Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EStQpihyCoIRe4k9BNtriIZ6-4g.roa
File: EStQpihyCoIRe4k9BNtriIZ6-4g.roa (raw, json)
Hash identifier: HQWLpwjarIoS4KObCHv6e1ftM4ojYlsnPzUYaJwE4u0=
Subject key identifier: 11:2B:50:A6:28:72:0A:82:11:7B:89:3D:04:DB:6B:88:86:7A:FB:88
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A1BFD930A1C6A2C2A2E4507A3ED8F97229
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EStQpihyCoIRe4k9BNtriIZ6-4g.roa
Signing time: Mon 09 Nov 2026 10:27:24 +0000
ROA not before: Mon 09 Nov 2026 10:27:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218248
IP address blocks: 2a0c:b641:fa0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:d9:30:a1:c6:a2:c2:a2:e4:50:7a:3e:d8:f9:72:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 9 10:27:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=112b50a628720a82117b893d04db6b88867afb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:0c:c7:d7:4e:bf:e1:bc:53:3f:03:96:3a:
97:7a:bd:6f:6e:f0:a5:7e:74:e5:b6:b6:19:30:a0:
1e:2d:b8:6f:67:f6:ef:82:33:2d:53:9e:d0:f7:0f:
9a:15:d4:71:e9:bf:85:6c:c3:de:4a:9a:78:ef:9d:
d6:23:f2:97:cf:94:3f:4c:60:5c:73:78:2a:18:eb:
10:b6:5d:e9:1a:d1:25:8e:6d:2d:b1:3e:e0:fb:df:
94:ff:8c:2b:0b:5c:2d:71:2b:71:53:05:a9:e5:45:
a2:f1:ec:64:77:3a:aa:47:04:4f:cb:b8:60:e9:eb:
46:d6:02:f8:4f:bd:6d:1b:ac:70:73:a5:b3:3f:fc:
88:50:82:87:16:2c:48:4a:85:98:28:40:2e:1a:1d:
d2:8c:58:05:2c:09:6d:e7:40:73:88:fd:7a:cb:80:
99:55:93:f6:a7:9b:4c:ea:0e:c4:6f:c3:86:0d:e7:
e9:66:6d:b3:f9:22:11:22:01:03:09:b3:a2:79:7b:
00:c1:41:69:4b:4c:c6:92:e2:77:c8:94:48:de:86:
75:76:6b:d9:e0:df:e5:03:5c:00:67:fb:ef:cb:20:
8b:e4:63:29:85:69:bd:0e:11:c6:74:e0:52:0c:4d:
3c:ad:bd:5e:7c:c7:a9:aa:e3:27:64:3e:8a:e0:bb:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:50:A6:28:72:0A:82:11:7B:89:3D:04:DB:6B:88:86:7A:FB:88
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EStQpihyCoIRe4k9BNtriIZ6-4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:fa0::/44
Signature Algorithm: sha256WithRSAEncryption
71:e5:ad:d1:0a:5c:c7:0a:b5:49:4a:1f:b7:aa:9b:74:85:e3:
b1:9a:af:a8:d7:e3:f7:7d:b1:b3:d3:d8:39:ac:b3:b3:4c:41:
0a:ff:50:bb:e0:74:11:25:c2:f7:8b:09:47:db:18:e3:89:c2:
79:d8:3e:d6:44:6d:a3:6a:4f:68:61:74:fc:ea:0d:36:60:9f:
bd:f4:04:55:93:39:15:51:8c:81:90:a2:24:be:2e:a8:c9:2d:
b5:3f:52:2e:bb:c4:43:12:30:f4:ad:cf:64:2e:06:f6:37:9a:
6c:41:86:d5:da:78:15:9f:c3:5a:99:39:3a:8a:76:8c:8d:55:
b2:de:eb:a3:7f:46:18:98:76:79:c5:ee:f0:1c:6e:a7:93:fb:
37:d7:db:3f:92:c1:dc:c0:2c:78:62:ed:3b:7c:4b:31:bb:17:
c6:46:08:2b:0e:4b:5b:dd:6a:12:a0:26:0b:63:2c:88:b5:e9:
7b:07:bd:b8:69:f9:67:9f:ae:b5:18:11:3e:05:e2:60:5f:4c:
7a:df:c6:3b:44:cd:45:d7:75:c9:92:96:1a:fd:03:4b:aa:c9:
95:a5:33:e6:56:da:a0:72:ce:f1:ea:04:97:e6:1b:97:18:b7:
73:40:4d:04:68:0d:a2:15:c0:06:e8:8f:20:01:1a:6a:66:fb:
c2:55:1f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:44 2026 by rpki-client