Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hqWC-5YFFJJWIDdWup4rn1c6POg.roa
File: hqWC-5YFFJJWIDdWup4rn1c6POg.roa (raw, json)
Hash identifier: sXn0gYdqlqjK74enTkiVpr5lkoDrWQAx4JdbHK2kc18=
Subject key identifier: 86:A5:82:FB:96:05:14:92:56:20:37:56:BA:9E:2B:9F:57:3A:3C:E8
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019CBD8B954FF4E3778CC706F369AB3E2CAA
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hqWC-5YFFJJWIDdWup4rn1c6POg.roa
Signing time: Thu 05 Mar 2026 10:29:27 +0000
ROA not before: Thu 05 Mar 2026 10:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198603
IP address blocks: 2a0c:b641:a30::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:8b:95:4f:f4:e3:77:8c:c7:06:f3:69:ab:3e:2c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Mar 5 10:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86a582fb9605149256203756ba9e2b9f573a3ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:d0:fa:a2:85:2a:e9:5a:a0:2b:f9:3a:8a:
0d:8e:87:56:57:d7:fc:77:54:ac:2d:2b:23:48:3a:
12:65:91:33:eb:85:9f:21:0c:fd:a7:c5:9b:9a:cb:
0f:bc:d0:c3:8c:b9:b1:34:dd:d8:78:d1:bf:fa:66:
21:5d:65:73:81:f5:bf:7d:8e:dd:7d:e5:6c:fb:44:
e8:ba:e5:f2:4e:29:28:75:36:f3:72:73:1e:a3:c7:
f1:57:d4:60:66:3a:f2:50:5a:20:08:bf:62:bd:c1:
b6:b1:09:05:48:c1:da:a9:94:0d:ca:a1:db:2c:bb:
5f:0d:96:14:47:5e:1d:35:57:a9:5a:68:22:42:91:
fe:be:a8:6a:fd:e7:dc:17:3b:1f:a5:91:b6:2b:01:
7a:34:e5:55:07:24:30:36:88:21:0f:ad:6b:b2:da:
4d:ad:83:3e:99:7e:e6:83:2d:ba:83:a1:b3:9d:a4:
21:02:38:a1:cb:20:b0:31:1a:c4:18:c3:cb:1f:2b:
00:f1:41:83:42:a5:c5:da:a6:75:e4:4b:79:87:95:
14:61:fc:7b:e3:41:5b:10:3c:be:4f:80:27:ba:14:
a3:29:9a:fd:7c:be:b2:b4:b3:55:57:40:23:46:a1:
09:a4:5c:d6:94:d2:f1:05:56:49:36:8a:42:26:e1:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A5:82:FB:96:05:14:92:56:20:37:56:BA:9E:2B:9F:57:3A:3C:E8
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hqWC-5YFFJJWIDdWup4rn1c6POg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:a30::/44
Signature Algorithm: sha256WithRSAEncryption
3e:08:42:90:b8:87:0f:c4:87:19:62:63:d8:88:b0:d9:b2:51:
c6:ce:e0:1a:5a:f7:4f:77:ed:8f:7c:c4:68:98:32:52:8a:f6:
93:71:38:6a:07:af:0e:fb:5c:5f:2b:f1:e5:4e:99:fe:33:97:
23:e1:bb:e7:c0:dc:29:fe:75:7a:b7:c3:3f:bb:5e:a0:a4:04:
df:5f:41:a7:eb:70:81:87:6b:5d:17:fc:a8:2a:b0:06:4d:b6:
79:6b:7b:54:04:ca:e1:a1:f0:22:3a:34:fb:a9:f5:fd:09:1c:
12:d8:e2:d9:8d:51:c9:04:6d:80:cc:17:67:07:bb:7d:dd:c9:
d5:7e:13:95:87:c5:6c:bb:c5:5a:0b:fe:aa:11:e4:93:06:01:
3f:76:50:b3:5c:5e:1c:a0:03:e0:9b:13:d2:c4:bd:a3:b3:f1:
75:75:a5:8b:aa:24:91:9d:78:17:46:08:09:aa:2c:05:4d:39:
1d:b4:43:af:7b:18:e1:08:d4:2d:de:fd:91:bd:69:3c:d8:cf:
ee:12:02:15:dd:6f:95:9a:1d:a9:56:bb:eb:76:f0:03:3e:5c:
b5:1d:d6:56:6b:88:1e:9c:0e:4f:2c:a6:74:18:6a:31:24:b2:
d5:24:20:06:30:ad:64:42:fd:e7:f0:53:bb:3d:d6:f0:7b:50:
63:28:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:17 2026 by rpki-client