Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/9a872JlcYscZqCxYXKi5pj2LN-Y.roa
File: 9a872JlcYscZqCxYXKi5pj2LN-Y.roa (raw, json)
Hash identifier: EkcPb5na4Z1UjPk8rfZpoHcC9X8OKV8mQHL5Gngvp5c=
Subject key identifier: F5:AF:3B:D8:99:5C:62:C7:19:A8:2C:58:5C:A8:B9:A6:3D:8B:37:E6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019EBC2A580AB82D86C038C999279E4A84F9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/9a872JlcYscZqCxYXKi5pj2LN-Y.roa
Signing time: Fri 12 Jun 2026 14:09:12 +0000
ROA not before: Fri 12 Jun 2026 14:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219446
IP address blocks: 2a0c:b641:da0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:2a:58:0a:b8:2d:86:c0:38:c9:99:27:9e:4a:84:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 12 14:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5af3bd8995c62c719a82c585ca8b9a63d8b37e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:22:6a:2b:ae:6a:42:06:da:4e:a6:49:2f:
58:6c:07:61:f3:b8:06:0a:d0:8c:ba:aa:b5:02:27:
a3:78:ff:b0:6a:40:c1:08:6b:22:7d:90:32:c1:e3:
67:f8:17:e7:96:92:1c:06:ec:5a:1e:b8:d7:d3:1b:
9d:c2:f4:7c:fe:77:f2:fb:96:f1:68:60:85:3b:2b:
de:8d:29:b2:28:0e:40:73:ed:e9:a2:ab:13:bb:8a:
50:ae:ff:ef:82:07:42:7b:5e:e1:90:63:10:f0:a6:
aa:b1:f7:17:77:56:7e:47:ff:e1:4f:e6:f6:fc:b3:
c6:75:41:d6:8f:b6:00:1c:d2:8a:dc:4b:e9:99:36:
59:53:36:ef:43:ce:de:7d:63:4c:37:b7:3d:69:35:
4d:fe:28:17:9d:3c:75:0d:31:6e:21:3e:34:8d:74:
54:ea:57:d9:8c:48:71:5b:cd:a5:ad:84:f3:0d:f6:
55:2e:0a:3a:90:ff:0a:e3:9d:4b:2f:03:a3:68:e8:
9c:5c:e3:41:4b:86:a3:45:9d:c3:ba:58:81:d2:9d:
aa:6e:10:6c:09:bc:58:21:c3:e2:cc:c0:92:91:47:
3b:8b:fa:d1:34:49:02:67:d2:50:92:02:57:87:01:
24:e6:16:13:16:e6:af:45:ae:82:a7:8b:00:02:3f:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AF:3B:D8:99:5C:62:C7:19:A8:2C:58:5C:A8:B9:A6:3D:8B:37:E6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/9a872JlcYscZqCxYXKi5pj2LN-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:da0::/44
Signature Algorithm: sha256WithRSAEncryption
40:76:fd:7e:99:e2:64:36:75:e3:d6:62:41:ad:e4:dd:ff:c4:
7f:8d:1b:a0:ab:18:43:b5:60:50:5f:78:94:25:d4:68:df:45:
17:47:34:a5:1c:63:a5:02:19:26:f0:d5:14:0c:f4:ff:04:da:
45:37:79:ce:5f:6a:b4:94:9a:f6:d6:1f:b5:8c:f0:2f:9f:0b:
e8:78:15:7f:0f:7f:3b:2c:8b:61:89:b7:d6:77:23:2c:b1:d9:
f5:18:d9:d2:01:23:12:08:2f:21:f8:25:01:19:0c:e0:67:84:
99:9f:8b:7c:02:96:d0:3f:25:01:a8:c3:a9:32:1b:5f:b6:df:
03:83:3c:07:4f:27:9a:60:42:38:26:f3:af:8b:1d:f4:bf:21:
39:09:e3:40:7e:91:1b:4f:55:44:26:1b:f6:73:75:e7:5f:d9:
05:30:9d:2f:cb:df:21:37:e4:e1:6a:08:46:23:2e:19:78:97:
39:f4:11:b5:13:d6:55:67:a0:a2:cb:24:a7:6c:20:4a:aa:86:
7a:64:1b:ed:98:da:43:da:d8:a9:82:69:88:e7:ff:79:fa:13:
7f:88:fb:5d:f8:04:1f:69:86:82:81:b1:20:d9:05:d0:e0:39:
14:0a:05:df:8f:f2:db:13:b3:28:fd:8f:0d:43:b2:34:ad:f2:
61:52:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:03 2026 by rpki-client