Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rPipkXEDpKlmHXVu6A2VEAhiTo0.roa
File: rPipkXEDpKlmHXVu6A2VEAhiTo0.roa (raw, json)
Hash identifier: zEdpM4O0K+t4gO5fwCfTb7pIPqmbQjGPynFqeCZgI90=
Subject key identifier: AC:F8:A9:91:71:03:A4:A9:66:1D:75:6E:E8:0D:95:10:08:62:4E:8D
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D766455C394300C6D3B0CBC73F50628B9
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rPipkXEDpKlmHXVu6A2VEAhiTo0.roa
Signing time: Fri 10 Apr 2026 07:56:20 +0000
ROA not before: Fri 10 Apr 2026 07:56:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212508
IP address blocks: 176.97.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:64:55:c3:94:30:0c:6d:3b:0c:bc:73:f5:06:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 10 07:56:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acf8a9917103a4a9661d756ee80d951008624e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:bd:f5:85:fe:60:cb:8c:4e:b2:02:51:a2:
2c:71:d7:b6:07:6b:8c:79:b8:ee:34:6a:ab:e2:0c:
26:61:1c:d8:04:3f:cd:e2:61:77:05:76:3c:d4:61:
28:ef:98:a6:83:00:f4:3e:44:67:03:22:c9:1a:0d:
c9:06:f4:4f:bd:fe:38:ba:4b:36:cc:0a:7c:7c:6b:
78:f3:48:9e:0d:05:ee:c7:75:a0:96:5e:79:62:89:
fb:c7:64:35:c0:99:d4:12:75:d5:b8:a2:91:35:5f:
84:95:15:ec:d3:20:9c:e9:79:4d:91:b8:10:68:f8:
7b:3e:d8:f2:ab:fc:b0:a4:30:bd:5a:c8:73:d3:8c:
21:61:50:cb:f4:20:f1:7e:f3:14:9d:56:05:be:dc:
db:d6:c5:fb:ef:8c:13:ca:cf:97:d0:a5:88:bf:1b:
f5:d6:39:c9:13:b9:51:3c:96:b0:da:38:7b:7e:eb:
66:19:ad:d4:ec:c8:15:0b:eb:8d:e2:80:99:4a:19:
24:87:20:1b:29:1b:29:5e:5d:3d:0b:e7:74:22:dd:
8c:0c:45:a4:03:da:03:b3:a9:0e:8e:73:ec:45:d6:
62:d2:13:8d:38:f3:85:45:f3:ca:b4:db:57:dc:45:
cf:8b:57:0c:82:fa:a2:ca:b0:fc:bd:dc:90:85:d7:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F8:A9:91:71:03:A4:A9:66:1D:75:6E:E8:0D:95:10:08:62:4E:8D
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rPipkXEDpKlmHXVu6A2VEAhiTo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.212.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f4:1c:86:e8:29:f4:e1:66:ec:12:c4:69:d6:22:79:07:30:
cc:dc:e0:ef:d8:6d:75:fe:53:f8:02:98:ef:0e:82:0f:d2:58:
46:74:be:21:4e:8f:f2:43:9d:74:b1:b6:45:ed:5e:75:95:8f:
6e:9e:6e:0a:26:45:0c:d6:1a:8b:06:62:29:ea:b0:07:b1:82:
4b:f2:e2:9b:12:26:aa:bb:08:94:fc:a1:0d:84:2c:54:9d:33:
e4:bc:cb:bd:33:55:4c:e3:20:57:64:8b:b6:a6:ca:4b:52:af:
c5:4e:0b:31:da:6e:a4:53:15:f8:41:29:74:a0:bc:7a:f8:5b:
82:93:46:ba:fe:db:ec:76:4e:07:0b:bf:81:08:4a:f3:d1:b1:
f7:9b:58:08:2b:7f:17:8d:88:79:e8:b4:f5:2e:71:84:a1:77:
fe:11:72:4e:8c:b6:9d:5d:9b:0a:30:74:17:6e:bf:d1:29:40:
c2:5c:22:e9:91:41:f6:5e:dc:21:82:55:76:97:28:86:0f:32:
6b:49:d1:ed:0f:c6:65:3a:c3:bc:f2:60:fe:93:da:0e:27:84:
d2:82:a8:50:67:9c:f9:ca:00:66:5a:fe:e1:82:02:f9:d9:e4:
d7:d9:9f:18:6a:c8:84:eb:ba:dd:7f:98:71:a6:b5:fd:ce:9c:
56:1f:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:15 2026 by rpki-client