Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pMj4R_wirUpV4SYZO0uPOot7vF4.roa
File: pMj4R_wirUpV4SYZO0uPOot7vF4.roa (raw, json)
Hash identifier: gebYwI3LShkW9YoVCr3bkIuVwxrNEdLyMJDBq0hqsYY=
Subject key identifier: A4:C8:F8:47:FC:22:AD:4A:55:E1:26:19:3B:4B:8F:3A:8B:7B:BC:5E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A0AF18AF0B4AB0BB90FA029F45A0BCC729
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pMj4R_wirUpV4SYZO0uPOot7vF4.roa
Signing time: Thu 17 Sep 2026 11:20:25 +0000
ROA not before: Thu 17 Sep 2026 11:20:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218647
IP address blocks: 2a0c:b641:880::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:18:af:0b:4a:b0:bb:90:fa:02:9f:45:a0:bc:c7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 17 11:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4c8f847fc22ad4a55e126193b4b8f3a8b7bbc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:cf:c7:3c:f2:27:ff:af:21:06:cc:69:9e:
c6:2f:ab:9b:51:5c:87:3f:d4:65:d9:3f:c6:5b:ec:
73:96:4f:a3:0d:b1:ba:b6:cb:9b:33:db:5b:90:8f:
4f:0f:0f:e6:30:aa:ce:63:64:9b:10:d0:81:95:fc:
0b:7b:01:3c:09:c7:de:e1:5d:64:a4:81:3a:a1:01:
b4:f7:ac:37:87:1b:34:bd:1b:1b:13:fc:c0:b8:7d:
00:a0:cc:6a:62:10:36:6a:94:f5:d2:fe:51:b4:3b:
47:46:23:b6:0e:be:4a:b5:2a:d5:d1:2c:62:a9:c5:
4a:fa:fa:61:fa:fe:ed:58:d9:62:7e:d6:71:0c:09:
9c:ad:a7:80:62:a7:bb:61:70:11:94:76:fa:16:5d:
6d:d7:99:a3:78:2d:40:f1:b3:dd:06:a3:c5:b7:4b:
05:3e:43:bc:5e:44:7c:cb:52:1c:29:54:5f:ff:b8:
85:98:58:62:4c:8c:df:ef:56:a7:af:0b:d1:fe:73:
05:cd:09:8c:02:3f:02:1c:79:12:c6:97:d9:2a:d9:
ae:81:30:e0:b5:65:0d:8d:a1:2a:c1:b7:9e:c1:dc:
b5:ad:dc:06:b2:ee:91:80:d1:52:84:1a:8c:f3:ff:
88:89:16:37:ff:a7:1e:d8:c9:bf:5b:88:d9:8e:06:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:F8:47:FC:22:AD:4A:55:E1:26:19:3B:4B:8F:3A:8B:7B:BC:5E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pMj4R_wirUpV4SYZO0uPOot7vF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:880::/44
Signature Algorithm: sha256WithRSAEncryption
88:4d:22:75:a2:4c:70:d7:34:64:59:8b:f8:37:f0:41:f7:aa:
16:41:0f:cd:06:9b:b5:27:3b:8d:f9:2a:8e:9b:d0:f9:68:e7:
87:53:d9:e4:5a:a7:f0:db:6e:3d:67:50:be:52:be:33:b8:fd:
83:00:ec:2a:8f:cb:04:06:88:97:a3:86:8d:c7:ca:3f:3a:38:
3a:e0:1e:25:e1:8e:6c:23:77:3f:bc:60:9d:1a:62:e7:1d:26:
3a:81:b1:b4:72:c1:c8:13:5c:12:cf:52:53:81:8c:dd:94:fd:
cb:34:34:21:18:b8:64:ee:5a:de:07:53:3d:fe:7a:3c:a6:64:
8e:a2:34:6d:b1:f3:aa:36:b6:f2:b7:ef:be:d2:f2:7c:c2:d2:
0e:24:2f:20:9e:fa:1f:1e:7b:e6:57:33:1a:1b:c7:bf:6b:02:
2e:cf:84:eb:8b:e4:01:e0:d5:f0:73:74:66:a2:42:fa:0f:76:
f2:92:87:3b:e4:85:57:05:ca:4f:d5:2d:da:8d:dd:a3:f9:30:
bd:04:77:a1:3e:6a:52:8b:ff:61:87:e1:b9:ad:26:6b:c4:56:
bf:b4:91:d5:07:4f:fa:b4:ec:44:94:47:d5:b3:2c:05:e2:c6:
77:2c:5a:38:f7:2a:e7:6d:2b:d7:56:43:9b:6d:8a:fe:cc:dd:
b8:d8:61:52
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCvGK8LSrC7kPoCn0WgvMcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYwOTE3MTEyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGM4Zjg0N2ZjMjJhZDRhNTVlMTI2MTkzYjRiOGYzYThiN2JiYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmPPxzzyJ/+vIQbMaZ7GL6ubUVyH
P9Rl2T/GW+xzlk+jDbG6tsubM9tbkI9PDw/mMKrOY2SbENCBlfwLewE8Ccfe4V1k
pIE6oQG096w3hxs0vRsbE/zAuH0AoMxqYhA2apT10v5RtDtHRiO2Dr5KtSrV0Sxi
qcVK+vph+v7tWNliftZxDAmcraeAYqe7YXARlHb6Fl1t15mjeC1A8bPdBqPFt0sF
PkO8XkR8y1IcKVRf/7iFmFhiTIzf71anrwvR/nMFzQmMAj8CHHkSxpfZKtmugTDg
tWUNjaEqwbeewdy1rdwGsu6RgNFShBqM8/+IiRY3/6ce2Mm/W4jZjgb/TwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKTI+Ef8Iq1KVeEmGTtLjzqLe7xeMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvcE1qNFJfd2lyVXBWNFNZWk8wdVBPb3Q3dkY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQiA
MA0GCSqGSIb3DQEBCwUAA4IBAQCITSJ1okxw1zRkWYv4N/BB96oWQQ/NBpu1JzuN
+SqOm9D5aOeHU9nkWqfw2249Z1C+Ur4zuP2DAOwqj8sEBoiXo4aNx8o/Ojg64B4l
4Y5sI3c/vGCdGmLnHSY6gbG0csHIE1wSz1JTgYzdlP3LNDQhGLhk7lreB1M9/no8
pmSOojRtsfOqNrbyt+++0vJ8wtIOJC8gnvofHnvmVzMaG8e/awIuz4Tri+QB4NXw
c3RmokL6D3bykoc75IVXBcpP1S3ajd2j+TC9BHehPmpSi/9hh+G5rSZrxFa/tJHV
B0/6tOxElEfVsywF4sZ3LFo49yrnbSvXVkObbYr+zN242GFS
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:37 2026 by rpki-client