Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/RYIwjfpRMfBMQDFTK7vfU--In_g.roa
File: RYIwjfpRMfBMQDFTK7vfU--In_g.roa (raw, json)
Hash identifier: cIdgfW8IsntjH04wDcigH3hH3gJZxYJ3SMeDMuNQKkI=
Subject key identifier: 45:82:30:8D:FA:51:31:F0:4C:40:31:53:2B:BB:DF:53:EF:88:9F:F8
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D8D9671DB3334EC54FC38404650B3B27A
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/RYIwjfpRMfBMQDFTK7vfU--In_g.roa
Signing time: Tue 14 Apr 2026 20:02:20 +0000
ROA not before: Tue 14 Apr 2026 20:02:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a13:de40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 13:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:96:71:db:33:34:ec:54:fc:38:40:46:50:b3:b2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 14 20:02:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4582308dfa5131f04c4031532bbbdf53ef889ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:be:87:f7:af:a8:3a:a8:98:57:3c:61:9b:
ba:55:5c:b9:03:fe:ff:3a:36:e9:a5:bc:52:40:94:
c6:26:ab:ef:12:62:f5:4c:2d:ac:2f:3c:bb:37:96:
f5:58:38:b0:5f:4d:e8:1b:fd:4a:d0:0f:dd:fe:d6:
2f:e9:03:38:81:77:9b:c6:25:78:f7:25:76:c2:b5:
ef:6c:2a:d4:c3:22:82:f6:0f:be:1e:5b:bc:53:19:
fc:c2:ab:e2:1a:bd:7c:b8:1d:68:d7:12:4a:cd:48:
89:25:6a:ba:5a:7a:fe:5d:a5:4e:74:dd:36:3d:fa:
47:84:e5:ed:f6:b1:da:b6:d7:d1:a2:55:59:2c:64:
86:4e:80:66:fb:0b:0e:13:32:d5:57:df:f0:e9:1a:
37:cc:17:93:0b:5d:5b:17:e4:6c:e4:0e:de:2b:56:
ab:a3:89:89:bb:15:54:1c:10:59:88:c6:68:47:fd:
98:d0:35:75:0d:0c:c6:ca:18:1f:ed:01:1e:cb:c4:
cc:57:ca:89:d6:d4:92:6e:d7:f8:2d:51:c8:9b:e7:
41:6e:98:46:f6:71:86:99:ad:5c:77:8c:c1:39:bd:
fc:9a:1c:bc:d5:14:0a:8b:65:34:d5:2a:77:9e:69:
80:97:f7:2b:32:00:7e:82:14:9a:68:10:1c:30:9c:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:82:30:8D:FA:51:31:F0:4C:40:31:53:2B:BB:DF:53:EF:88:9F:F8
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/RYIwjfpRMfBMQDFTK7vfU--In_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:de40::/29
Signature Algorithm: sha256WithRSAEncryption
20:fb:2a:5b:17:42:43:9b:76:d9:12:38:46:42:c5:0b:6b:f0:
c3:48:16:47:8a:2b:37:80:e1:42:b6:08:eb:90:bd:21:2b:ca:
71:8a:01:e6:f6:fd:ea:bb:61:97:aa:79:6b:6d:ef:bd:e4:fd:
e9:2b:8a:bd:94:d6:47:a3:ab:41:74:c7:2e:0a:fb:60:61:3d:
59:9d:c6:bb:66:c7:f2:32:68:32:4f:7b:14:65:b2:b2:35:5f:
56:43:c2:46:6e:52:50:49:dc:f4:d1:c8:43:ce:27:ec:b4:53:
95:23:75:ee:06:ca:57:7b:ca:51:1d:40:4c:fd:10:4b:b7:fd:
f8:a9:c1:50:e6:27:5c:30:4a:48:26:16:7a:41:32:a3:6e:ca:
a5:26:5f:e5:fe:3e:92:b6:b7:d4:d1:88:ab:af:21:3c:ca:fd:
17:dc:1e:3f:a6:ef:f3:32:17:19:91:81:5c:c1:c8:3b:dd:96:
85:81:bb:fc:30:25:43:ac:d6:40:9a:bf:9b:69:bd:2b:37:96:
3f:a7:73:7c:13:09:e7:8f:50:42:d9:db:05:86:5d:b5:04:07:
a4:c4:62:1f:20:c5:5f:cb:e7:4d:68:34:49:d9:f9:d6:03:b2:
ce:53:57:f9:1f:f4:d4:47:a5:6f:f4:e3:e6:ea:0a:82:ac:59:
57:2a:75:35
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ2NlnHbMzTsVPw4QEZQs7J6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNDE0MjAwMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTgyMzA4ZGZhNTEzMWYwNGM0MDMxNTMyYmJiZGY1M2VmODg5ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjS+h/evqDqomFc8YZu6VVy5A/7/
OjbppbxSQJTGJqvvEmL1TC2sLzy7N5b1WDiwX03oG/1K0A/d/tYv6QM4gXebxiV4
9yV2wrXvbCrUwyKC9g++Hlu8Uxn8wqviGr18uB1o1xJKzUiJJWq6Wnr+XaVOdN02
PfpHhOXt9rHattfRolVZLGSGToBm+wsOEzLVV9/w6Ro3zBeTC11bF+Rs5A7eK1ar
o4mJuxVUHBBZiMZoR/2Y0DV1DQzGyhgf7QEey8TMV8qJ1tSSbtf4LVHIm+dBbphG
9nGGma1cd4zBOb38mhy81RQKi2U01Sp3nmmAl/crMgB+ghSaaBAcMJyQ3wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEWCMI36UTHwTEAxUyu731PviJ/4MB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvUllJd2pmcFJNZkJNUURGVEs3dmZVLS1Jbl9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPeQDAN
BgkqhkiG9w0BAQsFAAOCAQEAIPsqWxdCQ5t22RI4RkLFC2vww0gWR4orN4DhQrYI
65C9ISvKcYoB5vb96rthl6p5a23vveT96SuKvZTWR6OrQXTHLgr7YGE9WZ3Gu2bH
8jJoMk97FGWysjVfVkPCRm5SUEnc9NHIQ84n7LRTlSN17gbKV3vKUR1ATP0QS7f9
+KnBUOYnXDBKSCYWekEyo27KpSZf5f4+kra31NGIq68hPMr9F9weP6bv8zIXGZGB
XMHIO92WhYG7/DAlQ6zWQJq/m2m9KzeWP6dzfBMJ549QQtnbBYZdtQQHpMRiHyDF
X8vnTWg0Sdn51gOyzlNX+R/01Eelb/Tj5uoKgqxZVyp1NQ==
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:54 2026 by rpki-client