Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/NLzuIDC47pwb6B4ZZB2CIWRqGgk.roa
File: NLzuIDC47pwb6B4ZZB2CIWRqGgk.roa (raw, json)
Hash identifier: D0qBB9J18LXqmGNXfgbI+hl9RyhQ9ljaQ7pg9h5OzHU=
Subject key identifier: 34:BC:EE:20:30:B8:EE:9C:1B:E8:1E:19:64:1D:82:21:64:6A:1A:09
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019C08A0F8B32043FC6B4925FF0D55F1A972
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/NLzuIDC47pwb6B4ZZB2CIWRqGgk.roa
Signing time: Thu 29 Jan 2026 07:21:33 +0000
ROA not before: Thu 29 Jan 2026 07:21:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3080::/29 maxlen: 29
2a0e:a780::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:b640::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:d2c0::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
2a14:6bc0::/29 maxlen: 29
2a14:72c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:08:a0:f8:b3:20:43:fc:6b:49:25:ff:0d:55:f1:a9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 29 07:21:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34bcee2030b8ee9c1be81e19641d8221646a1a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:47:49:ee:7a:4c:30:45:96:9e:0b:04:ed:
9b:70:65:46:bb:9e:1c:87:37:87:1f:c1:02:b8:e4:
91:83:6c:7c:2d:9d:22:5a:dc:23:c0:66:30:79:ae:
c9:4e:71:99:ac:07:e8:b5:ba:7f:24:6e:a9:de:04:
9c:45:6a:73:15:38:a6:5a:35:5a:8b:98:2c:68:4d:
8f:a3:07:5c:39:ed:58:99:61:79:e8:f2:1c:a2:18:
af:06:3b:26:da:b0:cc:09:65:03:6b:87:98:d9:28:
37:be:df:f9:90:7d:d7:33:84:6e:12:14:80:ad:8f:
5d:80:a0:9b:8f:07:db:9e:64:18:f1:22:11:e5:a0:
1d:f7:62:a4:f3:e1:2c:42:cc:96:07:f2:8d:75:97:
6a:a7:d9:30:30:41:4d:44:1f:7d:cc:06:08:a3:d8:
78:b7:62:7f:75:1c:5b:a7:83:9c:d4:ec:46:f7:be:
99:6d:32:a2:85:1e:05:95:ca:67:9c:7a:e5:77:92:
83:d7:51:96:5d:75:63:dc:c7:0b:71:1a:f4:cc:0a:
8a:b4:a8:a9:c3:cf:32:42:e6:96:5d:08:f8:2b:1f:
4b:61:c6:b2:53:f2:93:6e:04:fc:5a:52:17:fe:7b:
9e:0d:b2:c5:03:09:3a:53:58:53:41:21:40:cb:4e:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BC:EE:20:30:B8:EE:9C:1B:E8:1E:19:64:1D:82:21:64:6A:1A:09
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/NLzuIDC47pwb6B4ZZB2CIWRqGgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2a0e:a780::/29
2a10:9600::/29
2a13:8000::/29
2a13:b640::/29
2a13:b840::/29
2a13:d2c0::/29
2a13:de40::/29
2a14:6bc0::/29
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:24:39:11:26:81:08:6c:44:03:bc:33:e2:8c:b3:b3:99:19:
f9:20:aa:9b:4a:df:25:de:c8:b7:05:c8:d2:91:1d:8a:ca:8a:
22:df:97:f0:c8:f2:d7:09:ef:74:95:ff:ee:da:17:f2:9c:80:
db:7e:ba:b5:59:a8:e3:9f:d0:94:e0:47:f9:b0:2b:c7:6d:ac:
70:02:00:5f:0f:f3:20:9d:96:cb:17:cc:d3:f9:6d:d1:8e:bb:
b3:3b:be:c9:11:e3:df:61:31:d0:fe:70:27:52:5f:8b:34:8b:
33:88:94:b5:81:df:2e:e4:37:0b:71:11:a5:0b:bf:1c:a4:1d:
8e:72:62:3f:53:ee:56:ff:d3:0f:1f:a6:69:9d:28:54:65:ba:
c0:43:a9:ac:be:47:4d:74:28:c9:db:02:cb:80:d7:b5:ab:b3:
92:4d:f3:29:5f:04:f4:c7:14:25:31:eb:89:a1:e9:9c:4f:33:
be:23:2e:72:06:39:c6:6f:65:1a:99:1d:aa:84:d0:ce:de:de:
3f:dc:65:c5:5f:9d:fd:be:b9:b6:8e:8b:96:52:46:9f:be:a6:
8b:7c:70:dc:01:c3:59:b5:3b:7b:a4:1c:67:b9:0c:12:22:b8:
69:ca:99:10:37:b7:52:27:3b:1e:a1:ac:c8:0e:74:22:9e:6d:
37:05:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:40:36 2026 by rpki-client