Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jm7RfuveAbagFJAeJDcKJ3wGd5c.roa
File: jm7RfuveAbagFJAeJDcKJ3wGd5c.roa (raw, json)
Hash identifier: eRHF7kABTR89dPyo5IkjpYfBMiKD1TvwBWUA7K6ocz4=
Subject key identifier: 8E:6E:D1:7E:EB:DE:01:B6:A0:14:90:1E:24:37:0A:27:7C:06:77:97
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D39417112F0394B954726FBBEC36A8A1F
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jm7RfuveAbagFJAeJDcKJ3wGd5c.roa
Signing time: Sun 29 Mar 2026 11:01:23 +0000
ROA not before: Sun 29 Mar 2026 11:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a13:de40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 11:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:71:12:f0:39:4b:95:47:26:fb:be:c3:6a:8a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Mar 29 11:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e6ed17eebde01b6a014901e24370a277c067797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:ee:86:3d:37:83:f2:45:c4:95:26:c8:ae:
4c:d4:35:f5:5e:49:3f:d8:a1:2b:35:b3:45:79:7b:
59:04:46:40:e7:1c:6a:fe:41:bd:6c:aa:d6:73:ad:
8b:c8:81:f8:91:18:75:ee:27:b2:8c:48:02:f5:d7:
da:42:08:b0:a3:d3:63:c3:98:47:1c:00:19:4b:81:
c8:c5:23:39:82:c8:88:ee:fc:b8:55:55:b8:fa:23:
e1:b7:c5:f9:5d:61:92:c9:be:57:c5:5b:02:2a:77:
75:cc:c1:82:34:d6:f9:f5:eb:bc:75:4f:70:1b:98:
98:47:1b:73:ed:b9:0a:af:39:e5:4d:7d:60:62:f8:
3c:ac:d4:8e:d1:98:f4:51:a1:d0:57:5d:3e:52:d7:
9c:27:b8:81:af:24:92:97:c0:a4:91:2a:ea:56:1f:
da:eb:d1:3c:c4:9f:ad:19:3f:f4:fa:d8:1f:0e:bf:
ed:4e:e7:a7:56:31:85:1c:12:cd:24:c4:bc:11:b4:
31:5c:01:09:98:6e:3e:3b:f2:47:06:e2:98:af:db:
63:4d:9d:1b:80:6c:3c:4b:3a:fa:8e:73:cf:0b:bd:
79:7c:e6:33:86:62:c4:7e:3e:5f:79:7f:c6:ea:e8:
8a:ef:58:80:a3:93:93:da:8a:4b:7e:f1:b4:86:a0:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:D1:7E:EB:DE:01:B6:A0:14:90:1E:24:37:0A:27:7C:06:77:97
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jm7RfuveAbagFJAeJDcKJ3wGd5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:de40::/29
Signature Algorithm: sha256WithRSAEncryption
87:c7:67:61:49:9c:ab:e3:3a:99:bb:37:c1:cf:d5:67:6c:a2:
5a:40:88:4e:b6:b9:27:de:10:9d:13:d5:bc:df:8d:17:4f:81:
17:67:11:0b:7c:fd:0f:0b:8a:36:7b:88:78:81:27:88:0f:3d:
0d:a6:e6:4c:62:ad:1a:b4:6b:b9:21:ab:2f:28:97:b5:1b:0a:
00:c2:fa:0a:6e:7a:55:36:28:f9:d3:aa:56:76:d1:8f:f0:59:
8d:03:cd:ea:84:c4:49:cc:ce:b6:8c:99:77:37:ce:8d:94:68:
c2:f5:f3:8a:6c:ea:cc:b4:2f:f2:e8:ff:b0:33:d3:2e:4a:91:
9d:88:63:39:f2:97:db:8c:77:a4:7e:b6:35:a9:d8:8f:af:c8:
dd:ec:a4:f8:39:df:53:6c:5b:f2:a5:73:77:e9:d3:26:60:58:
f2:2b:ae:c4:a4:36:03:af:0b:55:cc:9d:f2:ae:f7:c1:8b:10:
ac:1e:93:9b:2c:5b:06:b2:67:4e:03:40:16:8c:3f:40:55:cf:
48:e9:b9:13:cc:27:ac:85:e3:c4:55:08:e6:68:38:34:0c:30:
a1:ac:5a:63:7b:51:6d:fa:5a:57:f1:d2:dd:ae:df:a1:fb:8c:
3b:e1:49:c6:40:c2:7c:4c:d3:9a:48:af:b4:8a:8a:36:65:fb:
1a:85:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:25 2026 by rpki-client