Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/mebNYbjLIqcdcdZZZVFgD7A0eUA.roa
File: mebNYbjLIqcdcdZZZVFgD7A0eUA.roa (raw, json)
Hash identifier: nwBGa6/RTs8PNGsGD+3c6blU6BDaLwNcduZ2FM5pKxs=
Subject key identifier: 99:E6:CD:61:B8:CB:22:A7:1D:71:D6:59:65:51:60:0F:B0:34:79:40
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A113C257FD02171CE377C34B53523F0A22
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/mebNYbjLIqcdcdZZZVFgD7A0eUA.roa
Signing time: Wed 07 Oct 2026 00:27:45 +0000
ROA not before: Wed 07 Oct 2026 00:27:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57050
IP address blocks: 212.81.56.0/22 maxlen: 24
212.81.56.0/24 maxlen: 24
212.81.57.0/24 maxlen: 24
212.81.58.0/24 maxlen: 24
212.81.59.0/24 maxlen: 24
2a10:fa80:10::/48 maxlen: 48
2a10:fa80:56::/47 maxlen: 48
2a10:fa80:56::/48 maxlen: 48
2a10:fa80:57::/48 maxlen: 48
2a10:fa80:58::/47 maxlen: 48
2a10:fa80:58::/48 maxlen: 48
2a10:fa80:59::/48 maxlen: 48
2a10:fa80:92::/48 maxlen: 48
2a10:fa80:212::/48 maxlen: 48
2a10:fa80:216::/48 maxlen: 48
2a10:fa80:3000::/36 maxlen: 36
2a10:fa81:2800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:c2:57:fd:02:17:1c:e3:77:c3:4b:53:52:3f:0a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 7 00:27:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99e6cd61b8cb22a71d71d6596551600fb0347940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:b5:33:54:0f:ea:45:6c:1c:7a:7e:09:2c:
4a:18:80:48:12:c6:6c:2b:94:0f:1f:39:09:9c:d0:
7f:d1:2d:c5:04:83:c9:55:4c:ae:15:07:c9:9c:35:
c5:72:91:4a:8d:9c:d0:7f:a4:f8:aa:26:0b:59:10:
a0:8b:30:d2:d0:96:db:99:42:e6:1c:37:cd:24:56:
4a:b5:fb:33:72:d9:00:49:70:e9:c2:2f:3a:2f:0f:
de:a9:b7:32:36:e1:23:cf:8a:2b:01:bd:ae:0d:ce:
2b:67:f0:bc:b9:59:19:be:a1:ac:de:80:ca:df:72:
d5:d3:fa:67:b3:f3:89:30:d8:cf:22:00:62:86:2c:
1a:b9:3c:55:3e:40:13:8f:62:0a:86:d0:1e:a0:c6:
b9:36:d7:51:a1:fb:d1:16:64:51:73:7b:73:4a:c0:
2b:0a:61:d6:b6:e8:e4:20:14:9e:9c:0a:94:66:ea:
48:10:09:90:72:42:92:3d:bd:5d:80:60:4d:4c:fe:
65:f2:ba:42:4d:cb:bd:97:09:1e:ad:54:0d:d8:c9:
e5:3e:30:84:58:82:2c:07:24:7c:0e:76:87:30:87:
29:b9:53:76:0e:2f:25:3c:91:09:a3:fa:3a:1c:cd:
01:c1:13:44:08:01:80:0d:92:22:f4:38:d6:6d:e6:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:CD:61:B8:CB:22:A7:1D:71:D6:59:65:51:60:0F:B0:34:79:40
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/mebNYbjLIqcdcdZZZVFgD7A0eUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.56.0/22
IPv6:
2a10:fa80:10::/48
2a10:fa80:56::-2a10:fa80:59:ffff:ffff:ffff:ffff:ffff
2a10:fa80:92::/48
2a10:fa80:212::/48
2a10:fa80:216::/48
2a10:fa80:3000::/36
2a10:fa81:2800::/40
Signature Algorithm: sha256WithRSAEncryption
2f:cb:29:e2:2b:2b:af:af:81:54:63:95:e4:67:86:35:b9:c9:
2a:77:e7:e2:cd:67:fb:b0:45:30:b2:73:6b:55:63:ed:9c:50:
6b:4e:4e:36:84:28:2a:a5:19:cf:ec:a6:e8:28:32:43:c2:1a:
54:d3:a4:1e:c0:71:fa:80:7b:e2:81:aa:3e:d5:64:b8:7d:23:
cb:a3:1f:22:50:52:ed:f6:97:45:5c:3e:9f:4b:a4:b8:7e:4a:
d4:5c:7e:c0:84:de:ba:72:f8:e6:67:d0:e7:f7:aa:b2:12:32:
6a:e8:e5:73:52:3c:18:54:28:e0:23:a4:16:8f:6f:a6:f4:7c:
21:66:b7:cf:eb:bf:b2:c1:bf:94:11:2b:9e:d3:f0:9f:c2:0c:
10:50:cb:eb:01:a3:48:df:f8:ab:0f:a0:ce:0f:a8:fc:5c:01:
fa:ab:a3:80:fa:9f:32:18:90:64:dc:f1:84:c1:7d:1a:04:2f:
87:04:fa:7a:3b:cb:c9:32:8b:62:91:21:87:3c:5c:e3:76:5c:
0e:cb:27:f3:68:a6:94:cc:a2:da:4e:fa:7c:7c:4d:81:cd:86:
e8:76:aa:db:1b:04:a8:3c:90:31:88:6b:ce:01:70:ff:2e:90:
e8:b9:ac:ea:4f:63:a8:01:5c:ca:35:11:60:cf:a0:6d:4b:60:
b3:ea:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:51:44 2026 by rpki-client