Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/fJ9_1D9f3ZapeNMY9fWKsmBO_bY.roa
File: fJ9_1D9f3ZapeNMY9fWKsmBO_bY.roa (raw, json)
Hash identifier: tC/h8tsrU2CAW9HfqvPOk6sGqBf479lnziEzCXSoH70=
Subject key identifier: 7C:9F:7F:D4:3F:5F:DD:96:A9:78:D3:18:F5:F5:8A:B2:60:4E:FD:B6
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019A0BEA69717C1065003FA07AC8C8C56CF8
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/fJ9_1D9f3ZapeNMY9fWKsmBO_bY.roa
Signing time: Wed 22 Oct 2025 12:35:03 +0000
ROA not before: Wed 22 Oct 2025 12:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:3080::/29 maxlen: 29
2a0b:3e00::/29 maxlen: 29
2a0c:8340::/29 maxlen: 29
2a0e:a780::/32 maxlen: 32
2a0e:a781::/36 maxlen: 36
2a13:8000::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
2a14:6bc0::/29 maxlen: 29
2a14:72c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ea:69:71:7c:10:65:00:3f:a0:7a:c8:c8:c5:6c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Oct 22 12:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c9f7fd43f5fdd96a978d318f5f58ab2604efdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:38:01:2f:98:b5:a3:8f:ae:b8:2d:3e:00:e6:
26:d8:5e:21:df:91:1d:bc:ec:93:0d:0d:7a:43:ab:
c0:59:b0:8b:0f:b8:d4:32:85:4b:41:d1:06:eb:9a:
f4:07:fc:79:fb:a3:5e:78:f1:37:a5:9a:44:6b:16:
50:b8:d1:9f:6e:c6:74:7c:55:24:d9:c1:4c:49:5d:
cd:d9:be:b1:0d:9b:12:80:f3:c5:6d:46:1b:77:91:
4d:9f:09:2b:7d:2d:85:36:e9:6b:41:85:d6:52:e6:
d6:c4:6d:df:cd:6b:86:a3:83:46:d0:e4:78:21:d6:
11:0d:16:75:23:7d:98:21:03:2c:26:9a:b8:82:d3:
02:2e:37:20:9a:fc:98:12:57:99:2a:74:4a:85:bd:
cf:09:e8:09:67:d9:d4:76:9f:17:72:02:54:ae:37:
41:3a:87:e8:42:b0:00:8d:83:66:c6:91:38:67:be:
17:16:a2:7b:ea:70:31:6f:41:1e:d4:a6:cb:33:bd:
6f:08:a9:38:79:5e:87:e1:b5:ad:ba:02:19:72:33:
81:49:42:6a:6a:1f:60:23:7a:23:2b:2e:c5:5a:0d:
1f:63:58:9c:d3:e4:ca:5f:7a:81:c6:b9:62:9d:47:
f9:e4:22:8c:00:e1:d4:69:bc:af:eb:6b:0c:a5:a9:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:7F:D4:3F:5F:DD:96:A9:78:D3:18:F5:F5:8A:B2:60:4E:FD:B6
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/fJ9_1D9f3ZapeNMY9fWKsmBO_bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2a0b:3e00::/29
2a0c:8340::/29
2a0e:a780::-2a0e:a781:fff:ffff:ffff:ffff:ffff:ffff
2a13:8000::/29
2a14:35c0::/29
2a14:6bc0::/29
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:0e:7d:42:fd:91:f1:21:0f:43:dd:31:ec:77:ff:66:4b:59:
e1:dc:d7:28:35:cf:0d:44:d9:d6:33:ed:3a:a1:7b:8c:a0:72:
e1:1e:ba:4a:6d:e7:48:4f:72:1e:07:04:9f:49:7d:d4:e8:26:
de:e0:ae:68:cb:d0:ef:dd:41:c9:ef:9f:c2:f1:5e:e1:bb:10:
05:65:68:e3:38:ca:72:22:ad:7b:44:72:0b:95:15:78:80:90:
7a:b0:91:c1:db:0f:13:41:e6:ce:b1:89:83:bb:a7:b2:26:e6:
dc:d0:d7:28:76:20:ed:cf:cb:64:9b:96:2f:a6:ae:b4:1e:8e:
34:51:b0:02:7d:f0:9f:99:2c:fb:bb:fe:5d:fa:d3:83:a0:43:
e7:cf:b4:72:dd:39:e7:86:c8:dc:ef:3a:a4:ae:06:d4:bc:ef:
5b:1b:c4:91:f6:27:12:1e:1e:6f:69:b4:58:ba:9d:15:02:99:
15:f9:27:44:69:87:71:ed:a4:cd:31:a6:14:c5:93:a6:dd:36:
7b:21:cc:a9:08:8b:df:b3:d5:05:61:b5:80:0d:f3:53:20:91:
87:7e:a4:13:61:55:e4:81:c4:29:42:a1:53:9d:bb:f2:a3:08:
ef:96:d3:3d:e3:97:3a:68:90:ff:e6:f4:2e:12:17:c6:3c:a9:
47:04:a5:6f
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZoL6mlxfBBlAD+gesjIxWz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjUxMDIyMTIzNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzlmN2ZkNDNmNWZkZDk2YTk3OGQzMThmNWY1OGFiMjYwNGVmZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTgBL5i1o4+uuC0+AOYm2F4h35Ed
vOyTDQ16Q6vAWbCLD7jUMoVLQdEG65r0B/x5+6NeePE3pZpEaxZQuNGfbsZ0fFUk
2cFMSV3N2b6xDZsSgPPFbUYbd5FNnwkrfS2FNulrQYXWUubWxG3fzWuGo4NG0OR4
IdYRDRZ1I32YIQMsJpq4gtMCLjcgmvyYEleZKnRKhb3PCegJZ9nUdp8XcgJUrjdB
OofoQrAAjYNmxpE4Z74XFqJ76nAxb0Ee1KbLM71vCKk4eV6H4bWtugIZcjOBSUJq
ah9gI3ojKy7FWg0fY1ic0+TKX3qBxrlinUf55CKMAOHUabyv62sMpan1rwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFHyff9Q/X92WqXjTGPX1irJgTv22MB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvZko5XzFEOWYzWmFwZU5NWTlmV0tzbUJPX2JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAAjBCAwUDIAEwgAMF
AyoLPgADBQMqDINAMA8DBQcqDqeAAwYEKg6ngQADBQMqE4AAAwUDKhQ1wAMFAyoU
a8ADBQMqFHLAMA0GCSqGSIb3DQEBCwUAA4IBAQAQDn1C/ZHxIQ9D3THsd/9mS1nh
3NcoNc8NRNnWM+06oXuMoHLhHrpKbedIT3IeBwSfSX3U6Cbe4K5oy9Dv3UHJ75/C
8V7huxAFZWjjOMpyIq17RHILlRV4gJB6sJHB2w8TQebOsYmDu6eyJubc0NcodiDt
z8tkm5Yvpq60Ho40UbACffCfmSz7u/5d+tODoEPnz7Ry3Tnnhsjc7zqkrgbUvO9b
G8SR9icSHh5vabRYup0VApkV+SdEaYdx7aTNMaYUxZOm3TZ7IcypCIvfs9UFYbWA
DfNTIJGHfqQTYVXkgcQpQqFTnbvyowjvltM945c6aJD/5vQuEhfGPKlHBKVv
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:00 2025 by rpki-client