Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KEQvAgBXc-NmyA-Rtf8yRWpV0AQ.roa
File: KEQvAgBXc-NmyA-Rtf8yRWpV0AQ.roa (raw, json)
Hash identifier: ohDI3c5+f0UGC+7qj0qtB51XaEgQY1B3udcCkyJh3fc=
Subject key identifier: 28:44:2F:02:00:57:73:E3:66:C8:0F:91:B5:FF:32:45:6A:55:D0:04
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019EA73AD30B27397A9C2D0DFA2F1F70F523
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KEQvAgBXc-NmyA-Rtf8yRWpV0AQ.roa
Signing time: Mon 08 Jun 2026 12:35:10 +0000
ROA not before: Mon 08 Jun 2026 12:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219511
IP address blocks: 2a0c:b641:cb0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:3a:d3:0b:27:39:7a:9c:2d:0d:fa:2f:1f:70:f5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 8 12:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28442f02005773e366c80f91b5ff32456a55d004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:a9:67:09:07:ce:a3:ae:53:10:ba:16:23:
4d:c5:2f:49:a8:0e:5a:c4:f0:c8:e6:59:54:f7:46:
b9:6e:53:19:4e:8c:5f:ef:5b:21:8b:5d:86:56:66:
8e:eb:16:65:7a:ba:fe:4e:2a:c4:dc:59:f3:53:33:
8d:65:e2:fd:27:a7:cc:b3:b0:a3:6c:08:a0:44:56:
2b:f0:2f:d1:b0:59:97:d0:e3:dc:9a:91:ed:2c:e3:
77:b2:18:fa:6a:52:d1:9d:bb:32:e8:da:9a:b2:96:
c1:c4:c9:ac:48:17:b2:c7:3d:77:2e:54:ad:b6:82:
6b:20:54:b9:6e:8d:be:7b:3e:3d:e5:95:d7:fd:0e:
c7:5b:46:0e:fd:14:0a:15:fd:24:da:29:1a:7c:fa:
a1:82:89:77:40:da:b6:dc:7b:f1:0a:ad:11:68:11:
7a:be:4e:00:f2:48:b5:9b:55:3b:e6:68:21:96:fe:
08:dc:7b:d2:c6:1e:49:cc:d5:56:4b:ce:30:cd:5d:
0f:73:23:26:19:26:92:22:55:55:31:f6:00:77:72:
7d:91:05:42:74:94:bd:bc:2a:13:17:68:03:05:47:
78:f7:72:1a:55:4e:b0:69:1f:43:22:5a:97:59:b0:
2f:65:70:e7:b3:79:43:b8:e3:39:85:5e:42:c7:4e:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:44:2F:02:00:57:73:E3:66:C8:0F:91:B5:FF:32:45:6A:55:D0:04
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KEQvAgBXc-NmyA-Rtf8yRWpV0AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:cb0::/44
Signature Algorithm: sha256WithRSAEncryption
38:f0:d2:03:9c:2b:9e:01:a0:aa:91:f8:05:43:a9:51:be:6e:
f5:5c:6d:81:ca:2c:20:89:c0:a0:1d:e0:24:46:a7:34:38:fa:
8c:82:b2:48:5f:f8:a5:99:27:0f:63:a1:b4:60:26:da:9b:7d:
69:9a:76:94:63:45:ec:4e:02:f5:67:37:8e:01:63:98:7f:c7:
c3:cd:47:fb:36:45:9b:a1:b0:df:ad:64:35:f3:7d:44:36:30:
43:cf:49:f2:58:44:75:92:ac:a1:0a:71:ee:20:d0:68:ca:ca:
58:a6:05:5e:f5:f4:3f:0c:1a:f2:ac:9a:5e:53:1b:ef:68:37:
3c:23:b4:86:d8:6a:bb:50:77:29:1b:49:26:74:94:ea:b0:6d:
35:3b:f3:75:86:80:e7:0f:25:a1:44:0c:40:82:54:8f:22:30:
2c:ae:0e:d6:c8:fd:07:3c:33:0e:de:69:f7:26:11:fa:59:85:
fa:d8:cd:d6:d0:9b:2b:26:07:7c:76:6c:d2:2f:e6:4e:eb:3f:
77:f5:97:c9:39:b0:fc:25:d3:2f:bc:fd:25:86:5f:6a:e1:9c:
45:bb:31:a1:95:37:9c:4e:99:b5:61:55:10:3c:a6:30:46:6d:
95:71:4b:24:74:0f:2e:a8:0f:8d:b6:8d:a2:d7:ce:b0:03:45:
66:1e:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:04:34 2026 by rpki-client