Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oT5zYS6lKmPRE3MAorX5OWxSZOw.roa
File: oT5zYS6lKmPRE3MAorX5OWxSZOw.roa (raw, json)
Hash identifier: VfB+X4IWtOYI8bWfYOB9BVApm4+Albn8ahzpst6oDEU=
Subject key identifier: A1:3E:73:61:2E:A5:2A:63:D1:13:73:00:A2:B5:F9:39:6C:52:64:EC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A029DDACB77C362328E79F5731DAB50FA5
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oT5zYS6lKmPRE3MAorX5OWxSZOw.roa
Signing time: Sat 22 Aug 2026 14:26:28 +0000
ROA not before: Sat 22 Aug 2026 14:26:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208051
IP address blocks: 2a0c:b641:c0::/44 maxlen: 128
2a0c:b641:e80::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:dd:ac:b7:7c:36:23:28:e7:9f:57:31:da:b5:0f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 22 14:26:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a13e73612ea52a63d1137300a2b5f9396c5264ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:b0:20:71:9a:7d:35:ac:f8:8f:fb:81:ad:
97:d1:14:00:e8:a3:a3:9b:9f:a9:10:c9:ab:0e:3a:
f8:4b:73:c5:1d:bb:71:03:c6:7e:9e:51:63:a4:8e:
14:1a:ec:c9:16:fd:1a:fb:4d:95:2d:92:87:74:06:
b5:1d:3f:46:6f:86:06:16:bd:47:cf:ad:25:3e:3b:
45:29:4c:35:bf:f1:2e:81:29:3c:54:68:8d:d1:49:
32:d5:54:40:5c:e4:97:36:f1:34:38:b8:59:40:b7:
21:f2:ce:34:d3:0e:fe:4e:c7:33:f2:20:95:e2:6d:
a2:94:c5:da:d6:44:7a:ac:cc:0e:bd:5e:06:2d:75:
ff:6d:77:91:ee:1b:4e:7f:88:06:3f:fe:6c:07:1c:
bc:68:22:10:bb:59:a8:c3:d6:b8:a6:d3:f2:0a:4b:
5c:f6:7d:3e:93:fb:21:77:f1:8a:eb:e4:6a:8b:f4:
30:20:52:5f:e2:e0:ae:8d:bd:9b:87:ba:f8:eb:22:
c5:e9:a0:8c:b7:76:a7:3c:e1:88:55:d1:4c:ff:64:
5e:4d:f6:34:72:67:73:e5:2d:81:c7:8c:fc:91:92:
e2:09:a2:53:4c:96:58:84:e6:0a:66:9b:d3:63:ee:
27:67:bc:f1:b0:ee:3e:99:df:25:b5:76:1c:25:44:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:73:61:2E:A5:2A:63:D1:13:73:00:A2:B5:F9:39:6C:52:64:EC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oT5zYS6lKmPRE3MAorX5OWxSZOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:c0::/44
2a0c:b641:e80::/44
Signature Algorithm: sha256WithRSAEncryption
56:f2:9f:65:c4:d4:d0:d4:a2:5f:90:86:dc:66:af:de:1c:eb:
e0:7c:10:7c:6c:36:98:88:6d:62:9e:bb:14:10:f9:da:2f:57:
72:7a:1d:8e:70:07:fc:a0:5c:b2:76:d4:2b:ac:c3:72:38:30:
f1:96:88:2a:bf:70:9f:12:b9:81:02:e4:81:af:25:26:a3:59:
20:23:01:e2:9e:df:25:45:62:e6:ec:8d:e3:c5:6c:7c:8f:24:
cd:9b:60:d7:49:70:10:c3:7c:06:23:9b:e2:8a:d7:a1:15:07:
5a:0f:35:0b:d7:a4:99:3e:39:61:5a:47:0f:3b:74:2c:64:3e:
7a:f3:d3:31:08:b7:5d:75:a8:66:d9:f8:d1:68:de:b9:18:b7:
2e:3a:9a:db:28:33:d5:e2:96:0d:95:e2:fb:a8:05:5b:11:4f:
f0:19:4b:f5:d5:39:3c:59:e6:a3:22:da:91:74:5b:7e:b4:c9:
c0:03:39:79:79:c1:1e:b0:f8:37:94:0e:f5:71:ee:d6:d3:ab:
a2:b1:9b:76:bd:b3:02:bb:b7:b8:06:88:9e:3c:5c:9c:1d:54:
16:ca:83:79:9b:d4:70:7c:82:6f:68:89:a8:59:e7:dd:4c:47:
8b:2f:dd:ff:d4:53:7f:70:a8:25:77:cd:c7:d5:e1:c7:96:c1:
62:03:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:26 2026 by rpki-client