Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_WY29sxvL7eTgbKFEoCzs5DGbWk.roa
File: _WY29sxvL7eTgbKFEoCzs5DGbWk.roa (raw, json)
Hash identifier: 0n3QlO/r3sjWRk/sTTbpZIaERpyILu3lDPLbKxDkXXE=
Subject key identifier: FD:66:36:F6:CC:6F:2F:B7:93:81:B2:85:12:80:B3:B3:90:C6:6D:69
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23691164C764EAAA79EDA007A19467E3
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_WY29sxvL7eTgbKFEoCzs5DGbWk.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204405
IP address blocks: 2a02:17a5::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:11:64:c7:64:ea:aa:79:ed:a0:07:a1:94:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd6636f6cc6f2fb79381b2851280b3b390c66d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:7d:90:ad:03:e7:f7:5e:67:1f:5f:f0:61:
98:bc:62:a9:f4:3c:fb:7f:5e:77:e4:64:5d:4e:38:
60:d0:3d:5e:94:12:9d:0b:7d:ab:d6:b7:9d:d5:a7:
c0:e4:68:5a:97:55:85:fb:1b:fc:79:2a:ac:a3:7e:
f5:ed:08:1e:58:29:5e:eb:a5:30:ee:95:9c:b0:1a:
12:d2:7f:52:91:a9:a3:8e:d2:53:bb:84:c8:aa:a4:
45:4c:3e:48:f0:72:8a:12:e0:9d:4a:ee:d1:22:75:
56:86:f1:16:6d:50:5b:66:30:d2:6a:95:2f:50:20:
30:91:ac:7f:f4:59:75:fb:30:35:3c:96:16:a4:03:
c2:c5:ed:6c:46:c8:f3:6b:59:10:f1:8e:45:32:0a:
a5:70:65:24:c9:e4:0b:55:20:24:88:71:98:b9:2c:
3a:b8:f8:a5:0d:41:a0:05:82:2c:b1:16:06:07:a8:
80:b1:b4:02:e6:17:a3:12:91:85:d5:d6:d7:47:97:
74:f0:67:d3:d6:1e:fc:7e:23:c7:21:1e:79:69:42:
8f:0d:4c:7c:28:6f:4a:51:04:16:38:15:17:20:56:
d5:ca:83:ca:b2:a0:f6:80:5a:8b:ac:51:0c:75:cd:
35:82:31:44:66:ce:38:c6:bb:2f:f4:76:ba:af:c1:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:36:F6:CC:6F:2F:B7:93:81:B2:85:12:80:B3:B3:90:C6:6D:69
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_WY29sxvL7eTgbKFEoCzs5DGbWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:17a5::/32
Signature Algorithm: sha256WithRSAEncryption
48:ec:d8:b7:30:64:66:4b:1e:2c:e3:8d:be:6d:5d:97:95:a3:
e2:c9:ea:0b:a2:1d:22:a2:cc:d3:ac:b6:ee:a9:6b:3b:38:dc:
c0:36:a8:e5:79:28:58:6d:33:0e:f2:2c:7f:75:e7:bd:4f:78:
40:1c:11:a4:85:d8:c4:22:af:bb:ff:58:00:af:98:93:01:17:
88:ac:5b:a3:37:a7:ac:3b:7b:cb:43:a7:d1:b0:61:45:51:00:
a8:08:e9:37:3c:3c:dc:44:22:b1:10:23:d2:9a:87:88:55:19:
24:59:50:00:de:f4:e3:23:4a:5c:9f:b6:be:a4:81:fe:0c:fc:
85:a8:4f:c9:a6:fc:9d:a4:a1:68:ca:f0:56:b8:e9:8d:60:bb:
cd:92:58:41:79:51:a7:35:9a:ad:8e:25:81:7d:3b:70:b9:b4:
aa:50:6e:fa:48:93:14:4f:20:04:05:04:b7:d7:e5:ad:3f:f9:
85:83:69:1d:f2:5d:be:11:20:9b:45:fe:60:3f:8d:d9:62:09:
4e:c8:7e:6a:1a:28:9b:1a:1e:be:5c:a0:36:cb:5a:3c:50:04:
18:57:05:83:f6:50:6f:e8:fb:0e:38:d4:9f:84:7a:a0:81:8a:
29:d5:ad:de:bb:99:df:66:d3:a6:8b:a7:a8:ed:92:42:b9:1c:
ce:97:4d:4d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaRFkx2TqqnntoAehlGfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm
MGRhMmIwHhcNMjYwNzAyMTUxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDY2MzZmNmNjNmYyZmI3OTM4MWIyODUxMjgwYjNiMzkwYzY2ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofx9kK0D5/deZx9f8GGYvGKp9Dz7
f1535GRdTjhg0D1elBKdC32r1red1afA5Ghal1WF+xv8eSqso3717QgeWCle66Uw
7pWcsBoS0n9SkamjjtJTu4TIqqRFTD5I8HKKEuCdSu7RInVWhvEWbVBbZjDSapUv
UCAwkax/9Fl1+zA1PJYWpAPCxe1sRsjza1kQ8Y5FMgqlcGUkyeQLVSAkiHGYuSw6
uPilDUGgBYIssRYGB6iAsbQC5hejEpGF1dbXR5d08GfT1h78fiPHIR55aUKPDUx8
KG9KUQQWOBUXIFbVyoPKsqD2gFqLrFEMdc01gjFEZs44xrsv9Ha6r8F8nwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFP1mNvbMby+3k4GyhRKAs7OQxm1pMB8GA1UdIwQY
MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It
ZDFhYmY0ZWUzMmNiLzEvX1dZMjlzeHZMN2VUZ2JLRkVvQ3pzNURHYldrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi
LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIXpTAN
BgkqhkiG9w0BAQsFAAOCAQEASOzYtzBkZkseLOONvm1dl5Wj4snqC6IdIqLM06y2
7qlrOzjcwDao5XkoWG0zDvIsf3XnvU94QBwRpIXYxCKvu/9YAK+YkwEXiKxbozen
rDt7y0On0bBhRVEAqAjpNzw83EQisRAj0pqHiFUZJFlQAN704yNKXJ+2vqSB/gz8
hahPyab8naShaMrwVrjpjWC7zZJYQXlRpzWarY4lgX07cLm0qlBu+kiTFE8gBAUE
t9flrT/5hYNpHfJdvhEgm0X+YD+N2WIJTsh+ahoomxoevlygNstaPFAEGFcFg/ZQ
b+j7DjjUn4R6oIGKKdWt3ruZ32bTpounqO2SQrkczpdNTQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:02 2026 by rpki-client