Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/s5vcRC8I5YzxhepsWVpMT8WeRvI.roa
File: s5vcRC8I5YzxhepsWVpMT8WeRvI.roa (raw, json)
Hash identifier: VeXuPPr2TlzHZDiFpKv3qSIfnRYW3otlYQ3jh6/arPw=
Subject key identifier: B3:9B:DC:44:2F:08:E5:8C:F1:85:EA:6C:59:5A:4C:4F:C5:9E:46:F2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019DBAAE707645DD64D5CE07ED3E679C01EA
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/s5vcRC8I5YzxhepsWVpMT8WeRvI.roa
Signing time: Thu 23 Apr 2026 14:11:27 +0000
ROA not before: Thu 23 Apr 2026 14:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198474
IP address blocks: 2a0c:b641:b60::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:ae:70:76:45:dd:64:d5:ce:07:ed:3e:67:9c:01:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Apr 23 14:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b39bdc442f08e58cf185ea6c595a4c4fc59e46f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:55:71:7a:12:71:68:be:fc:df:dd:75:3a:
7e:01:02:f1:ff:50:da:a7:d5:4b:da:b7:db:ae:0d:
48:9a:c4:1c:13:02:93:c7:a8:57:a5:e6:d1:50:00:
2a:a6:9c:ac:39:52:bc:13:b9:0d:30:b9:74:ed:1e:
a1:b1:84:0d:31:80:59:9e:f9:ce:7b:86:f2:44:50:
b3:27:a4:66:64:a1:1e:12:1d:8f:db:95:48:80:23:
01:a4:bb:b3:a3:05:a8:1d:7b:2d:e5:f2:c5:63:0b:
94:13:d6:20:93:c1:97:ba:9a:02:e8:c9:99:f4:50:
74:7d:26:21:1d:f9:61:74:cb:b4:49:88:37:c4:ad:
d3:ed:87:43:cf:80:68:ee:a7:f9:8b:8c:67:b3:48:
a4:60:1d:9e:df:51:59:4e:d6:ad:1d:bb:ee:8d:c4:
38:8b:05:c7:3c:7d:76:1f:4c:db:41:23:dc:77:f0:
08:b6:14:94:fa:5c:59:2f:66:ff:55:13:61:c5:01:
f2:f4:06:ef:5c:26:6a:b5:5b:8e:f7:dc:db:80:9f:
91:b2:fe:d9:cd:25:11:71:99:e1:8b:81:7f:48:2d:
2d:b8:16:ea:9f:4d:ff:d7:28:7e:39:fc:fa:ac:b6:
ab:92:a2:b0:f6:53:93:b4:60:0d:f0:19:2e:b5:3e:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9B:DC:44:2F:08:E5:8C:F1:85:EA:6C:59:5A:4C:4F:C5:9E:46:F2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/s5vcRC8I5YzxhepsWVpMT8WeRvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b60::/44
Signature Algorithm: sha256WithRSAEncryption
84:34:17:0a:31:b7:c1:6a:35:1b:9e:ed:2e:34:8c:52:cb:70:
95:ce:2d:0f:a7:7c:81:2e:45:92:d6:fb:fc:95:21:d5:98:51:
57:50:9d:7d:83:d9:e1:28:81:a8:10:a5:18:1a:54:2c:f9:70:
66:58:a6:25:bc:6f:dc:c0:d0:c0:65:a6:08:9c:3b:d0:ba:ef:
6f:8d:c9:15:88:06:f1:2d:e4:1e:fa:df:fa:7b:2f:26:73:5c:
de:8a:25:da:ff:b3:90:ee:26:85:7b:ce:ad:a1:31:0e:73:45:
b0:a7:6b:b5:65:b9:4c:75:b9:3d:51:bc:df:1a:d6:6b:56:09:
ec:8b:04:72:c3:2f:22:14:bf:fa:34:1c:d6:0f:a7:1a:50:58:
75:06:3b:93:40:fe:b4:a0:41:28:9f:c8:aa:e8:f8:63:d4:17:
93:85:fb:7d:f6:29:5f:f9:ad:92:d3:fc:02:aa:9f:e9:ab:6a:
6f:d7:39:35:c3:22:04:71:19:0d:d2:83:04:e7:89:d8:79:fd:
20:81:bf:e8:a4:30:fc:6b:86:37:3c:aa:95:01:a1:71:78:30:
e2:b1:4c:8c:e6:5a:dc:2a:10:27:ad:12:87:17:4c:87:d4:45:
84:41:68:1b:75:d1:d9:24:5d:2a:bb:b3:e5:3c:27:4f:e7:da:
d0:87:33:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:16:05 2026 by rpki-client