Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BBh5gX4RrnzFC0avSeAVigYwL6M.roa
File: BBh5gX4RrnzFC0avSeAVigYwL6M.roa (raw, json)
Hash identifier: uo3zJWM2qa4+h8X5bfIdKaefW4GeOzlZO//mZtOOMk0=
Subject key identifier: 04:18:79:81:7E:11:AE:7C:C5:0B:46:AF:49:E0:15:8A:06:30:2F:A3
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A08C1A49BB7A47BB8ED91ADFFB5F61E5D8
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BBh5gX4RrnzFC0avSeAVigYwL6M.roa
Signing time: Thu 10 Sep 2026 16:15:28 +0000
ROA not before: Thu 10 Sep 2026 16:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219446
IP address blocks: 2a0c:b641:da0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:1a:49:bb:7a:47:bb:8e:d9:1a:df:fb:5f:61:e5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 10 16:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=041879817e11ae7cc50b46af49e0158a06302fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:af:c9:e4:70:3d:2e:03:be:85:a3:ba:5d:
9d:66:80:aa:22:68:64:39:a6:9a:0d:03:52:8d:50:
95:ff:b6:c1:e1:31:85:8d:7b:bd:4e:f6:5c:88:33:
22:5b:34:fa:04:44:ef:d2:31:2d:b6:fb:ff:ee:af:
dd:f8:fc:31:39:b3:5a:fc:a3:7a:b2:b1:af:43:14:
be:e2:9b:fe:ee:d7:b5:d1:e6:03:0c:03:3a:62:5d:
c0:38:ee:e3:ca:01:3a:49:bc:d5:6c:16:ae:51:72:
4f:e7:54:3f:2e:64:cc:7b:22:a7:4b:75:94:b1:8a:
e6:cd:00:b6:db:2e:3d:56:3d:de:5b:18:b6:3f:cd:
f0:1d:79:60:b2:03:28:23:bb:35:b9:25:44:e9:e6:
e5:7c:1e:d6:4b:8b:db:ae:2a:be:2e:8a:44:0f:bc:
de:6e:b3:23:09:50:13:c5:94:85:8f:26:1a:fc:3d:
5e:b1:d0:3e:39:8f:ef:29:1f:ed:a0:ef:99:1e:4b:
89:e7:24:91:19:9f:5f:25:92:27:60:e2:8a:9e:06:
5c:1c:ef:4e:e5:92:dc:2f:7d:2c:36:08:7f:16:56:
27:43:9a:52:08:3d:7a:ef:53:20:c9:65:93:e3:84:
be:24:d9:ee:85:3a:82:8b:d7:a7:8e:78:6b:7e:93:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:18:79:81:7E:11:AE:7C:C5:0B:46:AF:49:E0:15:8A:06:30:2F:A3
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BBh5gX4RrnzFC0avSeAVigYwL6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:da0::/44
Signature Algorithm: sha256WithRSAEncryption
0a:a3:e4:8b:b5:a3:ee:ce:88:5f:3b:6f:fb:19:0c:72:68:70:
7c:ab:fd:ef:89:a0:5a:3e:83:fd:a5:15:b1:fb:2e:84:ed:c2:
fe:a3:16:de:a7:84:13:c4:10:31:61:3a:a7:b7:0e:c6:20:57:
fd:24:5e:86:3d:96:96:73:9b:9d:ea:6a:b2:71:31:a2:73:6c:
10:64:34:bc:e3:91:c2:a6:9f:ac:d1:de:c0:75:39:c9:d9:3d:
47:64:27:63:9a:8e:76:51:36:7a:54:7f:02:94:80:5f:cc:b5:
0d:07:ea:0c:59:53:46:84:b1:d9:41:13:0b:44:00:26:c1:2b:
17:bc:7b:38:c8:87:b5:62:68:92:a5:65:ba:7c:0c:4f:76:7c:
84:59:da:ba:e7:c6:6e:2d:97:f3:b7:23:fd:70:5e:cf:b4:a2:
05:0a:68:6d:a9:b3:98:87:b7:f4:ce:0f:eb:6e:7e:42:07:ce:
9a:7f:e0:83:d6:d5:51:44:da:d8:6f:6b:c6:71:e5:c0:e0:7d:
08:64:59:e0:bc:c8:f2:b4:e7:06:a9:5a:77:7b:96:13:94:c9:
a6:25:86:54:7a:42:77:31:64:10:9d:6c:ad:7c:19:73:f6:cf:
b0:63:7a:43:b2:d1:45:5c:be:58:43:2e:63:c5:a1:47:36:45:
75:62:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:37:47 2026 by rpki-client