Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Y4iednas802UZ96nYbW6F0bhO9U.roa
File: Y4iednas802UZ96nYbW6F0bhO9U.roa (raw, json)
Hash identifier: oixyymTnVVwxHQe1zywXZ0eLfRZCH2J96Zfp36FMLyI=
Subject key identifier: 63:88:9E:76:76:AC:F3:4D:94:67:DE:A7:61:B5:BA:17:46:E1:3B:D5
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D394171AF377A72006B1F91063B5AAABA
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Y4iednas802UZ96nYbW6F0bhO9U.roa
Signing time: Sun 29 Mar 2026 11:01:23 +0000
ROA not before: Sun 29 Mar 2026 11:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2001:3080::/29 maxlen: 32
2001:3280::/29 maxlen: 32
2a0e:a780::/29 maxlen: 32
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 32
2a13:8000::/29 maxlen: 32
2a13:b840::/29 maxlen: 32
2a13:ddc0::/29 maxlen: 32
2a14:5840::/29 maxlen: 32
2a14:6bc0::/29 maxlen: 32
2a14:72c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:71:af:37:7a:72:00:6b:1f:91:06:3b:5a:aa:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Mar 29 11:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63889e7676acf34d9467dea761b5ba1746e13bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:3f:ba:eb:17:c5:9f:85:17:43:c3:d1:14:
77:e0:b2:c2:70:7a:dd:14:df:bc:b1:05:4c:3d:ba:
cb:b7:16:eb:bb:c6:b7:75:ca:fb:fc:ea:18:6d:82:
12:55:67:75:cd:af:08:8e:1d:0f:39:32:bf:07:c7:
d0:08:0f:eb:f9:87:90:18:38:77:6e:0c:99:73:ea:
ee:ef:8d:40:d4:34:91:f4:03:b6:ef:81:95:fa:be:
f2:b3:67:cc:93:91:4a:3d:95:97:36:a2:ea:b0:0f:
9d:a8:46:dc:9b:b4:df:08:69:17:98:2b:f8:c0:84:
84:4e:8c:57:74:76:74:c5:00:ee:c4:fc:7e:21:b6:
18:54:c1:d6:b3:ff:9b:38:a5:f8:2d:56:f1:de:5a:
08:cb:1a:9c:2a:39:8d:96:04:54:a5:af:70:7c:2a:
f9:45:a8:fe:a6:3f:d8:37:65:6d:5b:33:a4:d6:cd:
18:da:9a:50:f3:1a:61:0f:26:71:41:ca:9c:9b:aa:
de:eb:d6:36:f3:45:8d:77:ba:33:e7:43:82:65:a2:
37:20:3b:0c:29:c5:30:6f:b7:db:20:de:01:60:7c:
89:d6:7c:e1:85:4b:64:e0:76:42:db:c8:8f:69:44:
a3:19:50:23:4f:45:93:2b:72:6c:69:f7:39:f0:bb:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:88:9E:76:76:AC:F3:4D:94:67:DE:A7:61:B5:BA:17:46:E1:3B:D5
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Y4iednas802UZ96nYbW6F0bhO9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2001:3280::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:b840::/29
2a13:ddc0::/29
2a14:5840::/29
2a14:6bc0::/29
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:35:a2:bf:cc:73:68:cb:88:1a:97:26:e2:c6:c5:1d:cd:52:
6a:a6:93:85:aa:25:c3:ee:ff:15:c8:1a:95:45:1e:af:ba:69:
e6:60:c2:44:57:44:53:7c:be:4d:27:d2:1e:d1:66:e0:87:44:
90:08:6a:3f:f5:0c:01:f4:34:0e:14:01:7d:18:fd:0e:7f:25:
84:bf:e4:94:45:02:4f:a6:ef:3d:d5:07:01:02:20:b2:99:01:
c0:93:4a:a3:31:97:03:c1:03:84:2f:08:aa:e6:59:6e:e5:5a:
84:9f:26:a1:fb:32:1c:48:29:89:48:4a:a1:76:ce:90:ae:b3:
07:38:b6:8f:d5:20:d8:f8:94:df:01:6e:c6:85:b3:42:1c:e1:
dd:1c:e6:fe:5e:75:39:a6:b2:4a:69:1f:a1:02:1c:44:2c:82:
f3:6b:2f:c0:a3:73:50:2a:86:c8:b0:c1:38:5c:f8:26:f1:3c:
34:2a:07:b5:52:26:a7:2d:c1:ae:de:52:a1:ba:91:a3:e2:26:
e5:87:44:d0:a3:78:64:a1:5a:00:a0:51:e7:c3:0f:76:cf:ab:
9a:79:51:37:f1:bf:31:ec:36:fc:2b:ac:64:0b:00:f4:58:45:
f5:e3:e9:9a:66:68:b4:9d:b1:07:c7:9b:a5:dc:62:67:3f:e3:
e9:8d:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:05 2026 by rpki-client