Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/AhxqUvYeJz4pcEqUYNtQep4UR9g.roa
File: AhxqUvYeJz4pcEqUYNtQep4UR9g.roa (raw, json)
Hash identifier: BprDXlGRF0tYEqgkiT2bzLaPrRheiD+Esit3/euJN0I=
Subject key identifier: 02:1C:6A:52:F6:1E:27:3E:29:70:4A:94:60:DB:50:7A:9E:14:47:D8
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019EBC80651188F1CCCA63DA060FE0DA75BD
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/AhxqUvYeJz4pcEqUYNtQep4UR9g.roa
Signing time: Fri 12 Jun 2026 15:43:11 +0000
ROA not before: Fri 12 Jun 2026 15:43:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215460
IP address blocks: 2a13:d2c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:80:65:11:88:f1:cc:ca:63:da:06:0f:e0:da:75:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 15:43:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=021c6a52f61e273e29704a9460db507a9e1447d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:7a:37:fd:68:e1:46:80:94:2b:e2:b8:dc:
de:15:5c:a6:1c:28:f3:bb:c4:e7:ec:63:4c:2a:78:
a9:3e:20:50:54:ec:45:e7:fb:53:a0:55:b0:3f:bf:
f9:19:21:00:9b:48:54:42:99:c6:9e:a4:d6:65:66:
25:df:cf:ca:21:01:38:69:fb:1f:08:2e:1e:84:e6:
97:5b:42:84:43:a5:a0:2b:ef:cc:4c:5a:83:4f:06:
00:e9:75:74:3d:0a:10:9e:f1:e0:76:05:71:26:f7:
55:f2:65:0d:dd:88:61:07:88:70:43:da:74:62:0a:
e8:4e:ab:88:d2:5a:30:75:ad:57:88:26:56:6d:3f:
3f:74:6e:16:75:8d:80:20:82:49:c6:dd:99:19:3e:
8e:cd:87:de:da:1b:a8:6d:f3:1e:28:f8:e9:b4:98:
77:82:a3:a2:a9:77:aa:d0:5a:32:2f:16:51:db:2b:
1e:be:36:48:0d:dd:63:45:d0:33:d2:4b:f9:ca:f5:
0e:75:c4:9b:da:df:aa:3d:a7:43:25:ef:11:04:5c:
63:fb:5a:68:2e:4c:21:85:9d:45:f0:f3:41:74:ce:
25:ec:f4:32:4b:ca:20:bb:6f:d5:9b:39:fc:fa:b3:
a8:04:e2:f3:f4:f8:a0:07:c0:0f:d6:52:a6:99:d7:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:6A:52:F6:1E:27:3E:29:70:4A:94:60:DB:50:7A:9E:14:47:D8
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/AhxqUvYeJz4pcEqUYNtQep4UR9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d2c7::/32
Signature Algorithm: sha256WithRSAEncryption
8c:b1:15:ea:3e:99:0e:8e:d9:77:9a:4b:c3:08:33:a0:e8:e9:
9a:c3:12:53:65:aa:68:ad:9f:1b:94:f2:a2:ab:19:0e:a8:a2:
6c:5b:f2:29:18:ea:ec:db:e9:59:a7:41:e9:a1:3b:f1:00:60:
67:73:68:8d:18:24:ab:b3:87:be:5b:1a:be:15:1b:89:7f:08:
22:90:94:02:ad:01:b8:6d:01:b8:14:22:7d:db:4f:81:a5:b5:
ea:f3:76:c4:c2:16:76:20:af:c1:24:6e:85:68:b6:b7:64:7e:
13:16:98:3b:50:ae:97:b1:2d:c1:55:9d:b9:13:f8:64:73:12:
9a:f7:1a:08:e6:de:05:13:1c:47:c4:3d:74:06:01:f5:80:9b:
7b:10:cc:52:b8:bc:4c:06:c8:b6:3c:ae:8c:10:06:aa:6b:b7:
be:94:05:dd:33:26:5b:7c:71:24:a9:1f:3a:db:08:52:81:c1:
8c:ac:e7:88:e5:01:2c:71:3c:3f:03:12:c8:a1:95:50:01:de:
9c:0e:01:a2:0a:c5:80:60:08:5a:30:85:70:90:13:4f:fa:01:
9d:c8:33:b4:71:fe:55:3b:f7:62:e6:30:b4:8e:e9:22:39:28:
bd:7d:ce:01:e9:25:ea:61:7a:1a:40:97:16:2a:bd:f1:60:d1:
44:9b:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:03:29 2026 by rpki-client