Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/RGBq2FSn0FisiLY5hbUPkKxjdTo.roa
File: RGBq2FSn0FisiLY5hbUPkKxjdTo.roa (raw, json)
Hash identifier: gRY4dTWZk/MRAor8xvglsLTFZW7lcmxrSq+zim8k20s=
Subject key identifier: 44:60:6A:D8:54:A7:D0:58:AC:88:B6:39:85:B5:0F:90:AC:63:75:3A
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 019EE1B444F8A133E45EE2DB0338B683601D
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/RGBq2FSn0FisiLY5hbUPkKxjdTo.roa
Signing time: Fri 19 Jun 2026 21:05:48 +0000
ROA not before: Fri 19 Jun 2026 21:05:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 2a12:6e40:eff0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:b4:44:f8:a1:33:e4:5e:e2:db:03:38:b6:83:60:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Jun 19 21:05:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44606ad854a7d058ac88b63985b50f90ac63753a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:16:f6:7d:d2:aa:a2:a1:fc:38:c1:a1:5b:
a7:ac:48:c1:56:6e:09:1c:a3:c8:67:6e:b0:c8:f2:
1d:d8:97:e1:dd:98:f1:6b:99:49:4b:32:73:a7:8a:
55:6e:9e:47:7e:f5:56:27:34:69:d6:46:c3:c5:a8:
cd:f5:4f:7f:f3:17:a3:5a:41:e6:e9:b9:e0:dc:8b:
62:77:93:7f:36:c2:50:b5:ce:74:1e:78:ed:c1:ad:
e9:8b:a0:9f:9e:4c:e2:0b:2c:90:7b:b2:96:5b:c4:
ae:65:19:99:ee:74:8e:e4:c1:87:8c:d8:c1:7f:e4:
33:f1:77:e1:8f:96:9d:43:e6:8c:38:d0:87:cb:a0:
69:97:06:45:58:e6:74:f0:c1:39:0a:5e:0a:0b:74:
e2:4b:86:9a:83:9e:05:8c:fd:b5:7f:bc:4e:a4:35:
8e:a4:5d:64:9a:69:20:ad:c0:29:b9:d0:67:b4:b5:
d4:d0:86:05:b3:3e:e6:9f:f1:40:f6:44:02:08:50:
6c:e6:e6:19:08:ad:4c:bf:51:88:6d:5a:42:b4:89:
8b:d1:63:05:f1:e3:ef:2c:e7:29:ad:a2:00:93:8e:
db:84:58:82:cf:59:f8:c3:7e:14:5f:68:1f:c0:bf:
25:25:9a:92:f9:e8:1d:34:fc:18:b9:43:d2:e8:e5:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:60:6A:D8:54:A7:D0:58:AC:88:B6:39:85:B5:0F:90:AC:63:75:3A
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/RGBq2FSn0FisiLY5hbUPkKxjdTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6e40:eff0::/44
Signature Algorithm: sha256WithRSAEncryption
14:32:a7:18:bd:00:5f:8a:76:e2:71:13:bc:8c:0f:12:23:7d:
cb:a1:16:dc:28:7c:9c:36:35:fd:e1:14:86:41:7e:01:3d:54:
36:f0:05:a1:59:71:cc:7b:72:29:e4:47:ad:a5:09:99:62:3c:
c6:1a:2f:1d:f5:cb:6a:73:1e:50:22:49:04:ca:8a:ee:b4:68:
f9:03:13:73:32:a4:9c:8c:dc:64:18:80:4a:85:7e:98:1d:8f:
f3:82:fb:4b:53:5d:f2:13:84:35:58:c0:f6:9c:99:c9:8a:31:
45:b2:08:2d:12:ea:e8:8d:d8:da:26:61:41:72:3a:1e:7f:e3:
02:9f:9a:48:5c:5d:d3:54:e4:21:38:99:9a:c0:ce:0f:88:4b:
a4:fd:0d:77:b9:5b:56:4b:62:4b:a6:cf:c9:53:16:93:cd:eb:
26:0e:02:f7:38:80:ff:13:69:3b:f8:91:7d:5a:74:5a:d3:70:
91:fe:c4:7e:2f:d3:b4:44:9a:3c:b1:a0:77:23:b2:00:e8:ed:
d7:e1:39:8c:f3:15:c8:1a:a1:1e:6f:d2:52:68:ac:46:95:9d:
d1:29:77:ea:8b:b8:df:e2:27:07:38:65:4f:ee:04:f3:d7:d6:
b5:d4:4a:62:64:82:9e:f0:7d:93:1e:4a:d6:dd:80:79:1b:3e:
70:1b:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:23:42 2026 by rpki-client