Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Il6qhniKxprhtHRFlGgo9SIIyOw.roa
File: Il6qhniKxprhtHRFlGgo9SIIyOw.roa (raw, json)
Hash identifier: mdIbM14sNGW6dJAoazr+O8z90bFqmiKVb9eSnJSx/aA=
Subject key identifier: 22:5E:AA:86:78:8A:C6:9A:E1:B4:74:45:94:68:28:F5:22:08:C8:EC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A1A78ADEF97921DF9C2678D97F76F5F7D6
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Il6qhniKxprhtHRFlGgo9SIIyOw.roa
Signing time: Wed 04 Nov 2026 17:10:58 +0000
ROA not before: Wed 04 Nov 2026 17:10:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218634
IP address blocks: 2a0c:b641:ff0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:8a:de:f9:79:21:df:9c:26:78:d9:7f:76:f5:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 4 17:10:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=225eaa86788ac69ae1b47445946828f52208c8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4f:ad:a1:f1:00:d9:24:34:e4:06:6d:45:38:
78:3a:99:83:e9:af:d1:0a:13:f7:3d:94:81:39:45:
72:fe:96:17:fa:9d:f4:96:6a:e3:66:29:26:39:48:
50:16:c6:17:2c:21:35:c4:4b:8e:6c:3f:25:c3:3d:
b2:90:aa:cd:5b:fd:64:7f:bc:e5:3a:f3:b1:db:5d:
58:85:c8:d4:e8:43:a1:e6:2e:7e:c8:72:87:19:10:
e4:9b:bb:e6:37:08:7b:2e:1a:5e:8b:b3:10:56:e6:
88:85:0f:f2:19:ec:00:41:98:c6:c3:1d:a4:71:8d:
ca:47:99:6f:4a:e1:aa:66:8d:47:c3:03:90:b8:0e:
07:ad:54:ca:9e:aa:0c:2c:11:fe:7d:7d:2d:b1:ac:
bf:77:de:2b:a4:54:19:c8:7a:33:7a:24:86:ca:be:
02:75:62:4e:bf:2a:08:ae:6a:9d:81:68:31:bc:a6:
91:20:16:f3:95:e7:89:14:60:1e:24:18:01:9b:c7:
6d:79:14:b7:a6:2d:3d:9a:ec:3f:65:8f:50:17:31:
01:34:28:98:ea:62:9d:db:59:85:db:e0:ef:91:76:
0f:18:a0:50:4a:82:31:54:e0:b6:2c:5d:64:f1:4a:
fe:cf:7f:f5:81:bc:c4:df:95:b5:8e:c6:60:4c:a6:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5E:AA:86:78:8A:C6:9A:E1:B4:74:45:94:68:28:F5:22:08:C8:EC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Il6qhniKxprhtHRFlGgo9SIIyOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ff0::/44
Signature Algorithm: sha256WithRSAEncryption
21:48:3f:a3:60:81:cf:d6:b0:d6:5b:99:c6:d8:52:ac:5f:8d:
c8:96:d5:83:2c:ea:f0:30:1d:f4:bd:8a:da:9b:a2:f0:62:9f:
fa:d7:43:e3:54:f8:b4:4e:7f:1e:46:e6:e7:c8:ff:6d:44:5e:
06:c2:92:c0:80:63:8f:03:5d:60:0b:9a:90:41:f8:21:d7:6d:
19:b4:19:36:c2:96:f2:ba:08:c1:e6:aa:92:36:65:a4:04:69:
21:f2:14:65:96:1c:33:fa:ae:dd:4d:f5:5b:9a:0f:17:ea:dd:
d9:0e:d0:8a:b2:e3:28:28:4c:89:f8:33:ce:32:c6:d4:03:89:
40:c7:51:f9:74:2d:2b:a5:a9:fe:8d:53:28:78:2c:b0:af:46:
43:8d:6b:75:79:2f:04:7c:f4:4a:0d:3d:16:34:47:98:a4:1e:
d1:7a:ef:11:95:04:10:02:03:fa:b6:be:bf:68:17:84:81:84:
50:0a:4e:ca:10:49:2d:f5:ed:13:25:86:26:97:e6:27:0c:3b:
d9:ee:05:6b:12:72:8b:0a:89:30:6b:d1:b1:e4:f9:ab:a8:8f:
0e:04:b7:f5:21:2f:56:3b:78:70:18:52:5e:d7:fc:33:e8:44:
0e:fc:6a:1e:18:ce:73:f9:ec:f8:b4:71:ad:96:24:40:79:71:
39:5f:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:47 2026 by rpki-client