Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lqqjkUBINU8rH8fnj1SmeFyJCrY.roa
File: lqqjkUBINU8rH8fnj1SmeFyJCrY.roa (raw, json)
Hash identifier: Ago8Gm4ylDn8szPIzHweGmdUwsOpOZN+1SBo9zIf8MQ=
Subject key identifier: 96:AA:A3:91:40:48:35:4F:2B:1F:C7:E7:8F:54:A6:78:5C:89:0A:B6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019C512B3BE78EF49CB4B8DBE96FC9FEF6FD
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lqqjkUBINU8rH8fnj1SmeFyJCrY.roa
Signing time: Thu 12 Feb 2026 09:25:13 +0000
ROA not before: Thu 12 Feb 2026 09:25:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201256
IP address blocks: 2a0c:b641:970::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:2b:3b:e7:8e:f4:9c:b4:b8:db:e9:6f:c9:fe:f6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Feb 12 09:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96aaa3914048354f2b1fc7e78f54a6785c890ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:e9:d2:cb:2b:eb:5e:59:e8:e1:39:69:d1:
fa:90:d1:af:ff:9f:18:00:10:db:81:bd:b4:df:c9:
06:8d:4b:f3:17:84:ac:85:e3:16:aa:1a:35:54:27:
ad:21:2e:8e:27:f0:ef:3c:3a:61:97:eb:52:1e:8f:
16:be:f0:0b:2c:c1:46:69:8f:b8:ea:87:96:46:2d:
4d:67:48:bf:e7:26:b1:e5:c8:84:01:14:2d:50:9e:
c5:e8:20:c1:45:88:4a:5f:7f:59:d3:65:5e:f5:1d:
33:cd:a2:86:a0:79:4c:5b:5c:4e:85:b5:db:9f:5c:
bb:da:dd:15:be:d1:7f:8b:df:11:81:f6:eb:82:8f:
ec:81:60:6b:e7:a9:dc:cd:8d:31:dd:e8:88:62:55:
8d:95:f5:e2:4e:11:b1:04:76:27:95:af:db:f9:4e:
3c:3e:95:83:39:5b:52:a2:02:9c:c7:b2:f8:70:3e:
6f:57:9b:e3:21:68:3d:bd:06:12:43:5d:2f:06:55:
11:0b:6e:ae:5b:84:be:01:31:26:8b:90:0d:b8:0e:
11:c8:de:72:61:a5:a9:26:7e:6b:41:6a:f5:62:f9:
29:67:af:dd:7e:cd:b1:23:45:81:01:29:5c:6a:3e:
d8:5b:16:f5:cb:0f:5e:85:ab:95:87:21:d5:54:cf:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AA:A3:91:40:48:35:4F:2B:1F:C7:E7:8F:54:A6:78:5C:89:0A:B6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lqqjkUBINU8rH8fnj1SmeFyJCrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:970::/44
Signature Algorithm: sha256WithRSAEncryption
80:f0:ed:65:95:29:bb:6e:36:06:6e:fe:8c:95:5f:b8:63:6b:
a7:8e:d4:1f:72:9f:fa:8a:08:67:77:a1:32:3f:4e:b3:28:09:
40:b3:7b:d0:73:19:2b:0a:44:33:9e:91:b1:d7:f9:b8:33:47:
fd:38:69:9d:75:73:e5:ea:d7:e7:b9:2c:00:ed:03:64:ca:12:
58:7f:32:d5:f4:cc:25:ac:c8:2e:23:16:49:ea:78:74:51:04:
4f:d2:3c:3c:68:e6:7e:44:c3:3a:a9:e4:2e:f6:1d:30:40:cc:
18:23:b0:9f:14:3c:fe:3e:59:2c:3e:3d:2c:45:ba:fa:1c:57:
40:59:f3:ee:3c:34:17:9d:47:f8:4a:4a:b1:05:bf:3b:2e:1b:
40:2d:78:2d:3a:c0:ae:34:e1:95:44:30:3d:e4:ad:7b:96:3c:
b7:5c:d2:b6:10:1f:10:5e:bc:3d:96:01:fe:ac:88:46:8b:ad:
c9:c3:23:b6:6a:da:11:f1:68:ab:b6:bf:55:02:d6:65:c3:e2:
57:cd:78:2b:c9:cf:e3:e4:75:8a:39:6c:bf:1a:7f:a9:13:40:
12:d8:6d:46:b6:87:f4:d4:f3:5c:c9:31:71:d0:cd:32:44:e4:
f1:70:7a:7e:54:17:de:a6:40:41:95:b1:b8:57:ef:bc:c4:26:
7e:59:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:20 2026 by rpki-client