Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xannYLe49o6aLvI7dXqDhsQSAvQ.roa
File: xannYLe49o6aLvI7dXqDhsQSAvQ.roa (raw, json)
Hash identifier: fOfT0SCVsO74gQLYrZ2MlqRH/SGoEexV4yvOKl5ylF8=
Subject key identifier: C5:A9:E7:60:B7:B8:F6:8E:9A:2E:F2:3B:75:7A:83:86:C4:12:02:F4
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A17DA805A0FB9489D85BE6B83FC9231C7E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xannYLe49o6aLvI7dXqDhsQSAvQ.roa
Signing time: Tue 27 Oct 2026 13:58:45 +0000
ROA not before: Tue 27 Oct 2026 13:58:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218267
IP address blocks: 2a0c:b641:f80::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:a8:05:a0:fb:94:89:d8:5b:e6:b8:3f:c9:23:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 27 13:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5a9e760b7b8f68e9a2ef23b757a8386c41202f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:3f:9f:09:1b:d1:d0:b7:b9:e7:62:ce:2a:
97:c8:38:59:8b:4e:6e:67:03:c1:df:3c:50:a0:d8:
78:bb:2c:07:1e:71:df:28:1d:55:ff:b4:1e:9b:cb:
98:12:bb:5a:04:59:e9:ea:3a:9c:ab:c2:0c:29:15:
22:d5:59:56:24:cc:b0:2a:6d:8b:3d:cd:b7:52:90:
82:50:51:0a:37:e0:1c:2b:ea:b5:d3:7c:ed:56:08:
c9:c5:2d:2c:10:5a:17:e5:d2:85:f2:47:a6:5b:60:
a5:12:08:45:1d:8e:cf:6a:35:fc:60:72:32:86:3d:
ba:2c:95:31:8d:da:aa:53:d8:98:db:6e:f0:d4:a4:
46:13:53:8e:ea:86:82:6b:f5:d8:8b:e6:f6:49:bb:
6a:e5:32:7c:0f:73:59:8d:6f:e4:fb:c0:58:28:1a:
af:89:43:de:26:f9:7f:48:15:0f:a4:61:e2:dc:21:
96:6e:c9:18:81:a7:c6:ae:ba:05:bc:3b:a1:df:9f:
de:b3:60:24:fd:63:ca:52:e2:45:1d:e2:0b:17:ec:
02:51:bb:1e:36:41:04:98:07:1a:18:e2:dd:20:29:
03:28:78:0b:2d:5c:25:9c:52:a3:98:c6:fb:8d:a5:
11:88:b7:42:4e:04:a8:94:10:fd:78:02:5e:9f:87:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:E7:60:B7:B8:F6:8E:9A:2E:F2:3B:75:7A:83:86:C4:12:02:F4
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/xannYLe49o6aLvI7dXqDhsQSAvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f80::/44
Signature Algorithm: sha256WithRSAEncryption
9b:8a:d0:d3:b3:04:d1:bb:0f:0f:66:6a:23:6d:c4:2a:d1:67:
fd:75:5d:b4:52:56:a6:fb:bf:17:d7:3f:ff:4c:92:08:74:e2:
ad:41:7e:43:8d:af:9a:ea:0f:2f:e3:e8:2a:a4:29:26:75:9e:
73:1c:f2:7c:83:a8:1f:58:8e:18:3e:56:5c:cc:e7:23:d0:c3:
11:a8:44:28:10:cc:a5:22:7e:e6:dc:1d:06:bb:cf:eb:ed:d9:
23:fc:ff:20:d9:05:2d:71:f0:4b:d7:3c:c4:68:e8:dd:5f:93:
56:4d:12:8b:21:5a:e8:17:82:a3:18:a4:a2:dc:b9:88:c4:2b:
34:bc:3c:35:fd:01:07:55:81:9e:43:25:95:61:0f:71:35:6f:
d1:3d:7d:ac:7c:8e:b8:7a:26:71:6b:1b:b4:e9:82:26:a1:a7:
2e:e5:a9:6b:e2:c0:fb:27:6a:26:3b:04:f9:96:ff:29:dc:fb:
72:4a:b8:9e:66:cd:8c:dd:21:00:40:79:72:1d:5f:a4:a5:4a:
30:a8:4f:35:8f:9b:84:91:10:22:c4:e5:3b:07:70:87:c9:ed:
50:19:9d:c4:c8:1d:18:69:e0:4b:00:ff:02:29:ab:2e:8e:ae:
70:ab:c6:32:4d:49:c0:9f:da:03:ca:9d:6f:b1:83:4e:b6:33:
99:03:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:18:38 2026 by rpki-client