Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/i0NUZvkbsfmBiEHfrEhSeshlnb8.roa
File: i0NUZvkbsfmBiEHfrEhSeshlnb8.roa (raw, json)
Hash identifier: ySYgaH2B9dbaGHQU4HYnvyr58sr6S5uO5yPNQvpwz04=
Subject key identifier: 8B:43:54:66:F9:1B:B1:F9:81:88:41:DF:AC:48:52:7A:C8:65:9D:BF
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019FF5DC6F2370B3DF971DB7601CCA143D71
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/i0NUZvkbsfmBiEHfrEhSeshlnb8.roa
Signing time: Wed 12 Aug 2026 12:04:52 +0000
ROA not before: Wed 12 Aug 2026 12:04:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208051
IP address blocks: 2a0c:b641:e80::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:dc:6f:23:70:b3:df:97:1d:b7:60:1c:ca:14:3d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 12 12:04:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b435466f91bb1f9818841dfac48527ac8659dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:c6:00:a1:51:0f:f1:5c:0f:29:3c:09:86:
9c:74:88:c4:72:a4:53:49:d1:56:35:6d:88:09:7e:
4d:4f:ba:cc:8a:80:aa:71:80:ca:68:11:ab:02:67:
72:43:7c:d7:46:0f:78:f8:79:73:5c:a0:34:51:73:
c4:8c:65:f7:50:02:81:22:0a:18:32:e1:35:d5:0f:
81:0e:8d:00:1e:ef:e6:26:bf:fe:4d:b7:91:e4:32:
4b:9a:63:7a:00:6f:24:ab:a2:70:5a:f8:76:62:15:
65:9b:31:d4:fe:76:e9:44:d9:6c:61:c6:7c:98:e3:
04:48:27:ff:aa:3c:81:bf:17:0e:3f:1c:6b:8f:a9:
ad:db:11:6e:d6:2d:e5:9f:18:29:06:a5:3c:17:09:
15:bd:43:f7:dc:4e:96:33:bd:b2:1c:f4:8f:1e:2f:
5c:d8:d2:f9:da:fe:3e:85:ef:6f:3c:e5:f0:e5:4f:
c2:d4:2b:67:7b:9b:de:95:34:0b:2c:aa:8d:23:75:
cd:fc:eb:ce:69:73:7a:a4:14:70:8d:aa:29:08:7c:
98:bf:41:8c:78:dc:cd:0c:13:fc:17:22:c2:2f:aa:
db:75:3c:f1:4f:40:50:d2:c6:d3:61:d1:03:8a:fa:
b0:06:a1:5d:9f:b1:54:15:c7:c1:3a:c2:df:62:f1:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:54:66:F9:1B:B1:F9:81:88:41:DF:AC:48:52:7A:C8:65:9D:BF
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/i0NUZvkbsfmBiEHfrEhSeshlnb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:e80::/44
Signature Algorithm: sha256WithRSAEncryption
9c:2e:c9:0d:ee:35:bd:ab:8a:74:b5:da:e8:d9:72:5b:c8:1d:
ab:39:9d:07:91:c3:ee:91:a2:fa:bc:4d:e0:48:8f:62:24:77:
53:bb:a6:0b:d8:f1:10:41:77:26:b1:5e:e9:2a:e7:a1:3e:5e:
fa:25:cf:7b:6f:55:d2:cb:0f:19:0f:8e:3f:a0:0e:55:4a:49:
75:69:07:4e:fd:43:5a:69:d6:d1:41:90:5a:dd:95:ab:8d:ee:
df:6c:f8:8c:fa:e4:62:26:8c:3d:9a:31:79:25:55:5b:90:4d:
b0:4f:f1:db:9a:af:fd:1e:2b:55:35:38:19:69:af:7a:7b:df:
7a:5e:c6:5b:14:78:87:d5:e3:1a:5a:9a:ab:ac:29:10:c4:4d:
6f:3b:ff:c3:b9:b8:fb:b3:a1:25:3b:af:a1:dc:b8:11:9d:f4:
c5:df:f9:e4:d1:98:89:6a:6d:00:4a:35:ef:37:0b:86:09:1a:
99:24:cc:f5:2f:31:43:20:5e:1d:15:38:d8:fa:2e:82:39:88:
6e:4b:cf:52:30:c7:05:5d:ea:09:e2:7e:f2:0d:41:a4:6a:7e:
e8:5b:6f:04:d4:e9:e3:a2:31:c6:d8:6b:34:f4:66:92:be:b5:
8f:08:5f:25:9a:6a:8d:fd:59:3b:b6:92:3f:27:3a:23:30:18:
2b:6d:f9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:28 2026 by rpki-client