Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ASqbzm5_PeanvCR7L8pMP0HrXX0.roa
File: ASqbzm5_PeanvCR7L8pMP0HrXX0.roa (raw, json)
Hash identifier: pvo5xtpk8/Il7ojOGxO2R9KR8oFIXWz2vAHHvtFpeMU=
Subject key identifier: 01:2A:9B:CE:6E:7F:3D:E6:A7:BC:24:7B:2F:CA:4C:3F:41:EB:5D:7D
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019FB9D73330E4F8CD13012E4E7263067896
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ASqbzm5_PeanvCR7L8pMP0HrXX0.roa
Signing time: Fri 31 Jul 2026 20:21:56 +0000
ROA not before: Fri 31 Jul 2026 20:21:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219093
IP address blocks: 2a14:6b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:d7:33:30:e4:f8:cd:13:01:2e:4e:72:63:06:78:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 31 20:21:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=012a9bce6e7f3de6a7bc247b2fca4c3f41eb5d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:b0:6b:e3:3e:61:3b:7c:5f:b6:15:89:03:
88:89:96:95:62:b6:7f:5b:39:71:d6:84:1a:0f:c5:
83:2b:88:2e:77:75:fd:61:69:55:01:52:fc:2d:46:
30:73:96:17:2f:63:86:3a:fc:11:52:70:69:04:64:
c0:16:82:44:73:91:d7:c0:b1:f7:50:02:4d:b0:88:
e2:ec:23:df:fc:1d:65:a8:0b:b7:02:43:2f:9b:e5:
e6:b5:49:f9:c8:7b:40:4f:a9:30:45:4d:82:44:53:
b4:08:86:70:59:7d:dc:b4:aa:47:c1:e5:4a:17:a9:
ed:49:be:e0:56:ff:95:11:f4:0a:90:38:5d:40:45:
93:60:7e:6a:9b:04:74:6a:65:72:b2:0a:e6:78:12:
9f:a8:b6:72:14:e7:7f:70:ae:d0:20:f5:8a:22:ca:
6f:34:e3:30:3c:fc:37:01:db:16:c4:9b:80:4e:8d:
4a:32:fc:0c:0a:3e:db:1c:dd:5d:d5:f7:3c:e1:37:
0d:11:a1:07:ac:0b:32:92:f5:72:09:fd:df:fa:4c:
50:82:33:0b:7a:20:2e:4a:5f:0f:18:6f:66:0d:51:
7c:af:db:44:2c:3e:30:6c:fd:a4:52:54:44:18:04:
08:c8:1d:ec:a0:50:b2:fd:6c:27:6b:41:43:64:47:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:9B:CE:6E:7F:3D:E6:A7:BC:24:7B:2F:CA:4C:3F:41:EB:5D:7D
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ASqbzm5_PeanvCR7L8pMP0HrXX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
23:1b:62:12:73:cb:92:0c:c4:15:72:ee:58:3a:b1:d5:ad:ec:
4f:17:d7:fb:b1:4c:1b:54:de:8b:cd:5b:61:6a:5e:94:b1:e9:
17:f0:dd:7d:49:a2:86:89:0c:66:19:a7:1b:cc:ea:9f:6d:32:
29:3f:02:79:49:d8:a8:bd:6f:92:e5:8b:6a:b5:b8:88:1e:34:
43:f1:f9:66:21:84:a0:31:57:2d:75:11:cd:7b:6a:c0:1b:35:
ec:88:ac:61:05:e8:4a:08:00:ce:50:2d:ae:f7:ae:6c:a9:96:
4a:71:fd:b8:3e:19:54:9e:34:4e:75:5e:ba:f7:30:78:3f:2b:
69:37:d0:a3:3b:f7:0d:2c:74:3f:81:c5:ec:26:ba:76:5f:21:
ac:45:b4:03:68:25:b5:ab:e5:26:57:8f:e4:ab:e9:3e:42:54:
ba:2d:59:f6:fd:b3:d1:b7:08:0d:76:26:a1:39:52:67:4f:19:
0f:e1:69:4e:01:4a:5a:03:f4:eb:82:e1:d6:ca:14:a3:5b:57:
1a:1a:70:99:cd:d1:28:ca:ec:ab:16:09:3f:a9:75:db:53:84:
1e:0f:46:e0:00:54:49:9e:bb:6a:03:5e:7b:d9:1b:8f:55:a8:
03:41:3f:76:36:cc:16:fd:c5:92:0b:f9:5e:0d:39:14:5c:87:
2b:17:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:05 2026 by rpki-client