Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/r0i46SuYw9ahF-LWNTcNP4P8oh4.roa
File: r0i46SuYw9ahF-LWNTcNP4P8oh4.roa (raw, json)
Hash identifier: rPoDqZqGepDGywKaOyaxp23YkBuiF5q+Uw+Kf/RKxPc=
Subject key identifier: AF:48:B8:E9:2B:98:C3:D6:A1:17:E2:D6:35:37:0D:3F:83:FC:A2:1E
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A19D899DD4305C43E8C13EAD82E598B4CC
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/r0i46SuYw9ahF-LWNTcNP4P8oh4.roa
Signing time: Mon 02 Nov 2026 18:33:24 +0000
ROA not before: Mon 02 Nov 2026 18:33:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a13:bfc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:89:9d:d4:30:5c:43:e8:c1:3e:ad:82:e5:98:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Nov 2 18:33:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af48b8e92b98c3d6a117e2d635370d3f83fca21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:e1:07:8b:75:fa:0f:a8:5f:3d:26:53:c2:
57:10:39:e2:53:e8:15:fd:55:60:66:06:96:e9:62:
c8:e5:7a:92:1b:c2:a3:b3:2e:55:20:1f:52:77:52:
c4:0f:2e:92:10:78:1a:40:c0:28:fe:a5:f1:ab:12:
40:f9:f9:7e:91:79:06:2b:4e:1f:77:4f:4d:ca:de:
40:bf:a6:6b:4a:78:ec:ba:1b:94:65:5e:b9:46:e0:
94:dd:ef:38:74:e2:61:aa:2e:de:39:c7:ab:2b:cc:
89:99:77:d1:e9:f2:52:5f:98:1d:59:83:bb:fb:31:
99:a8:46:94:62:a1:2a:66:6b:44:e2:38:52:ba:32:
bf:c0:63:bb:87:f6:00:36:14:04:d3:a1:5d:f9:03:
4b:38:e0:37:58:01:21:9d:36:3d:69:5c:4a:e1:f0:
45:0b:6b:77:fb:96:7b:ea:3b:15:47:52:ac:50:36:
3f:40:b9:7f:a4:86:ef:af:16:5a:ee:2d:13:c3:bb:
aa:da:fc:3e:e2:16:6d:9c:3a:6a:ed:12:fb:b5:f2:
fd:b5:80:27:ff:96:6b:a2:2d:3d:78:49:55:71:40:
85:69:26:71:a1:45:8f:f4:8a:c0:dd:73:e8:52:83:
53:f7:46:00:99:a5:3c:0d:c1:d3:5d:40:98:6a:99:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:48:B8:E9:2B:98:C3:D6:A1:17:E2:D6:35:37:0D:3F:83:FC:A2:1E
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/r0i46SuYw9ahF-LWNTcNP4P8oh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bfc7::/32
Signature Algorithm: sha256WithRSAEncryption
2b:29:e6:48:85:bf:1e:37:c5:2b:8b:0e:aa:ad:73:c1:f3:c5:
e8:9e:20:b3:ec:25:7b:c8:a3:4d:4c:95:59:1a:40:a6:2d:8c:
dd:6a:b6:e2:bf:04:ed:07:80:81:49:f1:d0:e9:f4:72:78:9f:
d3:0a:c6:3d:db:66:e3:07:e9:64:88:47:5d:9b:f3:ea:2b:2f:
7f:09:cc:cd:70:e2:d6:cd:1d:4c:cb:63:9a:0a:7f:7c:89:42:
f6:25:ce:bc:20:25:cb:44:7a:f9:11:b8:e9:bf:78:c2:71:d6:
23:f1:17:36:f3:b8:f7:23:b3:85:f8:0c:75:fc:56:22:d0:99:
69:e9:af:07:52:b8:4b:49:a5:91:fc:9a:2d:84:b2:22:c4:1b:
76:48:5d:1b:84:11:52:26:30:aa:1e:1d:25:0c:30:f3:a6:2d:
1c:cb:0c:c3:87:35:7b:94:45:f8:9a:fa:6e:b0:60:a5:0b:2d:
cb:a5:6b:ff:58:0e:9c:2f:a9:8b:d0:c0:72:8a:00:f8:d7:1e:
7b:48:55:79:c3:ed:34:8f:41:67:62:8d:d8:e5:cd:a3:71:dc:
9b:a2:0a:b7:1a:88:9a:26:74:57:b3:f9:ef:71:0e:09:c3:31:
49:ec:cf:08:2d:e4:27:46:b9:aa:e2:0f:1e:90:e0:b5:d8:4f:
64:be:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:41:33 2026 by rpki-client