Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/_56EI7i67kIhdZVnGu7maV7p54c.roa
File: _56EI7i67kIhdZVnGu7maV7p54c.roa (raw, json)
Hash identifier: eUNEnSAcT1+5gUfatTKRRGCIvbvqNrrieuRXNapfT2Q=
Subject key identifier: FF:9E:84:23:B8:BA:EE:42:21:75:95:67:1A:EE:E6:69:5E:E9:E7:87
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019FA4232819727DC7D4B99C7E18832CADAE
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/_56EI7i67kIhdZVnGu7maV7p54c.roa
Signing time: Mon 27 Jul 2026 15:13:15 +0000
ROA not before: Mon 27 Jul 2026 15:13:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402511
IP address blocks: 2a09:8140::/29 maxlen: 29
2a12:3000::/29 maxlen: 29
2a12:4480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:23:28:19:72:7d:c7:d4:b9:9c:7e:18:83:2c:ad:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 27 15:13:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff9e8423b8baee42217595671aeee6695ee9e787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:fa:8e:6f:d4:c2:47:9b:cd:76:5e:41:d4:
3a:f3:92:d5:2b:09:48:68:0c:fb:96:11:56:66:5c:
e4:e1:9b:0f:52:2b:d3:ee:9e:c3:66:f2:16:d7:b9:
ba:4e:14:ce:67:9b:c5:bc:2e:dc:c1:79:9b:82:5a:
d9:13:59:cb:50:e3:20:85:25:04:83:7b:42:ed:1a:
b5:37:77:99:2d:64:07:bc:36:66:cc:08:db:a2:7c:
60:2f:e7:79:a7:10:7f:4d:91:30:8b:bd:3f:fc:b6:
e3:0f:63:e9:eb:c8:73:75:e0:e1:2b:d8:6b:a3:f2:
91:b4:5f:dd:0d:ef:fc:a5:99:6c:a9:9c:f7:1d:24:
bf:ef:d2:17:6a:e9:a4:61:67:94:73:56:46:3a:75:
fd:d4:12:36:79:e3:1c:bf:16:82:38:04:7a:e5:c5:
f2:41:5a:46:7f:14:28:95:54:32:e8:9a:81:7d:b0:
4d:5a:ad:29:d0:35:e3:c8:36:11:66:22:3f:6b:6c:
3d:b5:ce:93:7a:b1:35:ea:3c:76:63:6d:ef:37:e5:
1e:81:91:67:7c:cc:b6:99:f9:80:e3:14:cc:c6:8e:
e0:17:f6:c3:4e:11:6c:43:3f:14:30:79:dd:f1:a9:
62:e4:8a:7a:05:af:1f:51:b9:37:eb:6c:2b:86:5c:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:84:23:B8:BA:EE:42:21:75:95:67:1A:EE:E6:69:5E:E9:E7:87
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/_56EI7i67kIhdZVnGu7maV7p54c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:8140::/29
2a12:3000::/29
2a12:4480::/29
Signature Algorithm: sha256WithRSAEncryption
9d:9f:f8:db:e0:37:22:70:74:ad:e3:8f:de:b3:a1:c2:0d:9d:
06:3a:15:6f:69:e5:35:b5:73:4f:61:cc:4a:2c:ba:41:0e:51:
69:17:b8:e1:61:40:e5:5d:e1:5d:74:e8:23:0d:0a:79:10:98:
5d:66:dd:1d:c8:4a:2f:53:ad:b7:a9:09:23:29:82:45:b4:7a:
a0:75:ac:9b:9b:b1:ab:c6:4e:a8:66:79:bb:20:56:b5:4a:00:
25:a7:1e:4d:23:e8:32:cf:f5:91:a6:bd:bc:44:8f:d4:ae:51:
19:dc:30:60:95:57:d6:00:29:3f:37:d1:cf:00:ab:70:07:09:
64:7f:82:5f:13:70:ba:97:eb:52:3d:85:6d:df:ba:d1:ab:6f:
2a:43:59:c8:f5:bb:0b:f6:12:6d:2c:2d:33:07:95:34:ea:f6:
cb:93:7c:4c:1c:10:24:ab:d2:5a:4d:b4:03:42:1a:5c:a6:9b:
d7:cc:41:18:11:06:ac:c8:dc:ad:59:da:c9:aa:a2:ed:ee:00:
66:1d:37:17:34:be:cb:6d:8b:76:64:9c:ad:18:a8:df:95:cd:
fb:f5:9e:5f:98:71:dc:cf:b9:8a:29:d7:a3:ce:f9:9d:59:a5:
b1:66:c9:de:32:8b:3d:35:83:77:ea:32:76:83:c4:59:cf:f6:
6f:68:5a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:48:01 2026 by rpki-client