Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/cbod8T-kZlikRq3LeFGefidEURA.roa
File: cbod8T-kZlikRq3LeFGefidEURA.roa (raw, json)
Hash identifier: aSy5zxb/U6h4osrQnmgMwfZXWE/lcFtOIfKr5xh6JnY=
Subject key identifier: 71:BA:1D:F1:3F:A4:66:58:A4:46:AD:CB:78:51:9E:7E:27:44:51:10
Certificate issuer: /CN=56b4cb426c3f40255021c9e0d47dc83017aabb13
Certificate serial: 01A0803D34000588F6F627722DDBD1A2954A
Authority key identifier: 56:B4:CB:42:6C:3F:40:25:50:21:C9:E0:D4:7D:C8:30:17:AA:BB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/cbod8T-kZlikRq3LeFGefidEURA.roa
Signing time: Tue 08 Sep 2026 08:58:09 +0000
ROA not before: Tue 08 Sep 2026 08:58:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16236
IP address blocks: 185.59.176.0/22 maxlen: 22
2a02:6d20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:3d:34:00:05:88:f6:f6:27:72:2d:db:d1:a2:95:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b4cb426c3f40255021c9e0d47dc83017aabb13
Validity
Not Before: Sep 8 08:58:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ba1df13fa46658a446adcb78519e7e27445110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:63:10:5f:d5:15:0b:a2:31:69:c6:8b:f3:
0b:32:84:f8:40:0a:94:f1:24:92:20:a7:f4:ac:4d:
8a:af:7e:72:dc:63:1e:8e:5b:f7:44:3f:f7:b4:8a:
02:8e:1d:47:39:a7:50:59:c0:c8:ef:53:39:3b:50:
eb:9c:62:9f:79:62:0f:e5:a9:a3:4f:28:db:87:13:
9f:c4:16:3d:5b:b1:2c:f8:dc:72:7b:48:d9:5e:d8:
75:01:77:f3:42:88:1d:8a:7c:c5:4a:a0:5c:08:3a:
9b:88:36:be:83:7c:c3:bb:7e:86:95:86:e1:cd:a4:
9d:0c:48:0d:f5:a3:98:08:a4:c8:d4:3e:0a:96:35:
27:66:06:97:2a:eb:92:3d:08:7c:8b:bb:f8:28:c0:
4f:42:40:ab:eb:48:55:8c:c6:16:4d:bb:a2:45:56:
3b:e9:23:b3:58:22:9f:06:2d:cd:db:89:d5:5d:b9:
4e:93:ac:5c:db:a2:5a:5e:c0:4f:77:ea:bb:89:8d:
80:c3:c1:56:85:0a:4d:87:5d:fa:26:9f:3b:d8:1d:
2c:89:ed:97:a2:af:12:02:aa:d2:bc:40:25:13:39:
f5:ae:5d:20:3e:5d:1f:c2:57:bd:0e:68:d8:b5:e1:
b7:7f:22:07:42:6e:5b:11:54:e0:81:21:92:55:62:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BA:1D:F1:3F:A4:66:58:A4:46:AD:CB:78:51:9E:7E:27:44:51:10
X509v3 Authority Key Identifier:
keyid:56:B4:CB:42:6C:3F:40:25:50:21:C9:E0:D4:7D:C8:30:17:AA:BB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/cbod8T-kZlikRq3LeFGefidEURA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.176.0/22
IPv6:
2a02:6d20::/32
Signature Algorithm: sha256WithRSAEncryption
7a:cf:53:0d:08:2b:00:7a:1b:18:98:ac:04:f8:46:3c:27:19:
4b:52:ad:9e:9b:0c:a6:ca:8f:f9:56:26:d0:0b:11:1f:d4:91:
6e:8a:80:b4:c6:f0:06:26:92:7e:61:36:b0:a8:c7:5a:e4:d6:
68:e0:5e:a1:bb:b9:bd:7e:13:aa:f6:7e:25:60:b5:a6:45:30:
45:2c:5f:39:8d:d2:92:03:59:e4:84:63:7e:f9:90:8c:c0:ba:
3c:ad:0a:0c:3c:3d:de:5e:37:ad:b7:8b:3b:90:4e:cf:e8:42:
91:4a:98:31:53:63:ab:d8:69:6c:b8:ce:a8:20:ca:ae:5e:78:
7a:c5:c6:5e:7c:eb:b3:ca:4a:01:83:ba:c6:d0:b0:5e:b9:31:
42:24:61:20:62:ce:92:7f:31:94:24:ac:ad:e0:7c:34:31:a3:
b9:8e:dd:99:58:e1:89:a8:fd:d6:b9:b6:6f:13:f3:b0:66:a7:
af:5f:63:2e:62:43:0e:16:e7:1f:5b:d8:29:d3:60:e0:76:96:
93:92:80:31:cb:9d:c8:72:b9:e5:88:6b:3f:16:c2:43:c9:ab:
0f:2e:b3:a8:1c:0f:36:88:6a:53:65:39:94:a0:78:44:43:be:
fc:59:74:c2:76:c7:41:bb:88:28:83:f9:db:90:d2:6b:35:0d:
f8:87:7e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:46 2026 by rpki-client