Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AlXrPsw0ZA57O8ydZ7DpCC94Jgk.roa
File: AlXrPsw0ZA57O8ydZ7DpCC94Jgk.roa (raw, json)
Hash identifier: PHgZAuGcyNyhIFjNu/90ukE84H3HNbAb6s1itJqRrxo=
Subject key identifier: 02:55:EB:3E:CC:34:64:0E:7B:3B:CC:9D:67:B0:E9:08:2F:78:26:09
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A0CE993D4E23387AF007F8CE83F1C63066
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AlXrPsw0ZA57O8ydZ7DpCC94Jgk.roa
Signing time: Wed 23 Sep 2026 14:09:04 +0000
ROA not before: Wed 23 Sep 2026 14:09:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218606
IP address blocks: 2a0c:b641:a00::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:99:3d:4e:23:38:7a:f0:07:f8:ce:83:f1:c6:30:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 23 14:09:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0255eb3ecc34640e7b3bcc9d67b0e9082f782609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:0d:4d:94:e8:49:e0:44:16:49:e6:9f:da:
7c:96:f6:2a:ee:eb:1e:e0:94:5d:99:0e:ab:fe:5b:
63:e6:89:bd:47:89:60:fa:40:09:04:fc:04:4a:f0:
22:22:99:e8:9e:12:70:98:e0:04:17:0a:ad:f8:a8:
fe:b6:43:16:de:65:39:01:05:04:7d:51:80:13:3d:
05:c0:87:b4:9f:5a:04:51:a1:2d:58:a3:7d:2f:90:
ce:60:09:d6:12:e8:0b:18:60:ff:3c:fd:8e:42:1b:
90:e4:56:55:45:14:25:ed:7f:c3:1c:33:35:a0:48:
8e:26:7a:a8:6c:e0:7d:0c:d9:57:64:f5:02:52:b3:
f3:2b:a1:c0:ef:81:12:c4:e8:6c:17:d5:8b:65:71:
a0:83:37:13:ea:6b:fd:9a:2b:6f:e1:99:88:ea:ed:
e9:c7:52:e0:6d:62:ce:d5:f3:13:56:af:3a:77:df:
8b:f5:5d:ff:ae:16:a3:0b:4b:c1:12:4d:05:c9:e4:
32:d0:e0:56:dc:2f:66:81:e7:93:77:a3:0e:7b:2a:
cb:ac:b4:ff:15:cc:7c:48:81:b4:32:a5:a9:60:92:
32:93:eb:64:39:ce:6f:e2:20:00:8a:83:dc:4f:3e:
7b:9f:9f:c6:0f:07:02:c0:2c:3f:7f:02:58:c6:80:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:EB:3E:CC:34:64:0E:7B:3B:CC:9D:67:B0:E9:08:2F:78:26:09
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AlXrPsw0ZA57O8ydZ7DpCC94Jgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:a00::/44
Signature Algorithm: sha256WithRSAEncryption
26:16:e3:03:8c:14:6f:60:ba:8a:a7:1d:e2:e6:3e:bb:1a:cb:
bc:09:26:84:b1:d3:49:1e:20:d5:18:f0:db:2a:de:29:54:26:
df:4f:1b:e4:6e:9c:ff:fd:30:8f:57:ea:7c:61:a4:cf:63:49:
bb:77:77:56:40:cb:2d:c3:c1:02:7f:dc:e5:3e:cc:ed:1a:eb:
99:3f:69:e6:3d:e8:16:fa:08:86:3f:23:ce:30:c7:9c:2d:b0:
79:ba:d1:70:f9:78:51:37:62:dd:d0:85:1b:dc:fe:f4:03:4a:
e1:ed:7c:3e:7d:7a:9e:21:ec:c5:75:c8:22:c1:80:90:13:a0:
2d:a6:d8:06:b4:79:2a:dc:23:6a:86:9f:11:41:f1:60:21:ef:
50:51:d5:d0:47:3c:5d:18:92:a0:2d:da:89:04:95:96:66:1d:
80:75:89:fd:7b:89:cd:22:77:33:c4:1d:77:47:12:0d:ef:f7:
0e:bb:9c:78:e9:dd:0f:b6:35:d1:30:21:5e:66:cf:31:f0:ee:
2d:38:c0:66:cc:d2:d9:30:2e:54:a6:e3:24:e4:f5:70:5c:ce:
45:e9:5a:c5:52:9b:51:9e:28:81:f0:15:6f:07:ed:ad:58:85:
3b:c9:27:7a:96:c5:95:a6:c1:ce:60:33:4c:85:7f:0e:bc:7d:
85:66:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:38 2026 by rpki-client