Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0TCWlnShIER9OlpY-_gXOKhVuJo.roa
File: 0TCWlnShIER9OlpY-_gXOKhVuJo.roa (raw, json)
Hash identifier: jVchCGfykCHgpbV2+8miyqBHcOY8JFwFHVBPezz34m0=
Subject key identifier: D1:30:96:96:74:A1:20:44:7D:3A:5A:58:FB:F8:17:38:A8:55:B8:9A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A17CB568E6A6194270E75B1049A3B348DD
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0TCWlnShIER9OlpY-_gXOKhVuJo.roa
Signing time: Tue 27 Oct 2026 09:33:45 +0000
ROA not before: Tue 27 Oct 2026 09:33:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218279
IP address blocks: 2a0c:b641:f60::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:b5:68:e6:a6:19:42:70:e7:5b:10:49:a3:b3:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 27 09:33:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d130969674a120447d3a5a58fbf81738a855b89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d3:d0:a5:36:3d:45:c6:89:54:83:77:bc:a7:
f0:cc:42:59:c2:b9:2c:c2:27:96:22:be:48:b4:28:
b4:90:e1:a5:0f:38:e6:10:4f:69:63:13:69:20:ac:
14:81:be:2d:5c:ee:8f:5f:e9:b6:a8:4c:90:d9:d5:
b0:20:19:f0:28:79:2a:5b:9f:7b:e4:47:6b:e2:c5:
2c:3c:9e:0f:ec:b0:32:9d:c8:e8:44:7b:c4:28:f0:
4b:dd:7d:c7:ab:33:2f:b1:cb:b0:31:bd:09:bc:50:
eb:5f:6d:c6:8e:35:86:61:22:6c:94:dc:0b:42:c7:
d1:60:4a:b7:16:83:0e:12:13:84:60:5a:1e:48:05:
42:3e:54:0f:8a:cf:53:07:de:4a:14:bb:e7:65:c6:
55:c9:bd:2c:b9:a1:8e:3a:22:7c:24:27:78:92:8f:
f1:d1:2b:91:83:b0:49:33:53:62:89:20:6c:7d:ad:
dc:49:a7:5e:1f:74:6e:cb:a5:78:16:27:24:5c:c3:
6e:04:a3:a8:34:0e:47:38:ff:3f:ac:ff:40:36:dd:
9e:98:85:7f:03:c8:8c:58:d3:0a:aa:48:88:d1:79:
10:09:0f:ab:bc:c7:0e:2b:53:70:9b:9a:ac:8b:ba:
47:c7:69:4d:f6:4d:6b:20:e5:35:80:e5:45:9f:87:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:30:96:96:74:A1:20:44:7D:3A:5A:58:FB:F8:17:38:A8:55:B8:9A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0TCWlnShIER9OlpY-_gXOKhVuJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f60::/44
Signature Algorithm: sha256WithRSAEncryption
95:05:db:40:4b:30:71:8f:e2:55:60:26:73:23:ea:bd:47:2b:
8c:0e:91:f1:13:4d:14:11:ef:23:d8:5a:c7:6f:36:ee:45:30:
5a:f7:99:70:dc:94:93:15:1a:0a:bb:88:dc:f4:37:9d:31:16:
66:26:27:b6:d5:69:4d:78:41:81:14:3c:57:03:01:d8:f1:d2:
57:39:41:04:7c:62:b1:eb:06:d4:d4:7c:c6:9d:82:a2:85:78:
46:47:8f:be:7f:98:25:2a:71:19:0e:4b:be:ce:70:b8:bb:99:
ec:cf:f7:61:e4:0f:51:d1:bd:73:5e:5f:be:2f:c4:50:30:3e:
a9:e7:22:e6:42:3c:13:99:c0:28:d6:62:89:a2:63:a1:c6:48:
ef:d4:4f:34:b6:c2:9c:0f:07:62:e8:8c:92:97:13:c5:e0:3e:
24:61:5c:53:a2:76:42:da:3d:c5:8e:43:65:22:aa:03:93:e3:
8b:98:29:2a:2d:2f:47:8c:c9:d0:97:c5:1b:5e:9c:d2:b3:56:
4c:5b:43:92:5e:f0:76:b5:3c:b9:e5:fc:b4:c4:d1:bf:f2:f6:
6c:4d:d8:dd:de:9d:97:51:26:c4:52:4c:e7:e5:79:dc:71:a2:
00:90:19:10:f9:78:85:f7:3d:d7:de:75:d7:62:e7:5b:e0:38:
2d:19:07:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaF8tWjmphlCcOdbEEmjs0jdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYxMDI3MDkzMzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTMwOTY5Njc0YTEyMDQ0N2QzYTVhNThmYmY4MTczOGE4NTViODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdPQpTY9RcaJVIN3vKfwzEJZwrks
wieWIr5ItCi0kOGlDzjmEE9pYxNpIKwUgb4tXO6PX+m2qEyQ2dWwIBnwKHkqW597
5Edr4sUsPJ4P7LAyncjoRHvEKPBL3X3HqzMvscuwMb0JvFDrX23GjjWGYSJslNwL
QsfRYEq3FoMOEhOEYFoeSAVCPlQPis9TB95KFLvnZcZVyb0suaGOOiJ8JCd4ko/x
0SuRg7BJM1NiiSBsfa3cSadeH3Ruy6V4FickXMNuBKOoNA5HOP8/rP9ANt2emIV/
A8iMWNMKqkiI0XkQCQ+rvMcOK1Nwm5qsi7pHx2lN9k1rIOU1gOVFn4c3LQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNEwlpZ0oSBEfTpaWPv4FzioVbiaMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvMFRDV2xuU2hJRVI5T2xwWS1fZ1hPS2hWdUpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQ9g
MA0GCSqGSIb3DQEBCwUAA4IBAQCVBdtASzBxj+JVYCZzI+q9RyuMDpHxE00UEe8j
2FrHbzbuRTBa95lw3JSTFRoKu4jc9DedMRZmJie21WlNeEGBFDxXAwHY8dJXOUEE
fGKx6wbU1HzGnYKihXhGR4++f5glKnEZDku+znC4u5nsz/dh5A9R0b1zXl++L8RQ
MD6p5yLmQjwTmcAo1mKJomOhxkjv1E80tsKcDwdi6IySlxPF4D4kYVxTonZC2j3F
jkNlIqoDk+OLmCkqLS9HjMnQl8UbXpzSs1ZMW0OSXvB2tTy55fy0xNG/8vZsTdjd
3p2XUSbEUkzn5XnccaIAkBkQ+XiF9z3X3nXXYudb4DgtGQeB
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:26 2026 by rpki-client