Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa
File: IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa (raw, json)
Hash identifier: dE0Z7qv5NDY7r0/9XxQ9jfsrqbdxqd+FO+WrhOi5Glg=
Subject key identifier: 20:31:50:98:1D:BF:04:D6:DE:F1:36:6F:05:90:7A:A5:89:2A:84:65
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F236913BD4DDF3B0CD104917DA8C4A4BC
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210325
IP address blocks: 2a0d:3140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:13:bd:4d:df:3b:0c:d1:04:91:7d:a8:c4:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=203150981dbf04d6def1366f05907aa5892a8465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:56:8a:5a:67:35:63:fc:09:79:c8:27:e8:
9c:4e:69:95:1a:f2:c6:5e:c0:58:2d:34:56:fc:ab:
ed:7e:fb:8d:4c:f0:c6:c7:50:ae:9f:c1:bd:88:d1:
72:1d:f4:f1:c4:d1:71:ba:53:a4:cf:7e:92:ce:d0:
15:c6:9a:c7:39:e4:ef:be:dd:78:19:a1:84:19:c5:
5d:af:67:cb:b0:70:3a:fb:c8:f5:c2:07:d0:fe:52:
47:81:e4:c6:a1:27:6f:54:be:f3:4d:cb:08:39:d0:
70:2d:5b:dd:64:02:67:e0:dc:dd:5d:6d:08:37:ee:
e5:ee:80:c0:b9:10:8d:2b:98:7e:1b:60:7d:57:cf:
4c:9f:cc:9b:5b:04:41:c7:a6:55:7d:6a:79:43:6d:
ff:5c:4a:96:4a:cf:1a:ff:c7:d9:c1:0c:b6:45:0f:
b5:d1:1d:0e:46:89:bb:30:43:8f:55:6a:e3:63:77:
9c:49:73:14:15:75:f1:67:1a:d9:80:e5:e0:f2:2d:
1b:e3:d3:d1:0d:88:94:de:fe:7b:ba:1b:9d:85:5a:
75:71:3e:93:94:77:5d:7d:6b:49:38:95:4b:1e:ce:
5e:81:a0:0f:d5:2e:7c:86:fa:f5:bb:3c:99:f9:e9:
44:66:17:bb:e1:9a:73:f0:e3:fb:e8:89:db:e5:45:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:50:98:1D:BF:04:D6:DE:F1:36:6F:05:90:7A:A5:89:2A:84:65
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:3140::/29
Signature Algorithm: sha256WithRSAEncryption
50:b1:e2:9d:7b:08:a9:32:b5:18:4c:c8:f5:6f:e7:f7:64:fc:
f6:54:29:48:71:b2:01:8c:fa:e2:bd:f2:57:0b:40:97:d7:b5:
79:b1:6d:73:50:9b:b3:ee:4a:9a:13:5a:0c:03:ed:10:98:0e:
0d:8e:e9:68:bb:de:e3:b3:8b:76:3f:09:27:63:93:ac:1d:76:
9b:e2:14:b2:73:a2:6b:80:92:bc:7f:3a:bf:39:af:38:d4:66:
90:24:53:8e:41:e7:7e:7d:57:a3:f5:ac:80:2a:06:39:dd:d0:
54:6d:89:e3:76:db:fd:2b:6c:a0:c6:d5:50:21:79:bc:99:a7:
a4:9f:5d:49:14:bc:99:f5:c1:52:33:68:9b:74:3e:3e:d2:61:
d7:e8:15:22:5b:59:d9:cc:a0:a8:06:be:c5:aa:46:cd:a4:0f:
5b:10:70:29:6d:0e:6f:93:c5:43:8a:1c:2f:3a:8f:83:22:b9:
f0:4f:98:0e:09:17:00:60:89:18:e6:ea:59:33:d7:04:0a:f3:
6c:87:b6:35:41:7b:fe:9a:eb:d9:fb:7b:b3:3c:d4:fe:7f:ec:
13:ac:fa:2c:35:95:4a:01:e5:15:b1:25:89:ee:45:ed:51:c8:
24:ef:d4:92:03:33:bb:f3:93:8d:a6:36:04:5f:bb:93:f4:90:
00:09:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:28 2026 by rpki-client