Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qfncJKCmWob2-skyIzO_utf2Bwk.roa
File: qfncJKCmWob2-skyIzO_utf2Bwk.roa (raw, json)
Hash identifier: MXBTWsxWPYJAa46EgKdi67CpkuhHTJ1QSi+qKCCe2Pc=
Subject key identifier: A9:F9:DC:24:A0:A6:5A:86:F6:FA:C9:32:23:33:BF:BA:D7:F6:07:09
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019FEC25DC9AF9B41AB663BA3379362BC4CA
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qfncJKCmWob2-skyIzO_utf2Bwk.roa
Signing time: Mon 10 Aug 2026 14:48:51 +0000
ROA not before: Mon 10 Aug 2026 14:48:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219008
IP address blocks: 2a0c:b641:e60::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:25:dc:9a:f9:b4:1a:b6:63:ba:33:79:36:2b:c4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 10 14:48:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9f9dc24a0a65a86f6fac9322333bfbad7f60709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:fc:65:6c:14:ca:19:ea:a9:cb:64:16:f9:
48:36:5b:eb:16:e5:a3:df:a1:3d:a0:23:32:9c:f0:
62:44:04:db:3d:bb:25:ea:f4:38:6f:c9:4d:b3:11:
83:8a:8a:56:81:f9:3f:bc:eb:fb:6b:a9:ef:ed:bc:
f0:e8:d8:82:e8:ec:aa:df:63:b4:0c:88:39:93:11:
68:37:23:b4:80:79:c6:9f:d0:1c:43:70:3f:c9:d0:
89:be:87:c6:a5:c6:fe:c2:48:33:fe:80:b7:1f:0e:
49:c2:a0:c3:2e:58:d4:57:10:59:37:99:c7:fe:b9:
d7:7c:33:62:53:ac:5c:fb:51:53:d6:5d:74:13:13:
68:da:9e:96:85:0d:c6:2b:36:f7:6c:fb:64:93:e6:
cb:bb:91:4c:db:d0:5c:77:2b:08:ae:21:1e:37:47:
cb:1d:7f:e2:df:c2:5f:ba:61:06:bd:92:7f:ca:1f:
d1:8e:9a:0b:5e:dd:3f:ea:e5:51:b7:7a:56:90:36:
79:4c:54:b9:b1:80:13:46:3c:f7:31:d0:9f:a5:5d:
93:14:8b:5e:62:24:ef:62:3d:49:d4:1f:43:66:19:
8a:fd:0d:98:d0:4b:25:a5:6f:2c:96:7f:7c:27:1a:
b4:f8:b0:55:ef:c8:59:a3:f5:1c:41:16:5d:c9:63:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:DC:24:A0:A6:5A:86:F6:FA:C9:32:23:33:BF:BA:D7:F6:07:09
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qfncJKCmWob2-skyIzO_utf2Bwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:e60::/44
Signature Algorithm: sha256WithRSAEncryption
20:09:bb:19:57:45:4d:f5:ec:6e:67:fc:20:c6:2f:02:1a:46:
65:36:9b:54:a5:30:12:9c:50:6b:63:a3:2c:89:b3:fe:0b:92:
4f:83:42:de:32:12:95:75:2e:bb:33:3b:18:f3:3f:e4:30:1f:
59:06:88:26:3a:ff:51:d2:66:01:c4:28:4a:bc:04:23:ab:41:
3b:cf:db:5b:cd:d1:f5:88:2f:97:49:84:b2:ac:30:17:bf:41:
33:2f:a3:66:d4:f2:5c:0a:cb:3a:ee:a2:f5:bb:cd:34:fd:7f:
f9:eb:a6:66:56:80:1e:c9:95:6d:23:e0:c6:27:21:69:d5:27:
89:bd:66:6e:fa:2c:3b:90:e7:72:49:35:0b:4d:68:a2:2d:ad:
28:b1:3f:a8:95:e8:db:b8:7c:37:50:9c:8a:24:5e:2f:0f:81:
88:90:f7:c3:b9:e3:12:98:b9:76:6a:ea:59:31:99:91:78:0c:
c8:dd:c0:81:09:6e:05:12:92:f2:0e:64:a2:ba:d3:7d:46:02:
3d:3f:47:8a:b1:6f:d1:79:09:c8:63:f7:24:53:c6:fe:d2:36:
4b:6c:f6:26:b2:26:62:be:4c:80:c4:82:68:41:c6:80:98:73:
91:ec:6b:06:bf:09:54:bb:e1:ca:b8:6a:4d:34:b1:f0:f9:58:
9c:f1:93:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:18 2026 by rpki-client