:c6:aa:82:f4:2b:87:73:9c:
bf:70:07:87:5c:30:60:0f:c9:f3:4d:39:57:f0:ee:08:c7:2d:
a8:84:3a:48:88:50:40:de:f6:1e:03:b5:1c:3b:c2:33:d8:a2:
ae:c1:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client