Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/29UCqWlrNh5jbs3TTO-NOpURpdQ.roa
File: 29UCqWlrNh5jbs3TTO-NOpURpdQ.roa (raw, json)
Hash identifier: 0gL17gOZz0TzmploQY6uAf9PHcOaGIU8JFgYgCSZums=
Subject key identifier: DB:D5:02:A9:69:6B:36:1E:63:6E:CD:D3:4C:EF:8D:3A:95:11:A5:D4
Certificate issuer: /CN=9685c7282a451ba2da99fd5117c545ad7a2bde13
Certificate serial: 019E873DAE7F3227DD38E9F87AFB5AEB5B45
Authority key identifier: 96:85:C7:28:2A:45:1B:A2:DA:99:FD:51:17:C5:45:AD:7A:2B:DE:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/29UCqWlrNh5jbs3TTO-NOpURpdQ.roa
Signing time: Tue 02 Jun 2026 07:30:26 +0000
ROA not before: Tue 02 Jun 2026 07:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197758
IP address blocks: 165.65.192.0/22 maxlen: 24
2a04:e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:3d:ae:7f:32:27:dd:38:e9:f8:7a:fb:5a:eb:5b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9685c7282a451ba2da99fd5117c545ad7a2bde13
Validity
Not Before: Jun 2 07:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbd502a9696b361e636ecdd34cef8d3a9511a5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:24:51:ae:30:8c:23:88:99:3c:7d:83:3d:
fe:52:63:c1:a2:b6:6c:e1:15:5a:3e:6d:3b:7b:ce:
3a:bb:ad:32:d1:a7:fd:b4:b0:ac:11:80:dc:10:f7:
69:eb:d6:d9:e2:e8:ad:12:08:30:99:7f:68:25:26:
bb:6b:4d:cc:dd:09:be:2b:43:7a:2c:f2:00:47:aa:
5a:03:76:8c:44:fb:ea:06:58:27:69:7d:5b:48:fe:
1d:69:34:8d:95:06:24:9d:e9:90:7d:6b:6d:32:df:
97:82:75:9b:37:b2:cf:55:26:a2:d8:84:8b:de:22:
78:f4:15:42:13:03:54:12:c7:bd:7e:c4:8c:e4:a5:
6b:f0:e0:44:d4:3c:04:ba:4b:06:41:29:e1:c7:08:
fe:b3:13:e8:be:54:7c:50:3f:6d:4f:c5:ef:33:14:
5c:89:fb:3f:96:a7:e3:67:f1:91:58:65:f8:16:be:
ca:0a:46:70:2b:db:9a:76:6b:22:f2:44:8b:c6:be:
27:7f:95:6d:77:c0:dd:dc:1e:3c:a8:7f:2e:f9:b6:
6f:1f:12:f6:b4:e8:ad:0b:fb:53:17:88:23:b3:f9:
41:ae:2c:9b:4f:30:c8:21:d8:75:05:36:70:a7:15:
d5:c0:1a:1c:45:21:e9:f0:e1:cf:92:65:2c:53:e0:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:02:A9:69:6B:36:1E:63:6E:CD:D3:4C:EF:8D:3A:95:11:A5:D4
X509v3 Authority Key Identifier:
keyid:96:85:C7:28:2A:45:1B:A2:DA:99:FD:51:17:C5:45:AD:7A:2B:DE:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/29UCqWlrNh5jbs3TTO-NOpURpdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.65.192.0/22
IPv6:
2a04:e80::/29
Signature Algorithm: sha256WithRSAEncryption
16:59:11:ce:aa:28:62:9b:69:70:61:37:9b:e8:f9:6b:23:aa:
4d:ca:3b:1a:70:15:be:25:f1:88:d2:30:d7:5d:90:84:b0:f4:
b9:09:4e:b9:72:f3:9a:36:7c:5c:f7:86:08:a3:01:be:f1:26:
81:1b:17:4b:e2:f2:01:eb:33:9e:68:cb:72:84:2b:3c:a2:1e:
70:24:e5:16:c3:bf:82:fe:92:fc:f2:17:e7:b6:cb:91:40:1d:
79:95:f9:72:c3:03:df:68:7f:67:67:25:69:bf:d7:81:e6:98:
f3:77:61:d3:53:f4:64:d7:2d:68:97:93:ef:22:e4:d1:00:93:
8e:ca:fb:e6:a4:df:f2:cf:5c:cb:22:99:6f:a2:6b:b2:62:24:
7c:50:9f:06:22:b7:1a:85:0a:b6:b6:0d:2e:b8:df:8e:06:b8:
59:d7:01:bd:3f:bc:35:10:c9:ae:93:f7:5c:cd:e6:02:e9:33:
07:46:c8:79:f6:16:1c:b6:71:37:9b:c0:0e:9a:8c:8b:98:86:
38:41:60:34:f5:93:d8:d8:f3:0e:50:e1:5b:e6:ba:f0:f8:bb:
b6:b9:00:69:eb:61:4d:a8:f8:c8:f3:3c:98:c8:2f:c3:bb:da:
a2:83:fa:15:9f:b2:b4:0f:b2:68:2f:7d:d0:98:e9:87:2a:f8:
8c:dc:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:38:56 2026 by rpki-client