Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/O3pLo-YlQ6JHsH6KQXxyfREIGW0.roa
File: O3pLo-YlQ6JHsH6KQXxyfREIGW0.roa (raw, json)
Hash identifier: A//wzIUxq5XdKFGdxiPfv6wFniEwpqeVFsmetCammko=
Subject key identifier: 3B:7A:4B:A3:E6:25:43:A2:47:B0:7E:8A:41:7C:72:7D:11:08:19:6D
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A015E73040E6EFDABB93D32FAF3EC6BFF5
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/O3pLo-YlQ6JHsH6KQXxyfREIGW0.roa
Signing time: Tue 18 Aug 2026 17:24:27 +0000
ROA not before: Tue 18 Aug 2026 17:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3180::/29 maxlen: 29
2001:3380::/29 maxlen: 29
2a0e:a780::/29 maxlen: 32
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:bfc0::/32 maxlen: 32
2a13:c040::/32 maxlen: 32
2a13:d2c0::/32 maxlen: 32
2a13:d2c4::/32 maxlen: 32
2a13:d2c6::/32 maxlen: 32
2a13:d2c7::/32 maxlen: 32
2a13:ddc0::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
2a14:6bc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:e7:30:40:e6:ef:da:bb:93:d3:2f:af:3e:c6:bf:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 18 17:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b7a4ba3e62543a247b07e8a417c727d1108196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:6f:3a:75:5e:57:bc:37:90:06:c0:82:82:
42:34:76:15:1a:ac:98:e4:ee:f8:f0:51:14:76:6e:
4d:04:5d:1e:64:9d:76:ed:b5:1e:fc:45:b2:93:af:
3e:27:f0:06:86:7f:98:ef:9c:4f:4a:25:c9:eb:60:
a3:b3:ba:c9:33:77:9a:a0:c3:c7:a3:0a:00:d6:85:
29:e2:3e:f0:2f:0b:3c:c1:c2:68:bb:21:c6:c4:63:
39:80:e5:02:57:c0:4f:af:cd:64:18:c2:b8:70:9d:
1e:63:2b:97:50:91:fe:ee:1d:e0:26:09:30:c1:82:
7c:aa:44:12:ed:4c:52:2b:57:60:8e:06:1f:ea:6f:
74:fb:a9:45:24:eb:f2:d1:e3:0a:89:2e:e2:7f:a2:
e9:39:9f:3c:17:b6:86:6f:2b:0e:54:11:e7:5d:f4:
41:90:80:51:9f:44:97:f9:1c:4b:d8:6b:54:b9:51:
14:23:e0:a8:90:ff:bd:47:95:8d:46:7a:56:be:02:
fd:a3:48:90:7e:ef:1d:99:e9:04:38:6c:76:dd:62:
48:01:6a:d5:c2:23:3c:c1:b1:b5:c9:97:a0:4a:d6:
bf:74:a7:3b:0f:6d:53:e7:16:f8:14:f6:b3:8d:0e:
e5:c4:da:c1:f4:55:63:1f:b1:ec:5f:1a:89:ba:59:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7A:4B:A3:E6:25:43:A2:47:B0:7E:8A:41:7C:72:7D:11:08:19:6D
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/O3pLo-YlQ6JHsH6KQXxyfREIGW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3180::/29
2001:3380::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:b840::/29
2a13:bfc0::/32
2a13:c040::/32
2a13:d2c0::/32
2a13:d2c4::/32
2a13:d2c6::/31
2a13:ddc0::/29
2a14:6ac0::/29
2a14:6bc0::/32
2a14:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
51:95:18:29:24:76:6b:fc:01:33:d0:95:60:e1:bf:ec:78:3e:
b0:9a:c6:7c:c0:e4:cc:3e:73:b0:03:3a:d0:18:15:ae:f5:0c:
c3:20:81:22:91:14:63:ef:3d:27:ef:be:11:96:ab:f8:c9:79:
4a:24:31:f2:47:41:03:45:b1:a3:25:98:72:cc:30:c3:88:5f:
0e:72:83:04:0c:f4:fc:b4:42:d0:02:c6:99:a6:b3:c9:87:8b:
ae:67:06:40:2f:fa:4e:44:4b:a5:43:a8:6c:a4:06:07:86:f5:
6f:7d:28:23:aa:6d:4b:10:aa:68:f5:60:fd:d7:c0:b5:82:8d:
c9:b7:b3:86:97:2f:ee:cb:36:0e:df:c9:af:8c:28:3c:30:ce:
da:1b:e7:f0:0d:8b:66:7e:1c:aa:3c:a3:3d:c3:87:c4:20:1d:
23:e7:64:79:5b:03:20:3d:1a:9e:4f:07:1f:75:f1:6c:84:21:
3b:b0:31:dd:e1:d3:2c:9c:e7:56:67:7d:dd:3f:31:39:6d:f3:
97:e5:e6:2b:25:24:f4:b5:a0:fc:d7:93:7c:41:66:d8:da:60:
d4:a1:df:6e:a3:c0:48:c9:2a:b4:1e:46:0e:95:cd:b0:b6:a3:
50:0e:51:ed:9a:91:2e:ca:fa:a5:9c:ef:24:12:5d:f5:a6:63:
32:95:a1:ff
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAaAV5zBA5u/au5PTL68+xr/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwODE4MTcyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjdhNGJhM2U2MjU0M2EyNDdiMDdlOGE0MTdjNzI3ZDExMDgxOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36pvOnVeV7w3kAbAgoJCNHYVGqyY
5O748FEUdm5NBF0eZJ127bUe/EWyk68+J/AGhn+Y75xPSiXJ62Cjs7rJM3eaoMPH
owoA1oUp4j7wLws8wcJouyHGxGM5gOUCV8BPr81kGMK4cJ0eYyuXUJH+7h3gJgkw
wYJ8qkQS7UxSK1dgjgYf6m90+6lFJOvy0eMKiS7if6LpOZ88F7aGbysOVBHnXfRB
kIBRn0SX+RxL2GtUuVEUI+CokP+9R5WNRnpWvgL9o0iQfu8dmekEOGx23WJIAWrV
wiM8wbG1yZegSta/dKc7D21T5xb4FPazjQ7lxNrB9FVjH7HsXxqJulnmaQIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFDt6S6PmJUOiR7B+ikF8cn0RCBltMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvTzNwTG8tWWxRNkpIc0g2S1FYeHlmUkVJR1cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAIwcAMFAyABMYAD
BQMgATOAAwUDKg6ngAMFAyoQbEADBQMqEJYAAwUDKhOAAAMFAyoTuEADBQAqE7/A
AwUAKhPAQAMFACoT0sADBQAqE9LEAwUBKhPSxgMFAyoT3cADBQMqFGrAAwUAKhRr
wAMFACoUa8YwDQYJKoZIhvcNAQELBQADggEBAFGVGCkkdmv8ATPQlWDhv+x4PrCa
xnzA5Mw+c7ADOtAYFa71DMMggSKRFGPvPSfvvhGWq/jJeUokMfJHQQNFsaMlmHLM
MMOIXw5ygwQM9Py0QtACxpmms8mHi65nBkAv+k5ES6VDqGykBgeG9W99KCOqbUsQ
qmj1YP3XwLWCjcm3s4aXL+7LNg7fya+MKDwwztob5/ANi2Z+HKo8oz3Dh8QgHSPn
ZHlbAyA9Gp5PBx918WyEITuwMd3h0yyc51Znfd0/MTlt85fl5islJPS1oPzXk3xB
ZtjaYNSh326jwEjJKrQeRg6VzbC2o1AOUe2akS7K+qWc7yQSXfWmYzKVof8=
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:25:05 2026 by rpki-client