Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/okZfzziaOzmkD5FJGTOacmaKNVc.roa
File: okZfzziaOzmkD5FJGTOacmaKNVc.roa (raw, json)
Hash identifier: P7PAKi86Iey7ADMpX1+k9n1IliRXvmAWgP98WJgiJPk=
Subject key identifier: A2:46:5F:CF:38:9A:3B:39:A4:0F:91:49:19:33:9A:72:66:8A:35:57
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019FD72C561A93BE220710AA69A0BF53E80A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/okZfzziaOzmkD5FJGTOacmaKNVc.roa
Signing time: Thu 06 Aug 2026 13:03:54 +0000
ROA not before: Thu 06 Aug 2026 13:03:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210699
IP address blocks: 2a0c:b641:e50::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:2c:56:1a:93:be:22:07:10:aa:69:a0:bf:53:e8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 6 13:03:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2465fcf389a3b39a40f914919339a72668a3557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:8e:f4:60:27:e6:f0:2c:5d:a1:a3:18:dc:
84:9f:0b:0e:b9:e9:d3:a9:b4:1a:fe:07:f0:c1:31:
87:d7:81:c4:74:b9:f7:83:3c:b8:be:fb:6e:5c:e6:
6d:63:4c:3f:e2:73:d9:57:a5:77:79:e0:f1:ef:f9:
dc:9d:87:c5:a4:d1:e8:89:41:2c:cc:f8:0c:60:8d:
53:9f:66:9d:2d:af:ba:7f:f3:39:69:9c:48:50:e5:
ed:e9:49:b2:4c:dd:a1:51:98:d5:6b:18:c0:77:e0:
c2:16:f3:71:d2:f0:70:c7:1b:01:fd:0c:8a:72:c3:
04:ce:57:e9:03:14:a1:44:f8:e1:dc:6f:f4:d5:de:
ca:f3:a4:36:66:79:bc:48:fb:39:fb:00:62:cf:b5:
75:67:0d:5a:5f:10:d7:c6:ef:46:e3:7c:f7:cf:74:
a2:60:1b:0f:d0:71:1b:e2:ad:ee:66:db:ef:41:f0:
c3:a8:34:0e:e7:24:30:4f:bf:7b:04:4e:99:d3:48:
ca:9c:29:71:57:07:51:48:49:09:c1:4e:c4:d0:05:
b3:3d:fe:24:25:2e:2f:ce:ac:59:5b:18:70:c4:fc:
63:21:ad:01:4f:72:c5:63:f1:25:a5:db:28:a7:a1:
cf:bf:58:85:14:f3:97:7b:26:5b:c0:cf:10:ba:5d:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:46:5F:CF:38:9A:3B:39:A4:0F:91:49:19:33:9A:72:66:8A:35:57
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/okZfzziaOzmkD5FJGTOacmaKNVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:e50::/44
Signature Algorithm: sha256WithRSAEncryption
1f:58:15:94:3b:3e:ef:c3:eb:3f:54:10:ea:ac:da:e6:e8:ef:
7b:d8:f4:2c:5c:96:d3:a2:5c:4a:3d:80:79:bf:fa:e3:03:81:
98:0c:63:58:ec:ed:d1:c1:db:23:c3:1b:39:ca:32:a5:a0:89:
c8:0a:fd:79:da:86:1c:7a:92:eb:0a:00:ce:26:99:cd:cd:d3:
c7:4c:5c:59:d2:fb:a3:ca:6a:78:64:7e:d9:2c:ea:62:eb:3c:
34:86:6d:ef:73:c4:dd:f9:b8:e1:c0:31:07:84:a6:95:c2:ba:
13:cc:e8:00:6e:df:ae:0c:d3:cd:32:9c:1b:77:76:d3:db:ee:
5e:75:b4:e6:10:0d:eb:90:1d:7d:d2:83:1c:44:d1:a2:4d:3f:
57:4d:c5:09:d8:38:bc:c9:b0:1a:5a:32:64:e9:c1:78:a9:eb:
b7:b2:57:c0:e8:67:ab:9a:cf:eb:90:dc:e2:31:64:02:f8:1c:
f4:df:85:25:90:3c:1f:83:a8:13:fa:6f:8b:e8:47:cd:37:d0:
15:e9:ff:82:f7:2f:70:39:53:25:3f:d6:6e:5c:5c:2e:cf:65:
5c:dd:ce:62:0c:8d:b5:b7:a7:14:7b:6a:f3:da:57:95:c7:e5:
2c:f1:5e:a8:6f:2f:ac:a8:eb:cc:ac:d8:3c:12:c3:3c:e9:55:
59:26:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:40 2026 by rpki-client