Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/1PbQ5iE7y7684n8wVIBtt5H_ez8.roa
File: 1PbQ5iE7y7684n8wVIBtt5H_ez8.roa (raw, json)
Hash identifier: DS6BcZHM2Oonbdrqucbt2rA9I6IEtYxt7hDBhbDITOA=
Subject key identifier: D4:F6:D0:E6:21:3B:CB:BE:BC:E2:7F:30:54:80:6D:B7:91:FF:7B:3F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019F990D03624A9F96AA632F669A410A0346
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/1PbQ5iE7y7684n8wVIBtt5H_ez8.roa
Signing time: Sat 25 Jul 2026 11:33:14 +0000
ROA not before: Sat 25 Jul 2026 11:33:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2001:3080::/29 maxlen: 29
2001:3280::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:bfc4::/32 maxlen: 32
2a13:de40::/29 maxlen: 29
2a14:6bc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:0d:03:62:4a:9f:96:aa:63:2f:66:9a:41:0a:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 25 11:33:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4f6d0e6213bcbbebce27f3054806db791ff7b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:10:e5:ea:a9:34:9c:20:be:0b:0f:f8:7b:
87:b1:73:0d:0f:5b:aa:fa:61:3e:b1:e2:e8:37:56:
53:b9:44:7f:5a:27:95:e1:d1:6d:62:b0:0c:63:6d:
ac:8c:2b:a4:3d:84:a7:56:47:69:49:22:92:97:82:
00:22:76:b3:9c:18:f6:11:bf:1e:e8:a8:6b:0f:89:
b6:4a:3e:72:17:15:b9:e8:db:33:26:53:a8:66:aa:
cb:16:cf:95:4e:e2:4b:c8:68:f1:24:6f:3a:f8:ce:
37:81:33:36:f1:ca:a7:77:d2:2d:64:cc:d2:5c:5d:
01:52:c3:9b:3a:0f:00:67:62:8b:cc:5f:bc:ea:e7:
f5:0d:1b:8c:83:6d:cd:82:5c:66:ca:ba:8d:38:c5:
b2:bf:09:06:8d:20:95:05:34:4c:6f:ad:9d:16:73:
cf:2a:95:47:f7:34:92:6b:3a:a9:2a:8b:06:46:a1:
c4:a5:42:44:f8:94:20:2b:47:3a:60:c2:35:57:23:
58:53:a1:d8:c4:58:c2:19:3b:69:68:f8:f7:4c:82:
82:50:50:03:1a:f5:3d:86:d2:3c:f3:20:88:5b:5c:
0f:bb:7d:74:b3:8a:69:28:0a:74:ab:c4:40:9b:ca:
c0:6c:a4:16:42:33:75:f0:b7:4c:93:d7:73:a4:a5:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F6:D0:E6:21:3B:CB:BE:BC:E2:7F:30:54:80:6D:B7:91:FF:7B:3F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/1PbQ5iE7y7684n8wVIBtt5H_ez8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2001:3280::/29
2a13:8000::/29
2a13:bfc4::/32
2a13:de40::/29
2a14:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
26:e4:56:2a:5c:28:79:e7:a0:c2:e8:2e:86:8c:2a:ac:6d:ff:
6e:eb:c7:cc:dd:f6:d5:a3:c2:25:9d:4a:73:17:08:27:e5:e1:
60:f9:aa:af:81:be:c5:bd:c5:80:a3:aa:c2:09:cc:37:e0:9e:
20:50:be:cb:de:13:c4:25:ee:ec:ea:27:96:d8:2e:12:86:c9:
db:d0:e0:05:56:14:f9:af:1b:05:4d:71:ae:dd:95:f0:9e:c0:
29:27:d2:1a:ad:af:25:f9:25:23:9a:53:8c:6c:47:5b:00:dd:
64:53:22:2e:dc:a1:64:35:67:f4:72:09:18:da:b7:99:30:43:
56:67:89:df:70:9a:fe:f1:26:2d:2c:3a:de:ba:c2:53:3a:58:
a1:93:7b:c4:d8:47:0c:70:59:04:7a:46:61:d5:1c:85:9c:ff:
f8:75:f1:d1:7e:26:01:b4:11:c6:37:cc:4e:83:47:66:cf:5a:
5f:1f:e5:f5:9a:96:c3:6b:5b:e6:a2:2d:fc:8c:18:a7:2e:e3:
1d:6f:34:da:28:b9:2a:9b:48:df:73:84:c9:6f:44:6e:4d:8d:
ea:b2:c4:8b:4f:15:e3:60:a6:ba:22:13:49:ee:94:c8:d8:fb:
56:7b:89:1c:7b:44:c6:11:a5:b5:5b:21:98:55:4c:3b:39:87:
e2:0c:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:22 2026 by rpki-client