Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rTdPc65ZIdVOUTKtHII8aroAdRA.roa
File: rTdPc65ZIdVOUTKtHII8aroAdRA.roa (raw, json)
Hash identifier: fIrHapi4gcLFJJGo92oyN8ZsNDocOuWMzt0VchD8b/0=
Subject key identifier: AD:37:4F:73:AE:59:21:D5:4E:51:32:AD:1C:82:3C:6A:BA:00:75:10
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019E0268681FE5759BD042F997421B416BB5
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rTdPc65ZIdVOUTKtHII8aroAdRA.roa
Signing time: Thu 07 May 2026 12:27:37 +0000
ROA not before: Thu 07 May 2026 12:27:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197740
IP address blocks: 2a0c:b641:b70::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:68:68:1f:e5:75:9b:d0:42:f9:97:42:1b:41:6b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 7 12:27:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad374f73ae5921d54e5132ad1c823c6aba007510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:a1:c1:0d:38:63:ba:72:50:4d:b0:f7:f8:
b2:d2:b6:2b:e9:41:23:68:63:59:fd:64:bf:22:e7:
bf:03:08:fc:77:30:0f:63:d0:7b:b5:07:51:c5:df:
ac:0c:7d:d7:b1:2c:b6:44:99:ca:ad:a9:fc:8f:76:
7c:6d:31:19:0b:31:87:6a:f8:e7:d9:9c:79:98:79:
fc:bb:eb:55:69:67:be:32:c4:7e:94:c6:79:27:14:
0c:8b:11:4d:dd:f1:ee:cb:d0:56:64:ed:c0:21:f3:
4d:de:02:bd:50:9a:ef:0f:9a:47:0b:a6:3a:34:c2:
6c:20:0b:52:d8:c3:df:34:ab:0c:d5:b8:13:af:d7:
d8:fb:d9:c8:ef:00:6d:fb:3e:1a:81:07:ed:c9:b9:
b8:bd:db:66:1d:c7:72:30:8b:55:14:59:32:e5:44:
00:9b:70:f4:dd:3e:0b:b7:f5:67:f9:69:91:a5:c0:
ad:9f:00:64:10:1d:a3:8d:5a:35:85:3f:4e:ac:af:
d8:72:c7:6d:d5:7f:95:7c:37:5c:e3:49:95:41:6a:
64:78:ef:7a:8d:e9:40:9f:be:81:a4:7e:03:ac:2e:
5e:82:6e:a2:7d:e7:7e:93:23:27:2e:44:89:8c:51:
14:5c:cf:63:c6:83:23:06:b2:86:1b:89:34:73:4d:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:37:4F:73:AE:59:21:D5:4E:51:32:AD:1C:82:3C:6A:BA:00:75:10
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rTdPc65ZIdVOUTKtHII8aroAdRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b70::/44
Signature Algorithm: sha256WithRSAEncryption
2c:2f:6a:ac:00:7a:f3:5c:9e:57:af:31:f1:ed:48:21:7f:86:
c0:db:cf:08:19:79:fc:53:cb:68:28:df:65:07:13:9f:64:77:
a3:9f:4e:9c:07:34:97:91:b2:77:b4:2e:16:c3:f1:19:42:5c:
0b:f8:4f:2a:a1:59:6d:c7:7a:2e:4c:19:b5:c0:8a:1a:33:b8:
1f:45:56:f9:30:de:da:6e:99:ac:95:ed:c0:01:25:15:78:be:
cd:72:aa:3c:c6:28:57:61:7f:fa:ec:d2:4a:d2:8e:2b:8c:7c:
c0:05:cf:73:85:9c:ea:68:f4:8b:22:74:9a:f1:64:87:2e:48:
6b:5d:04:48:7c:7b:94:1f:6d:1d:ab:8e:2c:23:80:59:0e:94:
21:39:31:0f:ad:c6:13:2b:1f:46:ba:ea:f0:ad:ad:85:c4:53:
c0:ca:8e:2d:61:ec:8b:95:c2:bd:c6:37:83:a9:50:73:b5:0c:
8c:28:5a:1f:07:95:cb:8a:c8:da:30:3c:31:92:49:66:71:da:
88:c4:78:91:a5:a6:04:62:eb:89:0c:cc:63:89:bb:5f:da:bb:
25:5c:14:5c:75:c3:8e:aa:c1:4e:86:13:96:f9:be:ca:86:3e:
63:57:16:ac:2c:0e:73:28:35:49:1f:17:2c:e5:bc:78:a2:d6:
c5:57:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:51:11 2026 by rpki-client