Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2imjjZ_oazOgxH-Ivb9Lk_mDYXU.roa
File: 2imjjZ_oazOgxH-Ivb9Lk_mDYXU.roa (raw, json)
Hash identifier: XwK/UBFTEYDFXDnzc+SFhfq+CghcggxyZTLuvHCdvi8=
Subject key identifier: DA:29:A3:8D:9F:E8:6B:33:A0:C4:7F:88:BD:BF:4B:93:F9:83:61:75
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A05CF93C2F303F6191AD9EB69078499E5B
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2imjjZ_oazOgxH-Ivb9Lk_mDYXU.roa
Signing time: Tue 01 Sep 2026 12:37:12 +0000
ROA not before: Tue 01 Sep 2026 12:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2001:3080::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:f9:3c:2f:30:3f:61:91:ad:9e:b6:90:78:49:9e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 1 12:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da29a38d9fe86b33a0c47f88bdbf4b93f9836175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:52:e5:be:be:f3:f2:6d:2a:0a:ad:a2:b7:
ae:c1:54:0c:c8:cf:c9:b5:10:b5:57:3c:33:98:71:
48:d2:14:3d:b1:4f:13:28:a2:12:78:a3:f6:12:46:
96:96:f4:a6:6a:aa:b6:44:c2:ff:27:03:9f:83:c5:
f0:d8:59:f3:2e:55:00:7e:c3:89:19:b7:6c:a2:56:
3e:03:02:8d:fd:73:f8:e0:e2:4d:7c:fd:86:8e:2f:
90:ec:5f:2e:34:db:56:6d:96:73:32:54:98:14:e8:
82:50:1e:61:75:52:b1:b2:bc:55:6f:40:ce:24:95:
f3:2b:b8:8c:38:0c:f1:2d:8d:35:81:8b:16:5b:38:
04:58:65:76:6e:34:de:c1:95:e6:ec:29:67:93:a2:
e7:d6:4c:74:2e:14:78:d2:22:02:9f:46:1b:c7:cb:
ae:8b:e9:c1:16:e8:0e:a4:a1:93:2d:c2:de:63:4d:
8f:a6:05:ab:9e:85:d8:ff:7f:74:b9:73:37:66:9d:
4a:96:ff:51:86:b3:77:94:84:37:56:7f:3f:b6:da:
a7:e8:a5:b0:68:87:2f:e8:0c:47:32:f0:41:86:15:
06:f9:aa:6a:12:48:b9:37:33:f3:ab:b5:78:38:38:
be:2b:e9:fb:91:25:98:06:f3:5a:02:f5:30:53:42:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:29:A3:8D:9F:E8:6B:33:A0:C4:7F:88:BD:BF:4B:93:F9:83:61:75
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2imjjZ_oazOgxH-Ivb9Lk_mDYXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2a13:de40::/29
Signature Algorithm: sha256WithRSAEncryption
84:ba:96:c2:cd:5f:ee:0f:cc:fd:89:0b:e9:51:93:16:44:39:
2d:13:2f:03:83:b0:ed:f1:b1:68:c7:4a:d3:ff:54:df:77:ee:
1c:89:e6:66:13:69:7e:90:15:dc:00:9a:5d:f7:78:9c:e5:f7:
0f:c4:26:f6:e3:e8:70:1a:42:39:c4:dd:9a:93:d5:0c:02:6d:
a7:24:43:4b:7a:d6:cc:4a:b9:76:21:c6:35:ff:29:b9:bd:95:
fe:35:70:eb:11:de:ec:4b:a5:44:5e:20:14:52:65:c8:b0:d8:
1a:87:d3:25:72:02:89:a0:0a:c7:cf:7d:35:85:b4:0b:95:b1:
a0:62:3c:bb:3c:2a:f3:0a:9d:7d:e1:e8:32:87:74:bc:2c:1c:
b1:ac:47:6d:f3:df:0b:1f:ea:51:65:ad:ce:1e:34:7a:a2:c0:
d9:09:d5:8f:63:e7:20:87:fe:c0:fc:ea:ed:1e:03:30:8a:cd:
e4:cb:52:18:7e:d3:d2:b2:c4:db:fc:25:14:08:2c:bc:f2:d7:
5e:d6:de:d8:b5:3d:86:c2:8c:f1:ab:99:54:51:87:4d:e8:e9:
a6:cf:ab:ef:39:64:a9:57:55:2e:da:4d:9b:f4:f8:84:0d:26:
26:00:0b:5c:96:6a:55:2c:6a:53:80:39:08:98:74:19:dd:d3:
ae:dd:60:54
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaBc+TwvMD9hka2etpB4SZ5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwOTAxMTIzNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTI5YTM4ZDlmZTg2YjMzYTBjNDdmODhiZGJmNGI5M2Y5ODM2MTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsxS5b6+8/JtKgqtoreuwVQMyM/J
tRC1VzwzmHFI0hQ9sU8TKKISeKP2EkaWlvSmaqq2RML/JwOfg8Xw2FnzLlUAfsOJ
GbdsolY+AwKN/XP44OJNfP2Gji+Q7F8uNNtWbZZzMlSYFOiCUB5hdVKxsrxVb0DO
JJXzK7iMOAzxLY01gYsWWzgEWGV2bjTewZXm7Clnk6Ln1kx0LhR40iICn0Ybx8uu
i+nBFugOpKGTLcLeY02PpgWrnoXY/390uXM3Zp1Klv9RhrN3lIQ3Vn8/ttqn6KWw
aIcv6AxHMvBBhhUG+apqEki5NzPzq7V4ODi+K+n7kSWYBvNaAvUwU0Kk9QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNopo42f6GszoMR/iL2/S5P5g2F1MB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvMmltampaX29hek9neEgtSXZiOUxrX21EWVhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDIAEwgAMF
AyoT3kAwDQYJKoZIhvcNAQELBQADggEBAIS6lsLNX+4PzP2JC+lRkxZEOS0TLwOD
sO3xsWjHStP/VN937hyJ5mYTaX6QFdwAml33eJzl9w/EJvbj6HAaQjnE3ZqT1QwC
backQ0t61sxKuXYhxjX/Kbm9lf41cOsR3uxLpUReIBRSZciw2BqH0yVyAomgCsfP
fTWFtAuVsaBiPLs8KvMKnX3h6DKHdLwsHLGsR23z3wsf6lFlrc4eNHqiwNkJ1Y9j
5yCH/sD86u0eAzCKzeTLUhh+09KyxNv8JRQILLzy117W3ti1PYbCjPGrmVRRh03o
6abPq+85ZKlXVS7aTZv0+IQNJiYAC1yWalUsalOAOQiYdBnd067dYFQ=
-----END CERTIFICATE-----
Generated at Thu Sep 3 15:57:09 2026 by rpki-client