Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hIXmzIILNZHurCfZRbO8ZXiSwio.roa
File: hIXmzIILNZHurCfZRbO8ZXiSwio.roa (raw, json)
Hash identifier: 2PPa20gejA0m+D4nH/d1SS6Qr1uNQW09CWmxhSu6/j8=
Subject key identifier: 84:85:E6:CC:82:0B:35:91:EE:AC:27:D9:45:B3:BC:65:78:92:C2:2A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019F383A7AFF0D2845BF3E57309DEBE10092
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hIXmzIILNZHurCfZRbO8ZXiSwio.roa
Signing time: Mon 06 Jul 2026 16:19:44 +0000
ROA not before: Mon 06 Jul 2026 16:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219271
IP address blocks: 2a0c:b641:910::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:3a:7a:ff:0d:28:45:bf:3e:57:30:9d:eb:e1:00:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 6 16:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8485e6cc820b3591eeac27d945b3bc657892c22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:e7:5b:1f:14:af:5f:cb:30:73:66:dc:14:
f0:de:43:ed:c0:c6:dd:c7:ce:e3:d2:b9:d0:02:7b:
a2:1a:e8:63:8e:a3:05:67:94:78:07:9c:55:8c:ba:
c5:da:7a:0e:03:c4:cc:6b:11:17:72:57:62:db:a6:
1d:35:0f:19:68:08:3a:bf:16:00:da:13:42:6a:ce:
27:51:21:e9:13:43:72:ad:48:b0:02:ee:3b:45:71:
55:6c:63:7b:21:b6:de:aa:2f:9b:92:3b:28:60:09:
3d:37:d3:f1:5a:17:69:70:b3:e6:ae:29:4c:02:e4:
09:5e:3a:40:1c:58:f9:23:c9:1a:74:7e:36:5d:61:
2c:b2:56:e7:0a:ef:c9:08:da:86:c7:00:69:cc:54:
24:0e:5f:f0:bd:9d:13:2c:51:1e:9e:ca:d2:10:42:
6e:03:5e:38:57:dd:df:d4:73:b5:08:0a:7e:a0:dc:
94:a2:df:de:66:63:62:bf:5f:65:71:40:dd:5e:33:
ae:c8:be:dd:e9:19:52:e2:45:fc:17:b9:fa:88:b0:
ca:65:5e:a0:1b:70:40:a5:b2:8f:63:1d:de:8e:97:
4d:21:fc:33:6d:43:a3:6c:b9:44:a7:e8:b3:cc:13:
2e:72:f0:3e:05:99:d2:e3:1e:3b:1e:e2:c4:a6:45:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:85:E6:CC:82:0B:35:91:EE:AC:27:D9:45:B3:BC:65:78:92:C2:2A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hIXmzIILNZHurCfZRbO8ZXiSwio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:910::/44
Signature Algorithm: sha256WithRSAEncryption
99:c0:1b:ce:c8:01:92:ce:81:16:2b:7b:96:35:16:05:00:54:
2e:1a:b8:b9:8d:8b:8b:2a:12:66:09:15:d2:fb:d0:d6:48:73:
30:ea:fa:16:c7:de:83:4f:eb:08:49:32:84:3f:ab:c5:32:15:
16:85:d9:23:20:79:d4:ad:86:7c:07:53:a0:e7:29:ec:0f:93:
b5:80:1b:a2:b5:97:39:df:7a:ae:ae:8f:86:20:17:b3:d3:32:
ef:87:e0:a3:ae:89:02:d9:dd:a3:54:07:30:58:46:a8:6b:36:
ef:38:e6:f6:f4:06:da:a3:96:eb:3b:e0:64:86:62:93:32:17:
ef:8e:2d:70:2f:88:cc:b2:4f:b4:01:eb:96:a9:4d:24:06:ee:
49:99:1b:52:fc:2e:36:21:09:4a:ad:25:15:82:f2:f2:9b:7c:
46:47:92:53:e6:ce:c9:dd:c3:ee:ce:9d:4d:e1:8c:37:91:a2:
5a:b6:e9:2c:c5:b7:b8:70:90:a7:2f:bc:bc:3e:71:19:10:f2:
a8:0f:65:5e:ff:a1:8a:f5:7e:0a:7a:6c:ed:fa:ff:90:05:0f:
f4:77:fc:0c:38:03:cb:bb:69:a1:ba:63:1a:a4:45:13:e0:3f:
c8:14:4b:47:6b:4c:2c:f1:64:c5:c3:14:af:41:3c:e7:4f:a4:
f2:4f:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client