Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rgDfPcvv3INBHKRYgxgrqNfdW-w.roa
File: rgDfPcvv3INBHKRYgxgrqNfdW-w.roa (raw, json)
Hash identifier: l8jDYFejjZE9RHiyxdE8e8a9T7Oskb4mmTt3YxwGVMM=
Subject key identifier: AE:00:DF:3D:CB:EF:DC:83:41:1C:A4:58:83:18:2B:A8:D7:DD:5B:EC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019E64B1D94DBBEC18069B7FE9266F646759
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rgDfPcvv3INBHKRYgxgrqNfdW-w.roa
Signing time: Tue 26 May 2026 14:30:37 +0000
ROA not before: Tue 26 May 2026 14:30:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197272
IP address blocks: 2a0c:b641:be0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:b1:d9:4d:bb:ec:18:06:9b:7f:e9:26:6f:64:67:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 26 14:30:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae00df3dcbefdc83411ca45883182ba8d7dd5bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:23:c0:71:97:c0:49:1c:52:23:7c:27:36:
88:e8:39:23:ed:cd:3b:4d:9c:28:84:d6:00:ce:e5:
9f:06:69:a1:12:e2:24:09:cd:44:54:c1:4f:75:15:
12:a3:14:cc:c1:8b:f0:ed:74:8e:d2:cf:a7:a2:5c:
a8:ee:21:24:ca:68:59:d2:fa:56:97:3c:df:68:e2:
40:1f:8a:29:62:04:9b:c7:66:dd:eb:51:32:62:ee:
1a:8b:b0:61:dc:4e:01:0c:96:80:7d:90:19:20:8e:
a1:a7:6c:d0:1e:f6:f9:a3:1e:cb:aa:fe:96:34:24:
65:45:39:ae:6d:45:69:7b:f8:35:8d:a7:0f:ce:b1:
fd:e6:1b:d2:b3:1d:96:e3:97:d0:32:6d:b8:9a:3e:
4a:90:53:24:a1:fe:b8:7d:4e:02:9d:3e:b9:f8:f4:
3f:8d:78:9c:b2:f1:70:42:94:64:05:a7:8f:e0:1d:
53:87:3d:5e:d9:b9:5f:18:a7:63:b6:e2:c1:7a:4e:
74:03:e6:86:e1:b4:11:a9:fc:e7:54:bd:ea:3b:5e:
e2:64:f3:95:53:ed:9b:4d:a0:8e:fd:c2:aa:5a:07:
a0:cd:ff:b1:d2:3f:ba:b3:7d:1e:24:14:55:b8:e4:
a2:80:03:09:12:d2:2f:92:7a:6e:b4:0c:fc:63:7d:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:00:DF:3D:CB:EF:DC:83:41:1C:A4:58:83:18:2B:A8:D7:DD:5B:EC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rgDfPcvv3INBHKRYgxgrqNfdW-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:be0::/44
Signature Algorithm: sha256WithRSAEncryption
9c:3d:1f:a8:01:26:8b:bd:7b:29:f8:a0:27:29:5a:50:be:94:
e3:d3:a4:87:1d:64:11:df:9a:2d:eb:e7:66:85:77:19:fc:3e:
88:a7:91:97:2d:54:8f:2d:1d:c1:b0:5b:1a:bf:4a:9c:49:a2:
4a:90:5e:95:0c:59:04:4e:0f:26:67:a3:1c:f4:b1:1b:76:ab:
f7:f1:8b:a4:b1:e3:fb:f6:6a:a0:88:36:9e:5b:ca:83:09:d6:
38:29:b4:e3:b9:0a:73:b7:72:63:52:f8:9d:fe:74:d9:25:36:
a5:84:fb:0e:af:c3:c7:11:13:20:05:f0:1d:4e:4a:7b:63:f3:
81:2b:1a:48:3b:c4:0e:de:03:41:4c:74:aa:dc:76:dc:ac:cd:
b7:0e:94:6f:e6:ab:8a:70:1b:9d:40:b5:d6:f8:a4:7b:b1:c5:
25:af:54:87:be:a9:ca:4f:54:df:7f:68:15:a3:f1:dd:47:77:
9a:da:5c:04:63:9e:19:26:80:d0:06:26:18:e7:ee:1e:93:ae:
ea:40:aa:5e:fb:d3:d9:29:e3:3d:7c:8a:c0:57:6c:8b:18:b3:
f8:2e:d9:b7:78:e2:35:6d:94:c7:f9:e6:82:c5:64:eb:d1:48:
1f:53:6b:91:93:f1:86:17:a0:23:57:7a:d0:17:61:ad:2b:b6:
b9:ef:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:12:26 2026 by rpki-client