Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6DxxJfmpZqfcDTe2MYEW7xm8rG8.roa
File: 6DxxJfmpZqfcDTe2MYEW7xm8rG8.roa (raw, json)
Hash identifier: rQMSNDrWuy5bdOI72c/7u0FCLyXKVKuDht2siLdOmXg=
Subject key identifier: E8:3C:71:25:F9:A9:66:A7:DC:0D:37:B6:31:81:16:EF:19:BC:AC:6F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019CD2FCD7813EBD22016823170082F45F5A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6DxxJfmpZqfcDTe2MYEW7xm8rG8.roa
Signing time: Mon 09 Mar 2026 14:25:11 +0000
ROA not before: Mon 09 Mar 2026 14:25:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200262
IP address blocks: 2a0c:b641:a50::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:fc:d7:81:3e:bd:22:01:68:23:17:00:82:f4:5f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Mar 9 14:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e83c7125f9a966a7dc0d37b6318116ef19bcac6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:36:e9:bc:a6:61:a0:12:0d:d7:cc:57:e7:
e4:52:ec:e9:d3:3f:0d:e3:fe:6b:aa:4b:23:a4:bd:
c8:0c:1a:33:9f:c4:3c:1e:4d:18:b6:ad:f2:12:06:
84:41:d0:52:34:3a:1b:62:db:9f:1e:c4:31:13:0b:
5b:5c:b4:7e:3b:c7:b3:79:82:b0:90:67:ec:e5:61:
0b:5f:f7:8b:b6:f2:b4:6a:32:39:b8:24:00:64:54:
95:c8:dc:a5:e5:54:29:63:fa:f9:c8:7c:fb:78:79:
9e:54:c7:a3:93:76:c2:86:9a:a5:b5:a3:f5:e2:79:
2a:00:23:cf:bc:4e:b7:ce:46:9c:e7:b4:1b:20:e5:
03:32:25:57:e0:d1:f4:f4:cd:80:6d:94:5a:7d:4d:
17:16:c9:dd:19:17:b7:dd:32:b4:21:3a:0c:46:27:
33:5f:61:48:4e:cf:e4:99:5a:b4:4a:30:5e:b1:4c:
18:da:05:c2:00:cb:99:14:33:f6:6a:7a:6b:56:1d:
cd:61:65:41:35:8c:3d:3a:bf:c9:b7:b4:74:dc:3d:
8e:3b:f7:02:63:55:af:0e:cd:5b:aa:7b:6f:2d:2c:
63:7c:1e:80:0c:a2:b5:85:ec:73:b0:1f:f8:38:f4:
75:33:18:df:15:80:27:0f:c0:aa:43:3b:0b:a2:5f:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3C:71:25:F9:A9:66:A7:DC:0D:37:B6:31:81:16:EF:19:BC:AC:6F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6DxxJfmpZqfcDTe2MYEW7xm8rG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:a50::/44
Signature Algorithm: sha256WithRSAEncryption
39:3f:12:85:09:5e:a1:3c:51:b8:4b:1f:e8:71:18:0d:52:e0:
04:70:3c:e9:dd:92:20:6a:18:f1:50:f7:62:9d:60:f1:0d:e2:
5e:eb:4d:99:d5:43:51:e5:ac:2b:70:bd:15:b0:1c:bf:d2:57:
82:a3:9d:fc:d6:e1:02:63:79:28:34:47:28:3e:2e:b6:84:a7:
39:f2:72:31:c8:e7:cf:1b:32:9f:53:44:92:84:d5:58:7c:78:
bc:e2:26:c9:7f:97:0c:e3:9b:ce:0b:06:52:c8:cb:43:ba:97:
d3:3c:09:1c:99:60:c2:1b:da:5a:2c:51:3d:c0:28:a7:64:d1:
e6:2d:75:d8:65:3e:e2:d9:16:2c:66:bd:a6:45:b2:e9:3c:33:
a4:d4:52:01:0e:8d:e0:b8:04:f0:fd:50:85:a4:26:12:3a:41:
fd:27:f5:b4:93:61:4d:15:43:8e:3a:c5:98:1e:95:b4:c7:82:
f7:a7:37:18:26:62:13:3b:bd:91:58:eb:ee:f8:3b:19:63:dc:
53:e1:61:c9:9c:b8:88:a3:8e:e5:ed:98:c6:d7:a7:b5:55:96:
ea:3d:0e:6a:38:49:78:6f:36:6a:f9:51:b8:76:e0:5f:e0:c0:
fc:61:31:14:00:cf:6c:d4:91:ed:58:57:78:4f:76:06:f8:53:
f2:e2:8f:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZzS/NeBPr0iAWgjFwCC9F9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYwMzA5MTQyNTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODNjNzEyNWY5YTk2NmE3ZGMwZDM3YjYzMTgxMTZlZjE5YmNhYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTc26bymYaASDdfMV+fkUuzp0z8N
4/5rqksjpL3IDBozn8Q8Hk0Ytq3yEgaEQdBSNDobYtufHsQxEwtbXLR+O8ezeYKw
kGfs5WELX/eLtvK0ajI5uCQAZFSVyNyl5VQpY/r5yHz7eHmeVMejk3bChpqltaP1
4nkqACPPvE63zkac57QbIOUDMiVX4NH09M2AbZRafU0XFsndGRe33TK0IToMRicz
X2FITs/kmVq0SjBesUwY2gXCAMuZFDP2anprVh3NYWVBNYw9Or/Jt7R03D2OO/cC
Y1WvDs1bqntvLSxjfB6ADKK1hexzsB/4OPR1MxjfFYAnD8CqQzsLol84RwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOg8cSX5qWan3A03tjGBFu8ZvKxvMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvNkR4eEpmbXBacWZjRFRlMk1ZRVc3eG04ckc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQpQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA5PxKFCV6hPFG4Sx/ocRgNUuAEcDzp3ZIgahjx
UPdinWDxDeJe602Z1UNR5awrcL0VsBy/0leCo5381uECY3koNEcoPi62hKc58nIx
yOfPGzKfU0SShNVYfHi84ibJf5cM45vOCwZSyMtDupfTPAkcmWDCG9paLFE9wCin
ZNHmLXXYZT7i2RYsZr2mRbLpPDOk1FIBDo3guATw/VCFpCYSOkH9J/W0k2FNFUOO
OsWYHpW0x4L3pzcYJmITO72RWOvu+DsZY9xT4WHJnLiIo47l7ZjG16e1VZbqPQ5q
OEl4bzZq+VG4duBf4MD8YTEUAM9s1JHtWFd4T3YG+FPy4o+r
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:48 2026 by rpki-client