Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/O32wQ6f2pHgDgfkXmnpMMiLt_vc.roa
File: O32wQ6f2pHgDgfkXmnpMMiLt_vc.roa (raw, json)
Hash identifier: 2Wk/3vHgIlWgJDhZoYYbTkAA0jLB+JEMZRlxlEntAx0=
Subject key identifier: 3B:7D:B0:43:A7:F6:A4:78:03:81:F9:17:9A:7A:4C:32:22:ED:FE:F7
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A1C1150ACD1A0ECF6D298E24D9853DF6CF
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/O32wQ6f2pHgDgfkXmnpMMiLt_vc.roa
Signing time: Mon 09 Nov 2026 16:12:23 +0000
ROA not before: Mon 09 Nov 2026 16:12:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218129
IP address blocks: 2a0c:b641:1000::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:15:0a:cd:1a:0e:cf:6d:29:8e:24:d9:85:3d:f6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 9 16:12:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b7db043a7f6a4780381f9179a7a4c3222edfef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:cc:e1:ab:07:9c:2c:e5:86:f0:c5:79:7e:
7e:93:18:e8:c9:6c:ec:cd:08:ad:c2:28:62:8a:35:
b5:e2:f1:27:0f:52:3d:f3:d6:95:9c:23:ec:89:c1:
02:ec:9a:e4:4b:00:aa:31:9f:65:67:1f:16:9c:9c:
ff:c6:8a:7d:b4:bf:d5:ec:d1:f1:f4:9f:42:70:4e:
b9:9b:26:85:ee:31:77:19:3d:57:07:0f:da:d5:9a:
f0:ea:2d:54:57:ea:0b:c4:98:fd:7e:f1:2e:65:b7:
14:f9:db:42:a1:8d:84:4a:a9:78:24:48:f4:92:eb:
a6:1c:90:06:b3:86:61:0e:02:3b:7c:94:f0:78:31:
c5:13:dd:45:db:8e:6b:da:78:64:b6:ff:b8:b4:cb:
dc:a4:01:22:d6:e6:ad:cd:0c:b6:b2:1f:1c:bc:6a:
7b:44:fa:12:df:9d:f9:0f:e6:f3:5b:27:cf:89:cf:
eb:e7:12:11:98:df:31:07:e7:a7:d4:c9:fd:46:a8:
cf:8e:c0:5c:aa:da:e3:fa:68:a2:90:43:81:e1:6a:
ef:18:35:b1:57:1b:84:bb:4d:2f:f7:f7:b5:78:1f:
ab:42:bb:22:0b:22:59:64:25:c2:1e:a7:64:0d:12:
ee:8c:c6:5b:a3:98:03:4f:d5:c2:1a:51:d4:b0:ef:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7D:B0:43:A7:F6:A4:78:03:81:F9:17:9A:7A:4C:32:22:ED:FE:F7
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/O32wQ6f2pHgDgfkXmnpMMiLt_vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:1000::/44
Signature Algorithm: sha256WithRSAEncryption
02:00:cc:24:17:0a:0f:a7:74:99:26:ba:ce:80:26:92:47:7c:
51:25:a3:e2:8c:e9:30:a0:63:bf:db:24:2f:46:a0:79:1e:1e:
34:29:77:9e:eb:d3:4b:fd:8f:4e:9e:31:19:0e:61:59:47:c7:
74:a1:0a:a8:e0:64:27:a7:86:5b:65:e9:20:d8:ba:ee:6d:f7:
05:12:e2:a2:96:67:f1:28:fb:40:66:df:60:a6:c0:ad:e0:19:
b6:fe:ac:f7:45:56:06:ed:36:29:cf:92:45:30:a4:7d:97:e1:
72:18:7c:f8:ec:fe:37:f3:1e:ea:aa:5f:25:5f:fe:7f:bc:29:
40:7f:cc:40:7a:f5:ec:b7:9b:5f:3f:68:16:be:6c:51:43:31:
8a:af:f0:b0:d4:b4:05:90:8b:17:4c:76:32:1e:f8:ca:52:cc:
0d:72:ed:32:4c:20:bb:5f:96:5a:06:60:fb:a2:af:1a:76:7d:
9e:67:70:70:16:6d:a0:a3:0a:47:ba:e9:51:99:d1:e8:25:cc:
af:03:b2:aa:04:59:ed:4b:82:c0:5d:29:05:a8:fb:03:c2:7a:
c4:71:0f:4e:25:7d:a3:84:7e:44:58:e7:0a:0d:95:64:55:0e:
82:00:a5:13:c2:f5:21:6e:f9:99:6c:b1:f5:09:63:8c:c3:17:
ac:d3:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:44 2026 by rpki-client