Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/e3BNnLYuSfTyg0V1rSw7pDPRU5c.roa
File: e3BNnLYuSfTyg0V1rSw7pDPRU5c.roa (raw, json)
Hash identifier: Xi+uwDh3zoJKli7Vk9uYKtqMQC0H2eWdB32+U9vHgWc=
Subject key identifier: 7B:70:4D:9C:B6:2E:49:F4:F2:83:45:75:AD:2C:3B:A4:33:D1:53:97
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019EEFA4D1481654E5509411F38A02E39842
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/e3BNnLYuSfTyg0V1rSw7pDPRU5c.roa
Signing time: Mon 22 Jun 2026 14:03:36 +0000
ROA not before: Mon 22 Jun 2026 14:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219381
IP address blocks: 2a0c:b641:5a0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:a4:d1:48:16:54:e5:50:94:11:f3:8a:02:e3:98:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 22 14:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b704d9cb62e49f4f2834575ad2c3ba433d15397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:15:32:2f:2a:dc:36:92:7f:96:ed:23:e3:
70:3f:d9:1c:28:b1:3e:ee:c2:61:b5:95:a2:b3:fe:
02:bc:5d:44:6f:28:01:0d:ed:06:ad:19:4a:4b:92:
67:65:e7:ce:bb:74:99:be:29:13:f7:a0:7d:da:17:
10:d3:0b:d9:23:d6:44:4b:ff:9d:27:74:93:13:9f:
07:d9:07:6f:d8:65:fc:b8:90:0a:7d:df:7a:67:f0:
cf:34:9b:63:6a:92:82:ca:ec:66:de:eb:22:98:09:
1d:8b:07:45:6c:75:73:4e:e9:42:e7:7a:26:51:36:
05:98:a5:0e:d6:57:3c:07:fd:52:93:97:34:43:ba:
1e:6c:11:a0:12:d4:68:3c:ee:28:ec:43:cb:43:82:
18:c1:00:aa:63:ac:c6:b4:0a:3f:78:c6:47:16:6c:
25:a4:9d:6e:2a:fd:bf:9b:46:3c:c2:5b:14:2f:34:
ad:91:6e:62:11:b0:aa:b8:90:87:55:3a:d9:d1:4f:
68:e8:87:a9:c8:e4:0a:39:77:2b:36:f0:c7:b9:13:
e3:ea:1f:19:0d:37:7b:8a:1a:3f:4e:0c:e3:00:12:
6e:d3:b5:4c:55:6e:8b:a8:23:2c:4f:6f:59:11:6e:
d8:78:52:91:62:8f:a0:12:57:69:1c:cd:a1:96:89:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:70:4D:9C:B6:2E:49:F4:F2:83:45:75:AD:2C:3B:A4:33:D1:53:97
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/e3BNnLYuSfTyg0V1rSw7pDPRU5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:5a0::/44
Signature Algorithm: sha256WithRSAEncryption
70:ac:63:38:52:df:35:75:83:02:1c:76:25:d5:8e:3d:da:9d:
cd:8c:ae:5e:e9:a9:4f:14:fb:f8:e4:1e:f5:6f:10:3b:a2:fe:
57:44:5b:c8:ec:be:25:d0:6f:a1:02:9e:de:03:ca:84:29:a7:
9e:0b:4a:ee:3b:1c:82:0c:d6:54:c3:5e:39:91:60:9d:ce:8c:
a4:5f:33:05:e4:72:88:d2:16:7d:c4:ad:47:1b:a7:02:60:bd:
3d:c9:82:f1:9e:ae:f5:ba:2f:dc:57:96:f8:57:4c:02:1c:d5:
ea:b0:33:79:d2:5d:a9:9b:47:3d:3b:58:b3:c1:42:4a:85:02:
d0:00:6a:7a:20:7d:40:38:7a:e3:0f:e7:92:6d:a2:b9:dd:95:
ad:d5:bf:ec:e3:2c:e6:7e:b8:a4:ed:25:d2:62:b4:93:ee:c3:
46:ef:e2:de:31:6e:f9:df:7a:c1:8b:3d:03:98:c4:c4:54:0c:
5f:5d:91:5a:79:e6:5b:44:b9:d8:41:5a:c7:9a:3e:73:6e:3d:
78:d6:52:bd:a8:e7:94:74:14:46:e0:a6:61:d7:da:c1:40:31:
6a:30:3a:5f:ff:94:1a:e0:38:32:ba:f1:b7:ed:44:7d:79:0b:
3d:b6:4f:0a:db:43:a2:01:14:0d:9f:07:7a:54:75:eb:e4:cb:
fb:d0:db:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client