Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/grN-BSvjKb6ReVifAZl82RchCLM.roa
File: grN-BSvjKb6ReVifAZl82RchCLM.roa (raw, json)
Hash identifier: s41wPAnX2R24h5CGPBWtQqzVfk58tnZcvDzP3dCefC4=
Subject key identifier: 82:B3:7E:05:2B:E3:29:BE:91:79:58:9F:01:99:7C:D9:17:21:08:B3
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019F5A1E6AF9CBC3C22F65ABB5D811CBA19A
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/grN-BSvjKb6ReVifAZl82RchCLM.roa
Signing time: Mon 13 Jul 2026 06:16:10 +0000
ROA not before: Mon 13 Jul 2026 06:16:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2001:3080::/29 maxlen: 29
2001:3280::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:bfc4::/32 maxlen: 32
2a13:de40::/29 maxlen: 29
2a14:6bc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:1e:6a:f9:cb:c3:c2:2f:65:ab:b5:d8:11:cb:a1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 13 06:16:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82b37e052be329be9179589f01997cd9172108b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:94:76:ac:08:b6:a3:f7:23:8e:73:56:4a:
a4:e1:a3:f1:68:4d:73:0d:38:73:fa:a3:05:30:12:
7d:5e:9e:1a:67:da:37:39:8b:05:e3:2c:24:0c:0d:
51:98:4b:0c:e5:47:2e:41:78:e5:09:d9:45:51:9b:
21:a2:58:9d:f1:96:21:74:8e:86:07:03:1a:86:12:
29:8b:7b:f1:4e:2d:90:22:7d:ba:c7:c2:5d:7e:21:
a6:61:36:9f:b3:4d:6b:4f:bc:d9:a2:13:64:32:1d:
c2:77:a3:6c:37:3c:33:6d:5f:1c:bf:f5:b1:2e:52:
f7:1a:d1:75:27:b7:86:c7:0d:1e:08:de:49:31:3c:
06:54:48:57:70:5e:9d:95:68:d0:ce:5f:a4:da:83:
2f:f7:1a:1f:a2:c5:7a:b9:2d:2d:9f:a6:16:f6:3d:
6d:97:47:1a:64:cb:67:d8:15:60:99:ba:71:c5:e8:
c3:ba:f1:71:ea:cf:e9:09:57:e9:b4:60:e4:22:e5:
8c:17:42:d5:b2:e3:f3:e9:14:2e:ef:97:96:d4:2f:
08:10:f5:75:b1:9c:d1:1b:70:e5:69:29:d7:9e:6d:
55:a0:0b:9d:0c:a2:e1:15:75:ee:3b:65:9c:65:d3:
e3:02:4f:6c:e0:bd:7f:c4:0d:5a:40:42:22:80:2a:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B3:7E:05:2B:E3:29:BE:91:79:58:9F:01:99:7C:D9:17:21:08:B3
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/grN-BSvjKb6ReVifAZl82RchCLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2001:3280::/29
2a13:8000::/29
2a13:bfc4::/32
2a13:de40::/29
2a14:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
6e:7d:07:da:6c:61:18:e5:6c:bc:fc:ce:0a:16:70:35:1e:f7:
52:58:0f:1d:6f:8f:9e:57:dc:35:3e:e6:9f:d9:66:ff:21:84:
e4:11:04:dd:c8:3d:69:20:29:ad:5e:e6:d2:3b:94:46:99:a2:
71:b3:90:70:ea:c1:1d:f4:dc:1d:b9:15:6c:0d:90:52:be:a7:
f3:54:bc:12:80:97:01:88:dd:ab:14:14:42:55:4c:22:73:a6:
86:75:c0:53:e8:4d:c5:a8:36:2e:8f:2b:55:3f:7f:2f:89:77:
72:0b:ea:83:cc:80:54:97:a5:a9:fe:60:d4:90:e5:5b:4d:62:
10:31:bc:1c:24:92:cc:d2:a7:27:c4:5b:cd:fd:dd:0a:5b:4b:
a0:24:3a:2b:8d:a6:f3:30:e8:d0:b3:f2:03:57:5a:1b:9c:d3:
bc:3b:dc:48:b4:1d:cd:68:03:90:22:9e:e4:e0:c8:f0:ee:e7:
85:65:bf:b5:ee:1c:cd:a9:a9:10:86:a7:00:e9:0c:db:8d:b7:
dc:a4:76:0e:ef:91:36:5d:ba:c6:7f:e7:26:fe:30:47:59:8a:
4d:f9:f6:48:fb:08:ec:74:3b:63:7c:5f:6f:8f:fb:00:cb:f3:
89:5e:02:b1:d2:91:2d:11:88:77:a2:fa:c9:39:f5:69:13:9d:
6b:44:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:21:43 2026 by rpki-client