Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/gVfI8wb9x0T_A_Jd6e2KzRibf0U.roa
File: gVfI8wb9x0T_A_Jd6e2KzRibf0U.roa (raw, json)
Hash identifier: ouBW00a0akyeru/zIDE9rFlpoQFgIghiuV9PTGuI4WY=
Subject key identifier: 81:57:C8:F3:06:FD:C7:44:FF:03:F2:5D:E9:ED:8A:CD:18:9B:7F:45
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019A4B88BAF05DEC9DE9A6D03EDFF79C0664
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/gVfI8wb9x0T_A_Jd6e2KzRibf0U.roa
Signing time: Mon 03 Nov 2025 21:04:03 +0000
ROA not before: Mon 03 Nov 2025 21:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215614
IP address blocks: 2a0c:b641:610::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:88:ba:f0:5d:ec:9d:e9:a6:d0:3e:df:f7:9c:06:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 3 21:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8157c8f306fdc744ff03f25de9ed8acd189b7f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:3b:f9:35:1c:9b:a3:a3:be:64:65:39:4a:
28:fc:a1:d4:1e:28:25:2e:78:97:74:f4:41:01:af:
0d:a1:5d:33:65:15:dc:9c:de:74:51:aa:6c:b0:e0:
24:6c:5d:5a:7b:7e:38:f0:77:97:06:84:cc:22:24:
5f:d4:bd:6d:df:42:f9:36:89:a5:e0:db:10:bc:04:
e0:21:40:4e:c6:e6:d6:d6:1d:c6:63:2f:87:10:6c:
53:22:83:c8:42:40:bd:a0:c7:79:26:55:8b:28:c4:
95:ad:4b:30:57:2c:3d:93:59:cb:e2:dc:c4:c7:7e:
6e:a4:7d:28:cc:d5:ac:7f:1b:8d:da:8f:ef:9d:9c:
a6:2d:a4:66:fe:09:44:41:88:1f:fe:11:8a:20:4c:
f1:94:ee:1b:58:89:2e:ff:da:76:2f:b2:60:30:99:
6e:cc:ef:59:2c:a8:9b:2c:76:54:dd:01:b2:f4:de:
82:33:27:79:f2:a7:c7:85:cf:20:ea:d1:16:24:f7:
52:0e:96:8d:40:e4:32:f8:b1:22:0d:26:9c:2a:66:
97:39:fd:03:33:33:db:1f:8e:00:2f:3e:19:78:68:
33:0c:9a:f1:dd:52:b1:eb:8e:49:d3:ef:d6:4d:25:
05:ad:99:39:73:26:f1:3b:d0:46:5b:09:f2:be:97:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:57:C8:F3:06:FD:C7:44:FF:03:F2:5D:E9:ED:8A:CD:18:9B:7F:45
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/gVfI8wb9x0T_A_Jd6e2KzRibf0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:610::/44
Signature Algorithm: sha256WithRSAEncryption
8e:a3:c3:85:06:ff:b4:d9:8e:cb:68:13:30:0e:c5:c6:37:35:
c1:a0:eb:09:fa:85:72:75:30:2d:b3:08:c2:1e:37:7c:32:d9:
6c:8e:20:da:0e:77:8f:1a:6f:ec:03:98:32:c5:5a:54:1a:7d:
7a:92:6d:94:ff:88:69:cf:8f:77:1b:22:06:c3:16:a0:de:88:
d2:99:a2:07:b7:df:f0:f6:50:a3:ec:84:a2:d3:b0:a0:f8:d6:
a5:58:02:e1:77:00:98:3b:29:78:b9:da:35:83:89:57:fa:9f:
c4:6c:50:3c:ae:19:e8:d6:21:2d:b2:8e:90:18:99:09:61:70:
6b:5f:bb:40:4d:ed:ff:02:eb:6b:b1:a1:bc:a4:1c:e7:44:57:
9f:8b:56:c8:c1:7d:cd:eb:de:b3:b9:4b:a1:23:6f:82:e3:ed:
7c:f1:da:2c:b4:ee:1a:8e:56:70:bd:87:df:0c:bb:6a:43:9b:
29:c3:31:da:15:2d:44:26:ca:43:97:27:59:ce:f7:19:5c:2b:
cf:fc:48:ec:a2:5b:fd:ad:56:a4:ef:fc:d3:f2:09:b5:ca:df:
16:2d:c0:ad:09:3a:dc:bc:4e:78:86:ab:c9:e4:a7:42:8c:9f:
23:2f:65:54:2d:26:db:ae:0a:92:1f:03:82:f3:31:74:61:e9:
4b:92:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:12:47 2025 by rpki-client