Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Cp8e119-hT_Xze0ATuhLVl-EKl0.roa
File: Cp8e119-hT_Xze0ATuhLVl-EKl0.roa (raw, json)
Hash identifier: /VgfhDvhD1wJXvcX+gCUaVbk1t0ADBko6mqYJXZAs8c=
Subject key identifier: 0A:9F:1E:D7:5F:7E:85:3F:D7:CD:ED:00:4E:E8:4B:56:5F:84:2A:5D
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A11D1AEDF453849D7032AE870AC761733F
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Cp8e119-hT_Xze0ATuhLVl-EKl0.roa
Signing time: Thu 08 Oct 2026 20:01:06 +0000
ROA not before: Thu 08 Oct 2026 20:01:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215114
IP address blocks: 2a13:bfc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:ed:f4:53:84:9d:70:32:ae:87:0a:c7:61:73:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Oct 8 20:01:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a9f1ed75f7e853fd7cded004ee84b565f842a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e1:a8:50:ca:26:43:32:6a:8f:f8:2f:3b:97:
8b:65:39:31:bd:27:1d:df:63:42:7f:b3:b5:09:bf:
3c:04:79:dd:65:2c:e4:28:84:78:8a:73:b2:28:2f:
2c:78:0f:3f:ed:92:89:35:66:1c:92:0e:bf:60:16:
fa:78:d5:d5:dd:00:10:98:a8:3e:2e:c6:23:16:fb:
d2:cd:f3:1c:cc:6a:ac:89:4a:e4:24:5f:a8:f9:e0:
0d:f9:a5:75:96:b1:f0:96:ce:53:79:eb:95:51:fb:
11:2d:64:d8:86:63:f7:c1:09:c5:2f:52:4a:08:a1:
e6:46:74:0d:53:fa:2e:db:6d:57:fb:cf:e2:c9:78:
c7:b4:86:07:5a:4f:95:a2:1e:c1:ba:88:ff:5a:22:
04:41:54:b6:24:06:73:71:6d:44:d7:39:21:12:13:
dd:f1:71:90:00:1e:0c:0f:e8:da:dd:89:a4:49:ac:
5b:17:17:f2:e3:24:f0:ec:12:0a:a2:98:bb:80:31:
fb:dd:30:5a:1b:a0:a7:2b:8f:90:60:0b:7f:50:11:
77:03:8d:4e:ca:8d:80:52:af:a6:21:b7:47:2f:31:
db:6c:e1:0c:72:88:f8:76:bb:6d:f2:9f:d0:80:5e:
1c:6b:30:72:3f:10:f5:6d:9c:da:95:10:7d:7c:ef:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9F:1E:D7:5F:7E:85:3F:D7:CD:ED:00:4E:E8:4B:56:5F:84:2A:5D
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Cp8e119-hT_Xze0ATuhLVl-EKl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bfc2::/32
Signature Algorithm: sha256WithRSAEncryption
92:17:b8:56:dc:3e:e4:aa:cc:70:e8:d6:60:4c:89:d3:8e:75:
00:3e:9b:ba:f0:1f:69:50:10:f3:45:35:2a:ba:c3:70:e7:09:
5f:7b:db:e5:72:07:7d:44:b4:3a:96:c0:50:d7:1e:b3:cd:5a:
17:f5:da:57:27:14:35:d0:c7:0b:73:7a:89:d8:8c:1b:cf:b4:
7c:e9:15:4f:bb:f7:fa:c5:39:53:4a:5d:a3:86:dd:65:57:64:
46:41:37:d7:fe:36:31:4b:4b:c4:ad:58:b6:e8:c1:54:fc:df:
29:a8:44:4a:e1:d0:6d:85:62:88:de:dc:eb:47:54:7c:3d:d3:
92:15:6a:bb:b8:89:2a:56:fe:bb:22:dc:25:0a:15:a0:38:e0:
1a:ba:b3:6c:83:6f:4c:3c:58:2b:d4:2b:0a:a7:a4:ea:02:e2:
51:9a:62:f9:89:73:f6:e2:f9:ec:3d:e0:ef:92:5b:6b:46:b4:
37:96:92:0a:4a:4a:39:65:cc:35:de:24:87:0e:96:15:c5:c7:
22:a1:a1:eb:33:5d:bc:8f:cd:4d:e0:90:32:03:bf:4f:23:3a:
49:1b:85:f9:40:0b:74:41:97:f8:93:04:ce:51:f4:b1:87:47:
06:db:5e:3d:72:56:f7:b1:58:53:67:17:45:7a:2d:87:ca:69:
e0:20:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:47 2026 by rpki-client