Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/sNdqARWHrIivJ5H7hwA3q97sw7k.roa
File: sNdqARWHrIivJ5H7hwA3q97sw7k.roa (raw, json)
Hash identifier: +zXVOVQC6DC5w4FUaPRghjIzJZT/nXVaTwDFgNXd1ko=
Subject key identifier: B0:D7:6A:01:15:87:AC:88:AF:27:91:FB:87:00:37:AB:DE:EC:C3:B9
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 01A0E85624CC85A51D8CAE98FD56E5256FC7
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/sNdqARWHrIivJ5H7hwA3q97sw7k.roa
Signing time: Mon 28 Sep 2026 14:05:54 +0000
ROA not before: Mon 28 Sep 2026 14:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.63.0.0/16 maxlen: 16
2a02:11f8:60::/48 maxlen: 48
2a02:11f8:61::/48 maxlen: 48
2a02:11f8:62::/48 maxlen: 48
2a02:11f8:63::/48 maxlen: 48
2a02:11f8:64::/48 maxlen: 48
2a02:11f8:65::/48 maxlen: 48
2a02:11f8:81::/48 maxlen: 48
2a02:11f8:100::/48 maxlen: 48
2a02:11f8:101::/48 maxlen: 48
2a02:11f8:102::/48 maxlen: 48
2a02:11f8:190::/48 maxlen: 48
2a02:11f8:191::/48 maxlen: 48
2a02:11f8:210::/45 maxlen: 45
2a02:11f8:218::/48 maxlen: 48
2a02:11f8:260::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:56:24:cc:85:a5:1d:8c:ae:98:fd:56:e5:25:6f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Sep 28 14:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0d76a011587ac88af2791fb870037abdeecc3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:c6:fe:23:47:05:d8:3d:b8:99:92:0f:94:
65:9e:b8:68:84:f5:29:4e:c7:0e:8f:5d:20:ae:d5:
b7:da:9a:2f:49:72:7d:df:81:a0:ab:ef:15:0f:5f:
f8:43:d4:40:1d:bd:3a:25:4c:38:28:c9:e4:f5:67:
c6:21:ac:42:a4:c9:2d:e6:3c:98:99:c1:49:fa:59:
69:19:57:4e:09:bb:d2:28:b6:82:4c:10:b4:90:da:
b6:83:61:84:0d:68:7c:2a:ef:06:a3:7a:c8:4b:d3:
8a:48:1d:76:67:24:13:51:ea:1d:64:c5:bb:b0:09:
2a:cc:db:89:dd:a1:6c:53:17:c2:06:a1:46:5d:13:
8c:24:d9:3b:e6:f1:c4:b0:6a:4a:0b:4c:3f:9f:4c:
0a:91:96:75:de:cf:c8:be:f4:36:41:a2:5b:74:52:
03:bf:d9:27:8f:8e:d8:ff:e9:2c:e6:46:14:6d:c7:
8a:16:fe:45:dc:57:1f:3b:a3:46:c9:75:08:60:0f:
d3:6c:29:5b:5e:b0:5c:01:65:08:76:ab:5f:8a:b9:
9b:05:a3:94:4c:fc:e6:05:73:21:c5:71:1a:09:18:
c5:e5:ad:0f:eb:74:82:e2:12:93:23:9a:e8:45:52:
5e:08:ec:42:23:7b:29:cf:11:99:88:8c:cb:a2:d0:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:6A:01:15:87:AC:88:AF:27:91:FB:87:00:37:AB:DE:EC:C3:B9
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/sNdqARWHrIivJ5H7hwA3q97sw7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.63.0.0/16
IPv6:
2a02:11f8:60::-2a02:11f8:65:ffff:ffff:ffff:ffff:ffff
2a02:11f8:81::/48
2a02:11f8:100::-2a02:11f8:102:ffff:ffff:ffff:ffff:ffff
2a02:11f8:190::/47
2a02:11f8:210::-2a02:11f8:218:ffff:ffff:ffff:ffff:ffff
2a02:11f8:260::/47
Signature Algorithm: sha256WithRSAEncryption
dc:73:38:5b:f4:61:d8:e5:3d:e7:a6:25:ef:90:2c:af:78:9c:
20:51:bd:73:2b:a5:9c:8a:e7:2f:db:fc:16:a4:62:2d:f2:92:
76:08:e1:4a:af:c6:41:c6:d5:03:db:bc:1b:f3:f4:d5:5e:2e:
04:d0:c3:77:75:fa:9b:98:1b:03:72:29:ca:c9:1a:12:30:76:
f1:3b:ab:51:18:a3:81:59:2f:10:f5:5e:ee:dc:af:11:ec:1c:
f6:48:0b:a9:a0:90:d2:fb:ad:3b:9e:75:36:36:b7:95:72:8f:
3a:65:3d:ed:15:21:f2:a3:23:3c:f0:5a:4b:8a:bb:ee:16:7d:
48:0c:cb:bf:08:2d:97:55:95:bc:95:56:58:f4:c9:2e:b2:91:
5c:5e:d1:d6:60:9d:27:f9:cc:3d:68:d0:79:b8:f4:bb:f3:06:
15:6e:4e:95:98:d0:96:9c:55:7b:e2:a2:9e:dd:a8:92:fd:01:
28:dd:5c:2d:f3:06:9e:3c:7b:e1:ea:ba:19:18:82:c8:96:d3:
af:de:43:99:5a:62:bc:f1:2c:2e:c3:cb:9f:cf:ba:a7:dc:56:
ee:30:95:6d:9a:3f:2d:76:48:20:ef:2a:0f:ad:6e:ca:72:08:
54:ab:29:58:62:98:5f:e9:10:e3:d2:94:0b:eb:53:43:fb:e9:
79:01:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:31 2026 by rpki-client