Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/loVo2yS-0CE_rXFXH1Z8DSIzF8Q.roa
File: loVo2yS-0CE_rXFXH1Z8DSIzF8Q.roa (raw, json)
Hash identifier: YTQa8OXceWG4q+ja6j6P1HKBooONp5UhsU2UKmw7/98=
Subject key identifier: 96:85:68:DB:24:BE:D0:21:3F:AD:71:57:1F:56:7C:0D:22:33:17:C4
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A19D7AF85E23FC30BEF3003624F106043F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/loVo2yS-0CE_rXFXH1Z8DSIzF8Q.roa
Signing time: Mon 02 Nov 2026 18:17:24 +0000
ROA not before: Mon 02 Nov 2026 18:17:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218222
IP address blocks: 2a0c:b641:fe0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:7a:f8:5e:23:fc:30:be:f3:00:36:24:f1:06:04:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 2 18:17:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=968568db24bed0213fad71571f567c0d223317c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:fb:c8:7c:b0:b7:3c:43:51:29:a4:d9:2e:
42:c5:0b:17:55:47:a1:b9:be:f5:40:68:0c:07:42:
1c:29:b6:ab:19:a4:58:8a:a9:8d:02:ca:a5:7d:b6:
bc:1d:67:7f:d8:48:66:ad:81:aa:8f:76:46:8d:0f:
b6:ef:82:81:f9:97:ae:55:b0:eb:1c:73:24:3b:96:
f9:68:de:e8:74:31:f5:09:d1:6b:6e:53:29:f1:21:
33:05:e9:8a:93:f3:86:64:41:e2:da:a4:d6:fe:ce:
a5:e6:b2:b9:3c:c8:8c:b7:53:da:07:e2:31:65:fb:
b6:54:93:b4:c3:e8:98:8f:9b:c4:d1:33:cd:10:f2:
b4:f5:64:40:80:27:58:91:98:08:1f:2e:35:2b:19:
fb:6d:75:09:fe:d8:71:80:e9:21:f6:12:94:ad:11:
7b:18:df:8e:7e:3c:15:1d:ab:18:84:cb:88:af:52:
c8:3c:08:2c:e5:be:a0:46:c2:bf:06:cf:3f:63:70:
a0:01:91:62:d3:7f:13:fc:45:93:16:18:5f:dd:56:
7a:03:74:4f:01:12:95:ff:c4:df:64:31:46:7f:81:
29:ae:a6:bd:4d:98:bb:37:be:d1:65:28:f3:a3:ff:
1d:53:61:93:f8:6f:ba:0c:50:b5:41:22:c5:35:21:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:85:68:DB:24:BE:D0:21:3F:AD:71:57:1F:56:7C:0D:22:33:17:C4
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/loVo2yS-0CE_rXFXH1Z8DSIzF8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:fe0::/44
Signature Algorithm: sha256WithRSAEncryption
23:b7:58:c5:11:19:b8:d8:54:7e:d2:13:6c:49:16:6e:ac:5f:
62:00:45:08:0f:ad:cf:ba:e6:f1:26:91:64:21:07:27:37:c2:
e6:ab:e5:60:ff:ae:8f:60:7e:24:b4:a7:40:90:91:8f:02:6d:
2f:ef:d4:87:dd:a1:d9:53:84:13:ec:6a:f4:cf:04:a3:47:6a:
60:26:d5:f8:5e:84:aa:da:95:84:51:7b:ad:21:c1:b7:ce:32:
e0:72:43:3f:ba:f4:32:3b:a9:d1:d2:21:69:7c:a3:59:e2:62:
ef:00:81:d0:29:4a:2f:70:37:85:d6:bf:58:ca:83:39:72:5a:
18:07:73:9c:f9:77:06:11:10:01:05:67:7c:6a:79:eb:e3:ca:
c2:f0:0d:cb:63:57:3f:90:76:d4:c8:35:39:e0:ec:2c:40:3b:
54:9a:1f:a6:fa:59:7b:0f:14:61:ce:9c:c5:9a:54:90:50:9e:
84:98:37:c7:db:7a:aa:89:0a:18:2e:ac:4f:b3:bd:bf:9c:87:
06:60:1e:79:08:92:8b:61:20:09:cd:f7:d9:80:e5:5d:2d:24:
f3:36:5a:3c:bc:82:58:79:56:27:0b:fb:ec:b6:57:27:f8:ab:
ed:a0:83:90:42:22:05:12:f7:f5:15:02:73:70:95:34:a2:d4:
85:bc:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:13:24 2026 by rpki-client