Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KyqIPEsOyv--Ae1cfm-um2_U8tk.roa
File: KyqIPEsOyv--Ae1cfm-um2_U8tk.roa (raw, json)
Hash identifier: 5AwhYsEW4955vrP4cblXQHv2TNL3C4TgIJrjuYhFDqQ=
Subject key identifier: 2B:2A:88:3C:4B:0E:CA:FF:BE:01:ED:5C:7E:6F:AE:9B:6F:D4:F2:D9
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019EB0A39A0B96415DA5FC32C012AEA471E1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KyqIPEsOyv--Ae1cfm-um2_U8tk.roa
Signing time: Wed 10 Jun 2026 08:26:12 +0000
ROA not before: Wed 10 Jun 2026 08:26:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219488
IP address blocks: 2a0c:b641:d40::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:a3:9a:0b:96:41:5d:a5:fc:32:c0:12:ae:a4:71:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 10 08:26:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b2a883c4b0ecaffbe01ed5c7e6fae9b6fd4f2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:23:15:93:a1:00:21:c1:ae:86:a4:20:39:
7e:db:67:62:e9:7d:c2:ee:c8:3e:6a:3a:0f:f5:aa:
37:e0:7b:0e:e0:82:1c:5e:6d:cf:e7:33:39:38:75:
0b:9b:1f:88:b9:e8:34:eb:f0:bf:1a:46:90:df:9d:
c4:cf:27:3a:d6:26:b5:93:6a:14:ec:bb:d6:8b:20:
2b:72:c1:98:8b:d1:13:b4:3c:c0:fc:e1:dd:13:a5:
20:42:87:f8:52:15:a1:27:6a:75:e7:91:22:14:e9:
90:f8:db:33:ca:d6:37:46:5e:a8:c2:e6:a1:38:b0:
8b:27:c6:ab:75:c3:67:c9:3b:de:80:07:21:8e:a0:
04:a3:0f:9e:ef:2e:34:cb:20:2f:a5:b2:89:6a:0b:
91:d1:f0:14:ea:a7:a9:fe:71:bc:34:51:b9:bd:1b:
07:c5:2f:7f:20:56:f1:be:65:c4:f9:59:e6:1f:52:
7f:02:a6:27:4f:8b:a6:04:5f:14:e2:01:1e:a9:f8:
00:06:42:86:a5:b9:94:f0:20:f6:b5:6d:b3:90:fb:
b7:3d:72:83:12:f0:84:1e:45:39:8b:5f:aa:ed:ae:
51:17:ab:e5:74:89:3a:eb:1b:27:b0:1a:31:c7:7c:
b0:a2:8e:1b:e3:c8:83:db:2c:91:a1:7c:9d:17:46:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2A:88:3C:4B:0E:CA:FF:BE:01:ED:5C:7E:6F:AE:9B:6F:D4:F2:D9
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KyqIPEsOyv--Ae1cfm-um2_U8tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d40::/44
Signature Algorithm: sha256WithRSAEncryption
65:36:61:08:39:ee:2f:a1:3d:ee:cf:31:96:68:e6:18:9a:f4:
5c:1f:12:5a:bd:66:cf:e6:d8:94:04:45:ce:fc:01:67:05:70:
f7:28:99:e2:69:b6:a4:00:de:c6:37:01:47:03:40:a0:15:3d:
6d:a1:7a:bd:16:b5:34:e5:8b:06:ee:96:f4:86:3e:86:5d:5b:
47:c7:dc:18:67:28:5a:89:69:b7:8a:ac:0f:41:d7:62:6d:3f:
53:58:7f:41:3f:d9:c1:03:0c:b3:44:38:a2:6a:dd:dc:f9:63:
a9:b7:a3:65:a3:1d:03:24:82:0e:86:38:1e:d3:28:a2:c7:e3:
2e:62:ab:cb:49:bc:97:13:9a:48:9c:3c:1c:1d:82:12:d0:33:
20:16:f6:4d:68:5f:ef:6a:c8:3f:a5:44:bc:ad:ab:84:96:eb:
a9:d2:df:df:38:96:b6:ac:f5:4a:2b:68:2d:ed:07:27:d8:60:
80:5a:12:ae:03:fa:e5:1d:5b:9b:5b:0a:90:05:10:4a:2b:bd:
1f:b0:5c:96:33:47:53:1d:79:e5:3c:4d:7c:d5:be:db:a7:90:
f9:8e:a9:21:bb:50:34:9f:01:81:bf:a5:2e:2e:d8:26:24:e5:
c3:6f:96:d9:a6:cc:08:8a:eb:86:71:63:71:b8:94:ed:91:b4:
d5:64:f8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:17:07 2026 by rpki-client