Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/i581VhySh1u3u7HquocXO0opo5A.roa
File: i581VhySh1u3u7HquocXO0opo5A.roa (raw, json)
Hash identifier: h2woA6lJXGxyJt7hDZI7RuYDkUU7sdSnFtHp1qjUN6o=
Subject key identifier: 8B:9F:35:56:1C:92:87:5B:B7:BB:B1:EA:BA:87:17:3B:4A:29:A3:90
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019E06C1B23D7E307EB77DBFA9CF6CF06B57
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/i581VhySh1u3u7HquocXO0opo5A.roa
Signing time: Fri 08 May 2026 08:43:37 +0000
ROA not before: Fri 08 May 2026 08:43:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197676
IP address blocks: 2a0c:b641:860::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:c1:b2:3d:7e:30:7e:b7:7d:bf:a9:cf:6c:f0:6b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 8 08:43:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b9f35561c92875bb7bbb1eaba87173b4a29a390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:10:f5:98:fd:26:2a:f5:cc:c9:e5:b3:e9:
fe:1d:59:d0:4a:f3:19:c0:d5:d3:f3:c4:31:77:f3:
d7:44:75:9c:1a:b2:41:c0:a7:2b:9e:9d:6d:fe:19:
58:a3:9c:f3:d6:18:53:4b:c9:a9:0d:00:0a:74:3b:
a6:32:99:87:13:33:98:8d:08:88:62:99:e3:ce:55:
c8:ff:ab:df:dd:d6:e4:41:6f:ff:c3:cb:ef:06:b7:
77:59:21:3e:4a:32:eb:19:ae:07:8f:b3:01:3e:4d:
60:8d:53:d5:2e:38:29:9b:ed:11:6d:bd:27:eb:38:
59:48:80:1b:23:a1:1b:1c:cf:86:25:61:8a:52:d3:
57:00:b7:93:6b:57:3a:0f:c5:27:e5:e9:b4:a4:2a:
66:6d:af:80:b0:b6:40:7e:79:2d:be:7e:02:80:98:
ee:28:dc:58:35:28:7c:41:9e:9d:09:a6:44:7d:9a:
05:4a:54:75:76:66:fd:50:55:56:95:0f:35:28:22:
44:cb:e6:bc:ec:e3:6f:3b:7b:e7:36:9a:07:a5:8f:
81:8e:bf:86:bc:c5:de:d1:60:72:02:2f:32:89:fd:
de:d3:d7:4c:1f:9b:e0:37:bf:67:f1:3f:81:d9:7b:
c5:d3:d1:fe:5b:b1:53:11:63:e8:c1:ad:b9:cd:4b:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:35:56:1C:92:87:5B:B7:BB:B1:EA:BA:87:17:3B:4A:29:A3:90
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/i581VhySh1u3u7HquocXO0opo5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:860::/44
Signature Algorithm: sha256WithRSAEncryption
2c:4e:5d:de:3f:24:0f:69:55:c3:28:86:c1:cc:53:a3:67:11:
48:52:fc:d0:be:62:b4:60:f5:b2:21:a0:72:ad:22:16:68:fc:
34:93:46:aa:13:98:07:95:db:06:c1:79:b6:8a:ae:44:9b:d4:
2f:c1:ee:3f:23:7c:a9:fd:6c:6b:4c:38:89:f3:31:25:35:c9:
5a:4b:ed:58:f6:be:13:2a:ab:b0:18:24:34:f7:12:ea:39:37:
82:b4:73:2a:77:ec:38:3e:5b:db:89:b9:c9:26:f5:9b:b8:e0:
20:55:af:98:37:6d:26:d0:d7:45:bc:44:27:39:41:06:1f:78:
0d:04:4a:82:c4:ea:a6:3a:a8:12:7c:e7:ba:c2:9f:8c:86:bd:
a4:96:9a:75:6c:e4:63:8b:f7:ae:85:b3:6f:01:f3:4a:2f:79:
ff:e3:d2:f7:9d:a3:f2:72:b9:80:ed:35:30:48:63:b3:b9:79:
bf:bf:0b:3a:b2:f9:37:7f:a4:d4:6f:54:8d:61:9a:ab:25:8a:
d3:46:b3:25:e5:f9:b1:2a:0a:5f:18:b2:c1:f3:70:ac:6f:16:
d1:86:56:36:b6:7a:90:82:b1:4f:e0:65:9f:b0:cd:8a:1d:67:
26:b0:41:59:ae:cb:1e:b0:39:a7:a0:fc:e7:95:14:90:bb:c6:
c7:b5:99:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ4GwbI9fjB+t32/qc9s8GtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYwNTA4MDg0MzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjlmMzU1NjFjOTI4NzViYjdiYmIxZWFiYTg3MTczYjRhMjlhMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseQQ9Zj9Jir1zMnls+n+HVnQSvMZ
wNXT88Qxd/PXRHWcGrJBwKcrnp1t/hlYo5zz1hhTS8mpDQAKdDumMpmHEzOYjQiI
YpnjzlXI/6vf3dbkQW//w8vvBrd3WSE+SjLrGa4Hj7MBPk1gjVPVLjgpm+0Rbb0n
6zhZSIAbI6EbHM+GJWGKUtNXALeTa1c6D8Un5em0pCpmba+AsLZAfnktvn4CgJju
KNxYNSh8QZ6dCaZEfZoFSlR1dmb9UFVWlQ81KCJEy+a87ONvO3vnNpoHpY+Bjr+G
vMXe0WByAi8yif3e09dMH5vgN79n8T+B2XvF09H+W7FTEWPowa25zUtvVQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIufNVYckodbt7ux6rqHFztKKaOQMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvaTU4MVZoeVNoMXUzdTdIcXVvY1hPMG9wbzVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQhg
MA0GCSqGSIb3DQEBCwUAA4IBAQAsTl3ePyQPaVXDKIbBzFOjZxFIUvzQvmK0YPWy
IaByrSIWaPw0k0aqE5gHldsGwXm2iq5Em9Qvwe4/I3yp/WxrTDiJ8zElNclaS+1Y
9r4TKquwGCQ09xLqOTeCtHMqd+w4PlvbibnJJvWbuOAgVa+YN20m0NdFvEQnOUEG
H3gNBEqCxOqmOqgSfOe6wp+Mhr2klpp1bORji/euhbNvAfNKL3n/49L3naPycrmA
7TUwSGOzuXm/vws6svk3f6TUb1SNYZqrJYrTRrMl5fmxKgpfGLLB83CsbxbRhlY2
tnqQgrFP4GWfsM2KHWcmsEFZrssesDmnoPznlRSQu8bHtZnV
-----END CERTIFICATE-----
Generated at Wed May 13 03:48:27 2026 by rpki-client