Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pat5Tg-zyCgOXFwyixFzNqsTHqc.roa
File: pat5Tg-zyCgOXFwyixFzNqsTHqc.roa (raw, json)
Hash identifier: XzTPcXRIiQSGiO151HINo0cNI73HllpIq8r34EBlroo=
Subject key identifier: A5:AB:79:4E:0F:B3:C8:28:0E:5C:5C:32:8B:11:73:36:AB:13:1E:A7
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019E21F35B90616D4C5EDB3B25B237E06EF7
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pat5Tg-zyCgOXFwyixFzNqsTHqc.roa
Signing time: Wed 13 May 2026 15:27:37 +0000
ROA not before: Wed 13 May 2026 15:27:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216150
IP address blocks: 2a0c:b641:b90::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:f3:5b:90:61:6d:4c:5e:db:3b:25:b2:37:e0:6e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 13 15:27:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5ab794e0fb3c8280e5c5c328b117336ab131ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:13:fd:ca:ba:70:c6:36:c7:8b:0a:5c:a3:
95:f7:e8:43:84:08:20:7c:6d:55:15:7b:66:2c:1f:
66:41:20:28:1c:2a:ca:6b:60:cb:3a:82:14:7c:a9:
40:44:d7:b4:13:5c:77:af:e4:c7:aa:00:5f:55:ed:
5b:c0:f7:c5:6a:b4:88:13:57:5e:bf:d3:cf:28:de:
27:86:35:5c:6a:e3:1e:18:76:62:cd:d4:df:0e:29:
c0:58:10:24:e5:00:ab:42:f3:dd:b5:4a:02:d9:b8:
12:94:b5:ee:c5:14:bc:46:3f:d1:1b:7a:64:9c:f3:
be:ae:84:75:ab:aa:ab:1f:6d:68:09:b8:c9:c5:db:
62:29:8f:ff:94:f0:d8:16:91:13:6d:97:02:14:f4:
c6:d5:93:36:98:1a:64:37:92:86:3f:8a:53:ed:89:
51:f0:9d:ca:42:0d:4d:17:4e:e5:42:5b:66:0c:0f:
6f:9f:62:a4:99:27:ab:64:77:1c:07:bf:92:f1:14:
da:1f:89:17:a1:af:73:88:d2:b0:b6:50:fd:96:d9:
98:ad:e5:12:e4:00:3f:79:9d:df:c8:db:1a:03:ca:
8f:fd:b7:a1:18:68:27:0a:2f:35:22:68:5d:70:0e:
5c:82:15:b2:bb:67:70:48:65:97:e1:b3:da:15:32:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:79:4E:0F:B3:C8:28:0E:5C:5C:32:8B:11:73:36:AB:13:1E:A7
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pat5Tg-zyCgOXFwyixFzNqsTHqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b90::/44
Signature Algorithm: sha256WithRSAEncryption
56:44:f1:c4:5d:5c:7a:49:88:86:39:8a:27:21:07:69:80:b9:
e3:2e:f5:e3:00:f3:71:aa:b4:1a:4c:41:3d:57:b4:00:88:b9:
af:2b:b2:ef:de:53:47:d6:d7:7b:62:62:74:65:2c:fa:7c:8e:
16:84:e2:ab:f3:4a:a0:a1:46:0a:be:a5:76:5a:c3:90:8a:fd:
2a:a9:db:f6:2a:8d:99:4e:83:22:cf:d4:5b:db:64:72:a4:a2:
a7:06:81:17:77:6d:ef:85:07:da:f1:3d:8d:c9:42:93:2b:c4:
23:a3:9f:1f:99:f4:ae:09:04:c5:3c:1d:09:a7:4a:4e:fe:66:
18:ea:25:6d:99:14:1e:13:eb:43:c2:e0:f3:62:8e:57:b5:25:
fc:0a:7c:ce:36:8c:20:40:6c:aa:77:a2:b3:1c:c9:dc:ab:76:
32:fe:9a:32:97:7e:ef:15:55:03:d3:85:02:43:16:fe:f8:d9:
13:01:12:ed:0d:13:cb:bc:61:1e:d8:07:8b:fa:04:1a:c4:82:
5e:db:c9:5b:c4:3c:6f:8d:3c:f7:84:50:3e:ea:46:cf:6f:7e:
7f:d0:f1:77:83:7f:fb:40:5b:a7:61:e1:92:fb:10:7b:c1:7a:
c5:d8:f2:f9:54:ee:59:4f:2a:f2:e2:78:b3:10:cf:d9:5b:5e:
c5:1c:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 17:40:30 2026 by rpki-client