Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/iBpR0KZNHJ2m8EBiTnw6u7Pzegw.roa
File: iBpR0KZNHJ2m8EBiTnw6u7Pzegw.roa (raw, json)
Hash identifier: 9MD7FYwLE22Dk1mlz7VNCLctdwQgB0iSKbLviaz9IKw=
Subject key identifier: 88:1A:51:D0:A6:4D:1C:9D:A6:F0:40:62:4E:7C:3A:BB:B3:F3:7A:0C
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A05CFBFA2C7EC0CB190BC249317F16C49D
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/iBpR0KZNHJ2m8EBiTnw6u7Pzegw.roa
Signing time: Tue 01 Sep 2026 12:40:12 +0000
ROA not before: Tue 01 Sep 2026 12:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 146.255.189.0/24 maxlen: 24
212.46.33.0/24 maxlen: 24
2001:3180::/29 maxlen: 29
2a0e:a780::/29 maxlen: 29
2a10:6c40::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:ddc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:fb:fa:2c:7e:c0:cb:19:0b:c2:49:31:7f:16:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 1 12:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=881a51d0a64d1c9da6f040624e7c3abbb3f37a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:c7:5a:20:24:db:68:05:da:93:60:45:e5:
53:8e:2e:6f:85:9a:fa:3e:87:51:7d:9f:f5:91:65:
b2:ab:70:94:79:ef:39:e8:45:cf:4d:6d:f5:52:a1:
06:32:de:13:48:fd:60:5c:83:6f:48:ef:e8:de:05:
83:12:24:87:ef:59:08:0a:6f:5b:b0:93:63:be:c3:
e2:76:6f:1d:17:1f:cf:d5:a8:77:1c:4c:1a:7f:47:
b7:ce:2d:31:e9:04:bf:dc:a5:0c:24:fd:9d:23:ef:
c7:f7:a5:8f:8e:7c:80:e8:d2:b9:bc:5d:e1:f5:af:
c5:81:78:57:a6:bb:19:a9:aa:a6:2a:b3:df:c0:16:
dd:d1:ae:cd:72:93:6c:40:b2:41:a4:2f:33:a5:be:
cc:38:c0:aa:4b:f5:ae:43:a3:14:92:60:57:34:dd:
ee:2b:ad:4f:b6:4b:f8:c0:a2:8b:d5:81:ba:5f:ed:
b5:3c:bd:42:06:d7:f9:29:3b:44:82:2d:17:fb:60:
be:85:3a:0e:a7:92:29:8f:8e:ca:a7:8f:6b:14:e4:
32:48:e9:20:46:e9:d5:e3:93:b8:c8:7d:f2:eb:74:
93:66:02:bb:0e:8e:da:15:19:c4:b6:da:c2:ee:07:
6d:30:ec:4c:d3:a6:38:5d:e4:cf:35:23:64:6a:f1:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1A:51:D0:A6:4D:1C:9D:A6:F0:40:62:4E:7C:3A:BB:B3:F3:7A:0C
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/iBpR0KZNHJ2m8EBiTnw6u7Pzegw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.189.0/24
212.46.33.0/24
IPv6:
2001:3180::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:b840::/29
2a13:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:0f:6f:af:36:89:a8:99:fc:18:a6:2c:b0:7f:ad:56:d7:10:
bc:81:fb:7c:9f:06:be:50:ac:48:0c:a6:cf:26:43:3e:ed:f8:
fc:bd:91:06:44:75:47:c6:0a:a1:15:73:23:41:c3:90:c6:c5:
7d:b0:55:21:e7:2f:f3:b2:35:e3:55:30:09:73:96:cf:3b:ef:
ca:34:7c:39:39:28:75:7d:4a:9e:7b:3e:21:36:60:5b:e5:6a:
67:26:1a:a8:d8:ed:e3:99:36:d5:f4:69:15:c4:5f:12:18:aa:
d8:12:3e:31:53:66:54:3c:70:57:ab:21:cc:09:4b:5b:f4:9f:
14:3c:d6:c9:75:da:65:c1:58:37:26:52:b5:d9:d6:ff:4c:ff:
18:82:f2:90:65:9f:98:ac:54:a7:b6:d6:75:06:ab:3f:b8:db:
75:f7:ba:85:ff:d0:57:9d:5b:8b:bd:67:0d:47:69:f6:b4:08:
b5:0f:f0:56:86:46:5c:df:ef:c0:76:eb:00:dd:dd:05:62:1e:
7d:e7:a0:2a:42:0b:5b:55:87:18:2c:a6:91:f2:06:4d:35:da:
eb:08:a4:29:fd:f3:89:9d:da:d4:72:0b:60:50:6c:7f:71:cb:
8d:f8:63:89:95:7d:f2:c7:22:5c:e4:42:2e:40:f5:3c:47:8c:
3e:8f:5c:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAaBc+/osfsDLGQvCSTF/FsSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwOTAxMTI0MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODFhNTFkMGE2NGQxYzlkYTZmMDQwNjI0ZTdjM2FiYmIzZjM3YTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CjHWiAk22gF2pNgReVTji5vhZr6
PodRfZ/1kWWyq3CUee856EXPTW31UqEGMt4TSP1gXINvSO/o3gWDEiSH71kICm9b
sJNjvsPidm8dFx/P1ah3HEwaf0e3zi0x6QS/3KUMJP2dI+/H96WPjnyA6NK5vF3h
9a/FgXhXprsZqaqmKrPfwBbd0a7NcpNsQLJBpC8zpb7MOMCqS/WuQ6MUkmBXNN3u
K61Ptkv4wKKL1YG6X+21PL1CBtf5KTtEgi0X+2C+hToOp5Ipj47Kp49rFOQySOkg
RunV45O4yH3y63STZgK7Do7aFRnEttrC7gdtMOxM06Y4XeTPNSNkavE4NQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFIgaUdCmTRydpvBAYk58Oruz83oMMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvaUJwUjBLWk5ISjJtOEVCaVRudzZ1N1B6ZWd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTASBAIAATAMAwQAkv+9AwQA
1C4hMDcEAgACMDEDBQMgATGAAwUDKg6ngAMFAyoQbEADBQMqEJYAAwUDKhOAAAMF
AyoTuEADBQMqE93AMA0GCSqGSIb3DQEBCwUAA4IBAQB/D2+vNomomfwYpiywf61W
1xC8gft8nwa+UKxIDKbPJkM+7fj8vZEGRHVHxgqhFXMjQcOQxsV9sFUh5y/zsjXj
VTAJc5bPO+/KNHw5OSh1fUqeez4hNmBb5WpnJhqo2O3jmTbV9GkVxF8SGKrYEj4x
U2ZUPHBXqyHMCUtb9J8UPNbJddplwVg3JlK12db/TP8YgvKQZZ+YrFSnttZ1Bqs/
uNt197qF/9BXnVuLvWcNR2n2tAi1D/BWhkZc3+/AdusA3d0FYh5956AqQgtbVYcY
LKaR8gZNNdrrCKQp/fOJndrUcgtgUGx/ccuN+GOJlX3yxyJc5EIuQPU8R4w+j1zs
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:20 2026 by rpki-client