Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2026xc8o830752KCEuwt3oCtX8s.roa
File: 2026xc8o830752KCEuwt3oCtX8s.roa (raw, json)
Hash identifier: S40AHewgx8Gi3GPUKnrg4N0oW9FYcSglD/IFVPPHZzU=
Subject key identifier: DB:4D:BA:C5:CF:28:F3:7D:3B:E7:62:82:12:EC:2D:DE:80:AD:5F:CB
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019F0046EEF31416F2240D4103C9D12687B2
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2026xc8o830752KCEuwt3oCtX8s.roa
Signing time: Thu 25 Jun 2026 19:34:36 +0000
ROA not before: Thu 25 Jun 2026 19:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3180::/29 maxlen: 29
2001:3280::/29 maxlen: 32
2001:3380::/29 maxlen: 29
2a0e:a780::/29 maxlen: 32
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 29
2a13:8000::/29 maxlen: 32
2a13:b840::/29 maxlen: 32
2a13:c040::/29 maxlen: 29
2a13:d2c6::/32 maxlen: 32
2a13:d2c7::/32 maxlen: 32
2a13:ddc0::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6b40::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:00:46:ee:f3:14:16:f2:24:0d:41:03:c9:d1:26:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 25 19:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db4dbac5cf28f37d3be7628212ec2dde80ad5fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:89:b7:6b:06:79:e4:b1:ab:97:d2:06:f6:
72:17:9e:d7:70:e2:ce:a4:95:88:9c:c3:9f:a1:0e:
af:27:9c:d8:cf:22:a6:76:bb:32:86:12:3b:78:b1:
19:6f:2a:09:0f:ff:5f:47:b9:d4:87:c7:40:df:10:
68:1d:55:6d:57:ec:79:d3:3f:7f:5c:6a:55:5d:b7:
58:5d:dd:42:de:bb:0d:53:ff:dd:9e:43:19:87:c0:
43:b6:13:a9:d3:af:38:b2:b8:12:98:ba:a1:1b:f0:
f4:8f:f3:c5:a7:44:2b:36:4b:9f:05:f9:ba:68:72:
a7:84:6a:5d:17:cf:90:ad:e1:52:3b:ee:87:d0:86:
14:f1:a4:9d:e5:18:b5:66:f9:79:6f:fd:93:e3:d0:
7e:e8:b7:39:5a:80:2d:9b:91:f2:f6:29:72:45:d6:
6a:05:d6:42:41:fd:7f:0a:95:b4:e9:4a:29:95:a8:
bc:97:48:76:0c:90:56:d4:27:66:f0:8c:cb:e3:ee:
b8:a4:8f:c1:d1:11:c6:a9:32:f7:cb:c6:cf:a0:4f:
1a:72:f5:ed:ec:cb:49:2f:f2:71:4b:23:ca:45:dd:
49:08:fd:57:b0:75:72:2d:11:f3:e0:c3:de:58:13:
26:23:43:c7:ff:dc:d8:fb:07:25:60:03:c4:d2:69:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:BA:C5:CF:28:F3:7D:3B:E7:62:82:12:EC:2D:DE:80:AD:5F:CB
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2026xc8o830752KCEuwt3oCtX8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3180::/29
2001:3280::/29
2001:3380::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:b840::/29
2a13:c040::/29
2a13:d2c6::/31
2a13:ddc0::/29
2a13:de40::/29
2a14:6ac0::/29
2a14:6b40::/29
2a14:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
43:e0:fa:0f:7e:ad:54:f3:ef:f0:70:df:af:17:2f:2d:20:06:
e9:fb:e6:dc:7a:a8:49:6d:bc:a2:48:ff:27:eb:30:85:48:4c:
5a:f6:91:ed:73:d7:12:09:87:66:c8:ea:e2:39:dc:ba:3e:d8:
34:44:3b:d8:f6:cb:62:89:54:f5:23:c5:f7:37:71:f7:cf:97:
17:2c:39:7a:19:93:d2:3d:16:45:55:ea:5a:0f:0a:1e:9f:78:
2f:f2:bf:3c:c2:ed:08:83:a1:aa:cb:4b:57:e6:3f:3c:6e:63:
f5:7c:e9:fb:c1:75:89:a4:78:d9:d4:a3:0f:97:f8:8a:a4:1d:
0c:4e:86:8e:ea:c8:3c:51:fa:4c:af:60:9e:96:9b:04:cd:24:
85:78:d4:c8:85:59:6c:c5:b2:78:fc:24:e8:f0:4e:a1:4f:cf:
79:35:e9:66:fb:7b:1f:8e:df:c3:47:1e:af:d1:74:09:7b:58:
69:34:bb:73:6c:e4:c1:60:ed:03:bd:da:0e:9c:e2:39:34:36:
2e:c9:d3:58:63:40:04:f8:ec:05:c7:1d:4b:bc:e8:bf:fd:20:
a1:30:a1:04:c5:03:52:2c:4f:28:47:22:dd:ef:70:5d:c1:07:
6c:03:a6:d9:6d:ef:57:c1:ea:bb:40:b2:04:80:01:7f:2e:63:
76:7a:b5:ee
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgISAZ8ARu7zFBbyJA1BA8nRJoeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNjI1MTkzNDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjRkYmFjNWNmMjhmMzdkM2JlNzYyODIxMmVjMmRkZTgwYWQ1ZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+6Jt2sGeeSxq5fSBvZyF57XcOLO
pJWInMOfoQ6vJ5zYzyKmdrsyhhI7eLEZbyoJD/9fR7nUh8dA3xBoHVVtV+x50z9/
XGpVXbdYXd1C3rsNU//dnkMZh8BDthOp0684srgSmLqhG/D0j/PFp0QrNkufBfm6
aHKnhGpdF8+QreFSO+6H0IYU8aSd5Ri1Zvl5b/2T49B+6Lc5WoAtm5Hy9ilyRdZq
BdZCQf1/CpW06Uoplai8l0h2DJBW1Cdm8IzL4+64pI/B0RHGqTL3y8bPoE8acvXt
7MtJL/JxSyPKRd1JCP1XsHVyLRHz4MPeWBMmI0PH/9zY+wclYAPE0mmmWwIDAQAB
o4ICbTCCAmkwHQYDVR0OBBYEFNtNusXPKPN9O+dighLsLd6ArV/LMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvMjAyNnhjOG84MzA3NTJLQ0V1d3Qzb0N0WDhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAIwaQMFAyABMYAD
BQMgATKAAwUDIAEzgAMFAyoOp4ADBQMqEGxAAwUDKhCWAAMFAyoTgAADBQMqE7hA
AwUDKhPAQAMFASoT0sYDBQMqE93AAwUDKhPeQAMFAyoUasADBQMqFGtAAwUAKhRr
wDANBgkqhkiG9w0BAQsFAAOCAQEAQ+D6D36tVPPv8HDfrxcvLSAG6fvm3HqoSW28
okj/J+swhUhMWvaR7XPXEgmHZsjq4jncuj7YNEQ72PbLYolU9SPF9zdx98+XFyw5
ehmT0j0WRVXqWg8KHp94L/K/PMLtCIOhqstLV+Y/PG5j9Xzp+8F1iaR42dSjD5f4
iqQdDE6GjurIPFH6TK9gnpabBM0khXjUyIVZbMWyePwk6PBOoU/PeTXpZvt7H47f
w0cer9F0CXtYaTS7c2zkwWDtA73aDpziOTQ2LsnTWGNABPjsBccdS7zov/0goTCh
BMUDUixPKEci3e9wXcEHbAOm2W3vV8Hqu0CyBIABfy5jdnq17g==
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:15 2026 by rpki-client