Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/n0NsBXfKuZE5OEyq3hb150jhCEg.roa
File: n0NsBXfKuZE5OEyq3hb150jhCEg.roa (raw, json)
Hash identifier: TneCqzG/LO0TiaPxUNkipIn0QFDtXte2Gz6AnxpMzx4=
Subject key identifier: 9F:43:6C:05:77:CA:B9:91:39:38:4C:AA:DE:16:F5:E7:48:E1:08:48
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019F46688CCDBE047DC33B4C82FC943CD49A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/n0NsBXfKuZE5OEyq3hb150jhCEg.roa
Signing time: Thu 09 Jul 2026 10:24:44 +0000
ROA not before: Thu 09 Jul 2026 10:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219237
IP address blocks: 2a0c:b641:e10::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:68:8c:cd:be:04:7d:c3:3b:4c:82:fc:94:3c:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 9 10:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f436c0577cab99139384caade16f5e748e10848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:dc:62:ee:70:4b:d4:11:ab:fc:b5:0a:9c:
4f:fe:34:41:42:9c:6f:97:5a:60:04:88:d2:49:21:
a1:09:af:74:55:50:33:4b:6e:70:03:70:9b:e8:f6:
6a:e0:ce:0a:e5:5a:de:ad:0d:70:b1:7f:9d:f8:52:
b8:aa:2f:7e:f2:99:16:78:4b:b6:dc:09:05:85:4b:
a1:51:15:3e:17:0c:09:ee:28:f1:e6:48:55:a7:51:
cf:b7:ab:0e:5a:cc:6b:2d:b4:0f:9f:b1:55:cb:64:
b6:8f:d1:8d:d8:27:2a:41:3a:83:d0:c5:43:c5:c0:
e5:96:e2:fa:c3:32:05:7e:51:72:6d:92:5f:43:54:
e1:71:d9:0e:e5:2c:88:bc:f4:eb:64:56:a5:8f:f2:
89:d2:c6:ec:1f:53:d9:f0:aa:7b:fb:7a:3b:72:2e:
64:5a:f6:4a:32:67:71:c1:d5:2a:6a:10:f2:55:7e:
e6:ab:18:4d:c7:1b:cf:54:46:91:a0:33:5c:30:2d:
ca:e3:66:3d:a1:32:91:50:b7:89:26:e6:b3:87:5b:
5d:3c:92:54:83:08:1f:15:00:31:de:15:12:d9:c0:
92:59:d0:b4:bf:e2:e7:ec:63:a6:e3:d3:6a:a9:34:
5b:47:48:c9:d4:cf:ea:8f:da:fb:5c:db:e1:ac:d3:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:6C:05:77:CA:B9:91:39:38:4C:AA:DE:16:F5:E7:48:E1:08:48
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/n0NsBXfKuZE5OEyq3hb150jhCEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:e10::/44
Signature Algorithm: sha256WithRSAEncryption
00:78:f0:5b:df:1a:1f:04:de:cd:8d:89:81:55:a6:49:67:b4:
ce:31:23:44:13:2f:ba:49:0b:d4:24:29:44:c9:3a:31:d5:b6:
71:1d:9a:29:68:ff:db:70:c1:be:c5:d8:b2:f7:42:da:bf:b3:
dc:80:b3:f0:83:c5:63:42:0c:40:51:6a:79:60:45:06:7e:7b:
63:a9:b8:55:60:c0:38:f1:6b:d6:2c:57:13:0c:70:bf:3a:b8:
21:51:fe:1f:65:6e:a5:1c:af:3e:79:ec:70:b5:d7:76:30:02:
97:74:80:1f:2b:a2:5c:18:5c:ff:0a:89:c3:1e:a2:2a:37:db:
e1:0d:8b:13:17:b5:33:9b:e3:5d:38:4e:62:24:6a:7c:93:d3:
a5:a6:fd:78:aa:ed:66:aa:c4:b7:ac:d0:22:ac:1b:ea:c8:bd:
14:f0:cd:72:5f:5c:aa:eb:89:39:2f:7a:8a:f1:59:0a:f0:d6:
ef:4d:11:78:7c:fc:18:cd:bf:b9:b9:fa:c0:cc:83:23:16:b5:
19:52:b7:5a:05:83:0e:9e:b0:9c:55:c4:cb:27:c8:9f:6c:11:
1f:a1:c3:c1:72:d3:e8:bf:ea:d1:42:3f:b3:43:eb:1e:cf:63:
3e:43:32:ed:36:5d:48:11:02:06:6c:68:1e:55:0b:e5:86:b4:
72:e6:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client