Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/nYTTko0yzBIHKxH6eeFOWh926uI.roa
File: nYTTko0yzBIHKxH6eeFOWh926uI.roa (raw, json)
Hash identifier: PiK9fYR1PMt4O9R8RIq6kietEU4NLdwTsVMw7+3f+ho=
Subject key identifier: 9D:84:D3:92:8D:32:CC:12:07:2B:11:FA:79:E1:4E:5A:1F:76:EA:E2
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A07C6EA3E629D7A437CEDDF6B70D26D79B
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/nYTTko0yzBIHKxH6eeFOWh926uI.roa
Signing time: Mon 07 Sep 2026 15:13:40 +0000
ROA not before: Mon 07 Sep 2026 15:13:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398465
IP address blocks: 2001:3380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:6e:a3:e6:29:d7:a4:37:ce:dd:f6:b7:0d:26:d7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 7 15:13:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d84d3928d32cc12072b11fa79e14e5a1f76eae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:b0:78:be:48:f2:32:47:df:14:fc:7d:a7:
16:d3:37:0f:b1:81:2a:e8:4c:9c:f3:d7:20:af:b3:
f7:72:73:2f:f6:c8:68:61:81:ed:c5:f6:23:f9:6c:
15:b4:f5:72:b1:3b:56:73:84:e4:cf:06:46:85:fd:
c2:03:57:66:a2:63:ac:a1:fb:6b:d7:a4:94:b5:75:
a2:e5:68:6c:f6:3e:bb:70:50:99:b4:9b:93:b8:de:
00:f2:65:2d:8e:75:13:7e:dd:75:ee:d7:40:04:d4:
6a:56:f4:00:5d:25:58:6c:b4:c0:32:77:e3:70:d1:
f1:90:d5:79:b9:78:76:37:2d:ae:c8:46:80:e4:29:
a2:a2:fd:18:b5:71:10:5f:e4:5e:6d:3e:ca:71:85:
17:26:82:87:65:8b:ba:b8:0a:99:14:48:93:60:4b:
a6:0d:2e:15:ff:3c:dd:e8:87:87:14:2b:79:f2:1c:
da:8c:e0:fe:a6:a0:a9:83:27:5b:11:48:04:98:3c:
44:f6:db:49:d1:bf:23:c1:06:29:22:4b:49:17:81:
16:ee:a6:e4:06:0f:b3:13:8d:da:ac:e5:cc:07:9e:
a2:05:b1:27:93:2d:95:15:7d:e5:41:79:5b:5a:17:
79:c5:f8:11:0c:d9:f5:af:e0:b0:43:ae:07:48:11:
b1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:84:D3:92:8D:32:CC:12:07:2B:11:FA:79:E1:4E:5A:1F:76:EA:E2
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/nYTTko0yzBIHKxH6eeFOWh926uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3380::/29
Signature Algorithm: sha256WithRSAEncryption
2f:67:90:ee:8f:61:8f:6d:7c:7a:7e:43:5b:87:66:c4:2c:91:
4c:17:0e:76:9e:71:2f:4f:f7:59:73:ef:97:f9:93:00:bf:0b:
b1:3e:d2:ce:1f:99:3e:90:b8:ee:dc:aa:3f:b4:db:05:fa:36:
51:b9:4c:e1:06:2d:a0:5b:f6:e8:82:91:5d:4d:fb:06:18:e4:
59:bb:26:e2:09:82:98:6b:29:4b:71:cc:b1:35:90:70:58:07:
ef:7d:a6:12:c0:8b:cd:29:28:40:0a:7f:38:26:95:26:fe:82:
38:42:9a:f9:65:8d:49:fd:21:b7:db:f3:9d:ee:b4:84:2c:77:
47:08:3a:7a:a6:6c:7c:15:c5:b2:fb:a8:d8:6a:7c:b6:08:f5:
96:df:fb:64:2d:03:12:fa:ea:3b:92:bb:86:1d:ed:e1:fd:78:
b3:fb:bf:f4:aa:01:53:71:cd:2e:6c:23:55:45:8d:10:7f:e8:
a8:16:c3:11:7f:a9:95:48:cc:0a:fb:80:34:9b:11:f6:d4:7d:
58:1d:7a:18:e6:0a:ff:d0:23:4d:00:cf:62:5b:40:e0:d5:ef:
73:33:cd:ac:cd:1f:0e:78:a4:af:cf:28:c3:c8:d3:01:c8:01:
f8:a7:ff:f5:81:50:0a:6b:b4:0f:4f:47:b1:4c:4f:28:32:f0:
be:1f:cf:41
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaB8bqPmKdekN87d9rcNJtebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwOTA3MTUxMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDg0ZDM5MjhkMzJjYzEyMDcyYjExZmE3OWUxNGU1YTFmNzZlYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI6weL5I8jJH3xT8facW0zcPsYEq
6Eyc89cgr7P3cnMv9shoYYHtxfYj+WwVtPVysTtWc4TkzwZGhf3CA1dmomOsoftr
16SUtXWi5Whs9j67cFCZtJuTuN4A8mUtjnUTft117tdABNRqVvQAXSVYbLTAMnfj
cNHxkNV5uXh2Ny2uyEaA5Cmiov0YtXEQX+RebT7KcYUXJoKHZYu6uAqZFEiTYEum
DS4V/zzd6IeHFCt58hzajOD+pqCpgydbEUgEmDxE9ttJ0b8jwQYpIktJF4EW7qbk
Bg+zE43arOXMB56iBbEnky2VFX3lQXlbWhd5xfgRDNn1r+CwQ64HSBGxcQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJ2E05KNMswSBysR+nnhTlofduriMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvbllUVGtvMHl6QklIS3hINmVlRk9XaDkyNnVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAEzgDAN
BgkqhkiG9w0BAQsFAAOCAQEAL2eQ7o9hj218en5DW4dmxCyRTBcOdp5xL0/3WXPv
l/mTAL8LsT7Szh+ZPpC47tyqP7TbBfo2UblM4QYtoFv26IKRXU37BhjkWbsm4gmC
mGspS3HMsTWQcFgH732mEsCLzSkoQAp/OCaVJv6COEKa+WWNSf0ht9vzne60hCx3
Rwg6eqZsfBXFsvuo2Gp8tgj1lt/7ZC0DEvrqO5K7hh3t4f14s/u/9KoBU3HNLmwj
VUWNEH/oqBbDEX+plUjMCvuANJsR9tR9WB16GOYK/9AjTQDPYltA4NXvczPNrM0f
Dnikr88ow8jTAcgB+Kf/9YFQCmu0D09HsUxPKDLwvh/PQQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:56 2026 by rpki-client