Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AkKkbw6CFYvDBuUlmjOPhlZSaTo.roa
File: AkKkbw6CFYvDBuUlmjOPhlZSaTo.roa (raw, json)
Hash identifier: HBpbmQIr/rfrFPeTr2h4kYYES9iUu82BSI0X5ZV7iHM=
Subject key identifier: 02:42:A4:6F:0E:82:15:8B:C3:06:E5:25:9A:33:8F:86:56:52:69:3A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A0C844CFF28109FF54AFF53019B064D34C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AkKkbw6CFYvDBuUlmjOPhlZSaTo.roa
Signing time: Tue 22 Sep 2026 08:39:07 +0000
ROA not before: Tue 22 Sep 2026 08:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50555
IP address blocks: 2a0c:b641:2e0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:44:cf:f2:81:09:ff:54:af:f5:30:19:b0:64:d3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 22 08:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0242a46f0e82158bc306e5259a338f865652693a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:5c:c3:17:ee:c9:a5:bd:31:8f:70:b3:87:
55:9b:29:36:a2:96:3b:64:0b:78:6c:f8:8d:bb:6f:
30:79:f5:0c:7e:6b:4b:a8:23:32:5c:45:2b:5a:92:
d1:39:7a:a2:d7:dd:dd:2d:ba:18:4b:30:8a:b1:7e:
8a:e8:45:f1:33:24:ef:ac:01:a5:8b:c9:42:05:ab:
f2:a4:57:cf:ae:31:58:89:3e:8e:c4:5a:51:2b:0c:
d3:76:e9:03:ef:e5:c7:f6:d3:49:dc:b4:74:aa:83:
4b:c0:b5:f5:df:f3:4f:e8:48:5e:cc:4f:df:60:12:
34:8c:8a:50:ae:58:61:56:16:fe:7b:b1:bd:32:18:
9c:c4:28:f4:1a:9d:26:97:06:c3:2d:d5:18:1d:56:
d5:1b:78:ed:02:8b:0a:45:d0:be:c0:bc:f9:23:59:
9e:67:75:91:28:cb:00:24:60:30:31:ed:34:3f:33:
80:07:df:d4:16:f9:84:57:71:42:8f:99:3d:6a:c2:
66:4d:32:f7:47:df:77:0e:58:da:65:9f:0f:70:01:
70:3a:55:14:c7:90:8f:db:0a:85:b2:65:a7:08:1e:
cb:19:6a:2f:a9:c6:69:8b:9e:ae:62:2e:c5:3e:fe:
a6:6d:b7:70:5c:26:f4:c6:f4:04:aa:13:1c:89:fe:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:42:A4:6F:0E:82:15:8B:C3:06:E5:25:9A:33:8F:86:56:52:69:3A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AkKkbw6CFYvDBuUlmjOPhlZSaTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:2e0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:11:e7:cf:6a:e5:e1:06:08:fa:17:7b:58:95:55:53:fd:70:
7e:ad:cf:f2:65:ee:ba:16:52:c8:88:af:f8:62:f9:23:ab:12:
a4:73:45:21:d3:00:63:d2:2f:b8:ed:08:5d:02:cd:b0:97:c9:
6b:71:b7:e1:a1:46:60:5c:87:90:7e:25:0c:c6:cf:93:06:0c:
42:4e:f2:df:9b:7c:b8:cc:de:73:24:aa:f2:70:dd:20:dc:d6:
65:aa:57:59:dd:54:66:60:c5:c1:47:30:ec:ac:38:5a:29:d7:
1c:34:46:e3:24:e2:3c:66:b7:65:7e:10:13:5b:ae:2b:bb:9c:
bd:b1:b7:fe:34:e1:be:0f:da:40:bf:f5:10:ef:7b:1b:9b:ce:
c3:e6:ae:15:34:ed:3f:f0:07:7c:05:66:87:af:80:4b:87:4e:
21:67:01:89:61:66:0c:74:d2:f3:e6:d9:1a:c9:37:73:26:ef:
8e:27:05:8a:24:44:4d:35:c6:6d:ec:6f:67:5f:7a:15:9c:fd:
95:4c:70:aa:2b:64:fb:a6:12:56:71:f1:2d:47:73:dc:fd:05:
9a:e9:0b:b1:81:bf:ec:65:4b:97:8d:7c:0a:cc:8a:55:21:11:
bf:b3:6c:59:2d:71:c2:bc:c2:36:24:9c:93:7d:ce:78:c3:65:
28:d2:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:29:45 2026 by rpki-client