Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_87pPKYp5tGJkI1XFYzBja6aKZg.roa
File: _87pPKYp5tGJkI1XFYzBja6aKZg.roa (raw, json)
Hash identifier: EJ2uEUGUOFz3LxhM8MlTNYBFvjrU7JIX4GugFu4JB/E=
Subject key identifier: FF:CE:E9:3C:A6:29:E6:D1:89:90:8D:57:15:8C:C1:8D:AE:9A:29:98
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A15E9EBCB89BEEC7A0D2F0D03EF84797EF
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_87pPKYp5tGJkI1XFYzBja6aKZg.roa
Signing time: Wed 21 Oct 2026 13:20:23 +0000
ROA not before: Wed 21 Oct 2026 13:20:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218337
IP address blocks: 2a0c:b641:f40::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:9e:bc:b8:9b:ee:c7:a0:d2:f0:d0:3e:f8:47:97:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 21 13:20:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffcee93ca629e6d189908d57158cc18dae9a2998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:1c:97:8d:09:e0:00:44:a3:dc:91:fd:2b:
d0:f0:66:3d:a7:c5:d8:c9:92:69:fa:c5:0a:5f:85:
0d:df:a7:cb:3f:54:55:ce:3d:80:92:7c:51:4d:17:
64:71:30:6e:e2:44:5f:c3:2f:26:fd:75:7c:1f:6a:
8e:26:40:97:de:d2:3e:b8:5b:44:61:6a:b9:fe:e8:
14:3e:d3:3c:00:09:c3:b2:d8:23:f8:70:5c:86:3d:
5a:2c:b8:dc:69:5c:17:a4:3d:62:ff:77:f2:04:d4:
c3:cf:6a:b6:ba:3d:36:93:8f:8a:e0:a5:3a:5c:62:
8b:73:cb:c7:8e:6a:02:eb:9f:c7:b0:7d:82:02:33:
af:d5:cf:b6:94:ce:02:c2:96:5b:a2:3d:59:0f:5e:
5a:54:75:3c:55:ad:c9:7a:a5:ee:e6:f5:de:76:59:
a3:af:70:2d:d6:e1:de:20:a6:f6:6c:51:27:6e:55:
b4:02:d9:5e:68:8f:6b:c5:12:44:c0:e1:17:f5:f6:
6e:b0:14:06:7f:c1:34:f6:80:35:45:0e:78:f6:97:
30:66:0e:72:8e:b5:e8:c0:94:2b:5e:88:42:3f:1a:
53:3a:aa:76:45:24:99:38:4f:38:af:59:3a:8b:d4:
d4:e6:53:a8:5c:02:26:35:fb:d6:cb:3a:d0:68:96:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CE:E9:3C:A6:29:E6:D1:89:90:8D:57:15:8C:C1:8D:AE:9A:29:98
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_87pPKYp5tGJkI1XFYzBja6aKZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f40::/44
Signature Algorithm: sha256WithRSAEncryption
30:07:54:67:9a:b0:ae:57:71:26:95:37:95:a9:6b:ad:2d:10:
53:c5:66:15:91:e6:db:b6:ca:9b:1c:a1:cd:ab:2b:9d:4b:7e:
d7:a3:60:84:70:f1:ca:6b:31:40:d8:ea:eb:ac:24:f3:64:1b:
06:9b:bc:f8:70:74:cd:62:b4:dd:52:f0:1a:39:b3:f3:8a:90:
25:f7:72:d7:61:45:9d:c4:86:86:0c:43:11:1b:1c:27:36:18:
02:7d:ed:c5:cc:c7:5b:1e:b0:d2:3c:0a:f2:e0:17:ba:1e:04:
df:a4:f2:6b:46:07:49:87:58:12:d3:e2:bb:ab:e1:47:0b:a9:
9f:ca:8d:b4:e1:c8:03:a4:a4:99:cc:6c:68:fd:21:40:3a:0e:
47:f2:dc:46:82:65:1f:f5:7e:af:66:e5:89:43:11:42:7e:26:
73:3f:d8:48:9d:bd:1a:13:72:81:7d:c3:37:cf:a7:c7:e7:f6:
81:ce:e5:8b:88:ed:40:d8:8a:9f:b4:c4:ff:6e:58:76:70:d0:
95:e7:9d:51:03:13:4f:c6:9b:46:66:fc:31:f5:94:de:ca:1e:
20:86:5f:0d:ca:48:12:a4:e5:c9:4b:ba:d4:ec:36:44:65:ff:
cf:90:de:a8:d0:f3:8a:34:56:35:08:47:26:1c:93:91:38:85:
0f:ce:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:24 2026 by rpki-client