Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zj0TFF_rBn3E-Tgq10xeW4iokVU.roa
File: zj0TFF_rBn3E-Tgq10xeW4iokVU.roa (raw, json)
Hash identifier: X0J7uVmtSK6gGxq29Jmy9m3PzcV+y1RP1kozPTpLoMk=
Subject key identifier: CE:3D:13:14:5F:EB:06:7D:C4:F9:38:2A:D7:4C:5E:5B:88:A8:91:55
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A17D6B9AB63F52AA2577034F698D860F24
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zj0TFF_rBn3E-Tgq10xeW4iokVU.roa
Signing time: Tue 27 Oct 2026 12:52:46 +0000
ROA not before: Tue 27 Oct 2026 12:52:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218268
IP address blocks: 2a0c:b641:f70::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:6b:9a:b6:3f:52:aa:25:77:03:4f:69:8d:86:0f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 27 12:52:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce3d13145feb067dc4f9382ad74c5e5b88a89155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:33:af:9a:e2:47:0a:80:ed:5f:fc:46:32:
1e:22:49:21:c4:ac:d6:ae:12:b6:1a:ff:ce:6b:5b:
62:8d:4a:7d:de:85:5f:3f:7c:e1:73:7e:01:9b:57:
cf:ef:cb:c7:3a:b1:6d:86:8c:67:44:fc:07:92:e4:
1e:31:10:7f:65:75:a1:61:20:19:76:c6:c8:b9:45:
04:24:ba:28:4d:ab:b6:c2:a1:9e:34:62:92:c1:a3:
c6:49:e1:04:07:68:bd:c7:c7:73:14:41:88:9f:61:
41:3f:03:58:eb:cb:5d:71:ec:d6:3d:1a:53:39:a0:
35:34:6a:8d:3f:cb:ac:51:a6:29:58:4e:a1:cc:e7:
94:bb:c5:6f:6d:9c:01:14:30:fa:13:ec:cf:9f:ca:
6d:f6:a8:63:c8:f6:e7:5b:77:94:4b:d9:a3:74:cb:
f2:bd:47:8f:f7:10:90:0b:51:76:ba:5c:4c:7c:94:
89:18:b7:ef:7c:0a:9a:16:18:d5:c3:64:de:e8:9b:
87:bc:35:fe:f4:61:be:69:91:51:7a:8f:7f:45:9a:
6e:34:28:be:14:79:60:75:41:30:e2:c3:fb:84:68:
c6:b6:7f:25:d6:ba:0a:32:42:89:da:1e:32:d4:c5:
80:47:fb:53:81:48:15:24:90:03:ac:15:c4:b7:c4:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:13:14:5F:EB:06:7D:C4:F9:38:2A:D7:4C:5E:5B:88:A8:91:55
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zj0TFF_rBn3E-Tgq10xeW4iokVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f70::/44
Signature Algorithm: sha256WithRSAEncryption
4f:3e:a1:83:e6:3e:3d:63:0b:d5:18:19:27:52:45:b3:dd:a7:
ae:b3:e7:c3:db:de:b4:ba:b7:0c:a1:a0:ad:4a:f4:8c:c8:61:
3a:43:ba:47:5b:cb:7f:bb:a2:32:21:cd:14:27:27:4a:a2:b9:
03:c1:97:81:50:e8:27:5e:88:d1:f1:16:9b:0e:f2:7c:48:29:
f0:2b:10:3d:06:60:37:4a:d3:8d:e9:fc:40:14:94:94:27:09:
09:36:6e:07:a9:62:a1:93:da:47:1d:04:72:e1:5d:4a:24:b0:
52:09:70:98:e7:e9:25:7c:f5:6e:93:03:fb:1b:cf:e9:ea:3b:
d3:99:7c:fa:0f:a6:b1:b8:8e:e3:d6:95:60:af:0c:8f:80:38:
c9:45:64:0f:ad:cc:7a:7e:55:15:4f:75:24:49:37:34:ce:9d:
56:63:e6:dc:06:3b:9e:88:3a:62:7e:6f:d8:9c:a4:3c:9e:09:
0f:52:d2:69:4b:49:29:0f:29:63:50:38:77:97:8f:c7:38:cf:
dc:84:b2:77:18:34:57:29:9c:71:19:66:ae:b5:fb:21:a0:e4:
6e:db:fb:99:e4:47:86:b8:b9:ab:b9:94:d0:8b:34:ce:6a:8e:
9a:91:c1:60:b7:4e:76:23:11:a5:10:97:db:91:ba:75:86:00:
70:50:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:28:18 2026 by rpki-client