Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wRmRvjpfs_zxEiw1aviQH0WDATE.roa
File: wRmRvjpfs_zxEiw1aviQH0WDATE.roa (raw, json)
Hash identifier: /OjF6B7qDEMHkyCVPcq7B+UBgPYT7IAmvOq7pxPRSSk=
Subject key identifier: C1:19:91:BE:3A:5F:B3:FC:F1:12:2C:35:6A:F8:90:1F:45:83:01:31
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A0A8C8CEFFB1EF6B53AA10E14F5D8426F7
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wRmRvjpfs_zxEiw1aviQH0WDATE.roa
Signing time: Wed 16 Sep 2026 05:55:27 +0000
ROA not before: Wed 16 Sep 2026 05:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3080::/29 maxlen: 29
2001:3280::/29 maxlen: 29
2a10:6c40::/29 maxlen: 32
2a13:d2c0::/32 maxlen: 32
2a13:d2c4::/32 maxlen: 32
2a13:d2c6::/32 maxlen: 32
2a13:d2c7::/32 maxlen: 32
2a13:de40::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
2a14:6bc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:c8:ce:ff:b1:ef:6b:53:aa:10:e1:4f:5d:84:26:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 16 05:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c11991be3a5fb3fcf1122c356af8901f45830131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:50:06:04:29:20:45:29:53:c7:fe:25:2e:
42:13:57:76:8a:ec:98:55:ab:0f:f1:30:36:71:6c:
5e:7e:1b:b2:74:e8:a1:a7:f2:01:68:98:e1:5a:97:
7e:2f:23:3a:8d:66:fa:3f:36:a7:ff:04:b5:da:72:
69:39:50:00:17:6c:91:f2:0d:13:d0:4f:78:25:92:
70:4e:12:b7:85:d6:82:01:45:50:bb:88:dd:70:34:
cc:75:4c:6a:5e:71:62:b8:6c:74:86:ab:ed:1e:34:
99:ec:3f:85:11:11:0e:6c:48:97:5d:84:40:04:65:
52:17:5a:48:12:d3:22:cc:2f:ca:47:f3:3c:3e:35:
96:13:8f:91:7a:93:95:b7:b3:db:4a:5b:a8:97:3e:
9f:93:47:fd:4b:06:28:8b:b6:1b:59:3c:81:a6:86:
a3:38:b0:5e:44:b0:af:d2:7a:f4:7f:fb:17:9e:44:
bf:7a:88:4b:41:cc:d1:95:d6:09:56:e5:aa:4d:18:
cc:9d:a1:c8:a7:ee:8a:eb:00:0c:a1:fb:ff:ca:ef:
84:3f:d5:7a:a3:a0:f7:80:6f:75:9e:60:25:a2:1c:
44:93:2e:ce:fa:bc:95:ec:01:db:b8:be:65:97:74:
2c:c7:e4:fd:53:27:76:e3:3d:b4:32:5b:3d:02:1c:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:91:BE:3A:5F:B3:FC:F1:12:2C:35:6A:F8:90:1F:45:83:01:31
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wRmRvjpfs_zxEiw1aviQH0WDATE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2001:3280::/29
2a10:6c40::/29
2a13:d2c0::/32
2a13:d2c4::/32
2a13:d2c6::/31
2a13:de40::/29
2a14:6bc0::/32
2a14:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
87:12:0b:39:fd:05:71:00:30:9e:e9:1b:74:e7:60:f4:20:05:
fb:b2:c9:d3:d6:39:5d:43:94:7d:29:3c:45:56:c2:a8:65:ea:
41:7c:a2:ed:1e:34:f9:6e:03:04:2a:3a:4e:c7:98:db:9b:58:
00:50:43:fd:1e:94:ae:8d:c3:6d:f3:48:dd:d5:ba:e4:d8:e6:
dc:42:16:05:76:31:12:7c:ef:23:9e:0e:e9:fd:61:b1:c5:ce:
f1:3d:dd:77:33:e3:2f:37:6b:ce:28:f6:2b:45:fa:1a:3b:15:
e8:d2:6b:9d:e6:11:0f:ce:f2:b0:83:4d:02:f2:64:36:d5:d8:
a2:fe:d5:03:3b:f5:39:1d:39:13:94:be:1b:94:cb:c2:81:08:
f5:32:2a:b0:71:ed:b2:71:d5:d5:3b:49:40:54:5b:f3:cd:8d:
52:12:03:cc:a4:61:d7:d8:e9:af:07:09:db:12:d9:32:d3:2f:
c2:d9:f3:c8:0f:25:4c:2a:ca:1c:c7:8d:9b:3b:5c:29:31:3a:
e6:3b:9a:81:6f:29:18:98:36:7e:6a:7a:13:e1:d9:52:7e:6b:
c9:c7:ed:a7:32:e4:d3:99:c6:6e:1c:e1:32:a2:80:56:6c:b8:
14:6f:59:04:17:af:53:c2:41:b0:65:fa:77:3d:c6:99:d1:5a:
29:17:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:59 2026 by rpki-client