Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TuHDpbPd9ftIcdwFZczdgQgbayg.roa
File: TuHDpbPd9ftIcdwFZczdgQgbayg.roa (raw, json)
Hash identifier: oehzg7RbQGUMCs4bUZtG0LfRlP5iUExQU+oAEo7SSq4=
Subject key identifier: 4E:E1:C3:A5:B3:DD:F5:FB:48:71:DC:05:65:CC:DD:81:08:1B:6B:28
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A1830C8C14049884819DFFA4A3119E56C0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TuHDpbPd9ftIcdwFZczdgQgbayg.roa
Signing time: Wed 28 Oct 2026 15:06:39 +0000
ROA not before: Wed 28 Oct 2026 15:06:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218255
IP address blocks: 2a0c:b641:f90::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:0c:8c:14:04:98:84:81:9d:ff:a4:a3:11:9e:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 28 15:06:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ee1c3a5b3ddf5fb4871dc0565ccdd81081b6b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:32:ff:00:6f:44:17:ce:ea:2f:b8:2f:1a:
99:f9:74:76:f4:1e:d0:6a:0e:72:a9:d2:20:d3:77:
b3:fe:46:71:0d:11:25:58:61:40:1e:a2:59:70:86:
a8:bf:7f:da:6b:3f:31:18:08:43:ff:28:0d:46:d0:
1e:a0:2a:4c:6a:ec:56:f9:3d:97:c2:45:e4:97:83:
36:cb:5c:fb:9a:08:ef:e9:cd:f0:ab:41:b7:60:93:
28:0a:d7:37:17:b9:5e:c9:96:7b:b2:16:6d:fa:4f:
77:d2:23:76:1e:7b:db:03:2c:fc:55:95:33:15:5f:
5d:e0:d3:7f:1c:ee:a7:c7:e0:3a:6a:6e:f6:49:6f:
d4:bb:f6:33:12:80:dd:97:e8:80:b9:d7:df:94:ca:
34:ac:dd:cd:f2:d3:b0:3f:9a:15:01:44:8f:f7:4c:
25:ea:4b:6f:7f:27:95:df:b6:4c:21:1e:80:7b:d5:
54:80:29:e0:10:e3:42:eb:5f:99:75:f4:a6:a0:01:
b3:b8:72:f5:3a:5d:3e:f9:6d:ac:32:21:fa:64:b4:
88:0e:5b:64:a0:bc:2d:17:bf:f8:eb:95:88:51:e7:
6d:99:a1:ee:fd:cc:35:e4:24:c3:a4:86:0f:b6:48:
31:3a:3e:7a:55:a4:1a:29:68:c8:0d:01:77:28:d6:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E1:C3:A5:B3:DD:F5:FB:48:71:DC:05:65:CC:DD:81:08:1B:6B:28
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TuHDpbPd9ftIcdwFZczdgQgbayg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f90::/44
Signature Algorithm: sha256WithRSAEncryption
7d:47:77:14:17:83:db:dd:49:1c:73:61:8f:b8:f6:25:56:d7:
70:3e:48:f4:91:a0:2e:22:c2:61:21:2a:3f:be:4b:c2:1c:42:
5c:51:21:8f:8d:79:a0:90:89:e1:09:d2:5e:8e:22:27:a6:eb:
69:26:d8:89:52:7d:e6:a5:bb:0c:8b:d5:a0:52:d9:d1:47:e8:
f8:97:98:b0:ef:28:1f:50:4e:95:d1:a9:0c:8b:27:c0:fb:97:
c5:ad:46:25:9b:a7:17:bf:65:73:99:1c:09:ad:92:be:9b:be:
b6:61:95:56:66:71:d7:bb:8b:f0:e0:1d:27:a0:0b:1d:7f:41:
1d:61:0d:8c:1c:87:1c:18:21:bd:22:f6:21:02:7c:38:bc:ab:
47:a1:12:f6:c3:5a:98:af:56:97:fd:d2:92:f5:6d:32:9d:25:
fe:4f:1c:48:e9:8f:3d:43:98:da:b2:93:a2:e8:a0:d9:13:81:
dc:2b:5d:bb:00:26:5e:bd:57:43:de:09:cb:65:c2:4f:22:ae:
fd:53:0d:9a:cd:5f:5d:9b:aa:ee:df:fe:56:7d:7f:c7:81:ad:
ac:9a:65:5e:4e:3f:cd:e1:4a:d2:26:3c:d9:36:06:f2:fe:49:
2c:6a:a9:9e:5d:66:9d:e8:e7:04:e3:6c:63:e1:15:25:d5:17:
ec:81:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:36 2026 by rpki-client