Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kjPgDbyQ3aMdpNhj9s349a1hUE0.roa
File: kjPgDbyQ3aMdpNhj9s349a1hUE0.roa (raw, json)
Hash identifier: Jpof4LGxaXKXFKQg/bI8w/cXhLKmdPn+XymSTNKtFug=
Subject key identifier: 92:33:E0:0D:BC:90:DD:A3:1D:A4:D8:63:F6:CD:F8:F5:AD:61:50:4D
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A18D3903EFBBDF8690B20833CBCBA4D013
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kjPgDbyQ3aMdpNhj9s349a1hUE0.roa
Signing time: Fri 30 Oct 2026 14:31:26 +0000
ROA not before: Fri 30 Oct 2026 14:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218235
IP address blocks: 2a0c:b641:fc0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:39:03:ef:bb:df:86:90:b2:08:33:cb:cb:a4:d0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 30 14:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9233e00dbc90dda31da4d863f6cdf8f5ad61504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:85:5a:13:e2:6a:a8:0f:1c:46:4b:50:bc:
c7:64:58:25:d7:5d:67:30:38:6d:98:92:7e:e0:30:
f2:f7:57:ef:37:a3:c1:79:82:a8:5e:4f:4f:a1:04:
04:2c:68:1c:c9:7b:38:c3:ac:74:e2:f2:e9:a7:92:
18:b1:51:f0:26:81:75:5b:e5:af:0a:69:a3:31:75:
74:b6:64:84:b1:98:a8:d3:9c:91:30:c6:7f:b7:2d:
7e:e7:cc:dc:0e:cf:09:14:d9:78:3b:60:da:9c:f1:
7a:77:12:1c:49:1b:70:ef:75:3c:5d:db:36:c8:12:
4a:8d:f5:80:b2:4e:bb:c0:7f:2e:c4:67:18:12:bc:
cb:3d:0b:b5:d6:68:1f:9d:a6:21:cf:47:65:8c:d0:
1d:aa:57:d2:47:e7:fb:95:98:bc:f9:c2:0e:ae:78:
2b:45:59:d7:c8:b0:c1:13:e4:21:41:c3:61:f4:68:
c8:57:d2:6c:cc:86:d7:d9:b6:db:ca:01:af:42:62:
7a:81:e7:2a:06:0a:da:5c:d2:28:91:92:76:a2:33:
a7:f9:05:27:28:76:91:1b:45:b0:96:a1:7f:8c:e4:
76:39:46:77:31:89:aa:40:24:10:28:6e:4a:de:b7:
2a:b4:01:d6:39:73:ed:d6:68:9f:ae:72:96:75:76:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:E0:0D:BC:90:DD:A3:1D:A4:D8:63:F6:CD:F8:F5:AD:61:50:4D
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kjPgDbyQ3aMdpNhj9s349a1hUE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:fc0::/44
Signature Algorithm: sha256WithRSAEncryption
94:43:18:2f:bb:f8:df:df:52:54:88:01:60:37:60:6b:ab:e8:
8e:29:c7:96:b2:e4:6b:c0:19:ad:bd:80:47:96:bc:8f:c5:c9:
7d:6e:6c:ee:66:de:98:68:10:65:ab:f9:3b:5d:05:15:60:e4:
34:82:bd:c6:91:08:a1:93:56:d3:03:95:d0:87:24:31:c1:03:
42:96:70:ec:f5:c7:88:e2:18:03:54:89:a0:ec:54:81:6d:4e:
d9:41:c9:76:92:fe:c4:be:58:03:5c:6e:17:80:18:a3:0f:8c:
98:67:8e:c1:c9:b3:0a:c4:cb:a5:af:ae:57:64:9e:ad:81:f8:
12:da:4d:a2:99:91:a1:61:4d:70:b0:29:36:b6:19:be:51:ca:
71:a2:33:54:40:54:5d:bd:ff:d5:d6:15:b6:dd:2c:8a:09:fe:
6a:f7:d0:c1:91:fc:f4:12:ec:11:dd:c4:a0:a5:74:93:ee:b3:
92:bf:00:43:7d:b5:a9:13:9c:fb:ba:fe:55:20:85:df:04:5a:
df:84:ba:3f:22:2e:ca:dd:d6:9c:64:51:f0:e3:e6:16:69:fb:
ea:0f:01:3b:df:90:d3:50:8a:14:62:17:8e:37:cc:d7:15:3d:
ad:4a:50:2c:52:ee:d5:d7:3d:e7:da:09:ac:bc:57:33:20:94:
53:37:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:21 2026 by rpki-client