Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OC59THe8f-hMXSAEGwrJOag8AeQ.roa
File: OC59THe8f-hMXSAEGwrJOag8AeQ.roa (raw, json)
Hash identifier: Fkqg9JAqHazMZZ2t4kum4m5d5+futuWE3HiYGA3TKiA=
Subject key identifier: 38:2E:7D:4C:77:BC:7F:E8:4C:5D:20:04:1B:0A:C9:39:A8:3C:01:E4
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A12FACD7141CC86291021AFC21A02B7309
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OC59THe8f-hMXSAEGwrJOag8AeQ.roa
Signing time: Mon 12 Oct 2026 10:33:38 +0000
ROA not before: Mon 12 Oct 2026 10:33:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1002
IP address blocks: 2a13:bfc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:ac:d7:14:1c:c8:62:91:02:1a:fc:21:a0:2b:73:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Oct 12 10:33:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=382e7d4c77bc7fe84c5d20041b0ac939a83c01e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:87:cd:58:ec:41:38:4d:c5:17:64:5c:ce:
d0:d5:4c:54:48:a8:c2:46:10:45:08:b9:4f:3d:ac:
bd:c1:d9:bf:f0:a0:ee:c1:14:a7:87:e9:18:16:1d:
37:bf:0a:ba:e6:50:f9:e0:f1:93:f8:08:e7:ca:6f:
98:de:3b:ea:01:8d:5a:f3:d6:b8:d9:a4:b2:d7:e4:
75:fd:ba:28:4e:cb:6e:db:cb:d4:94:f7:86:11:13:
d8:3c:c5:8b:ee:73:15:8b:a9:10:87:27:2d:8f:d6:
97:8e:f2:d8:67:10:1f:e4:f7:80:8b:e7:19:3e:cc:
ca:18:f4:01:1d:a7:d2:41:b2:34:ef:70:f0:c3:bd:
29:5d:e1:aa:22:e2:88:e0:cc:86:b0:25:c3:94:5e:
c7:03:05:89:54:ca:e3:6b:bd:27:00:a1:11:db:87:
86:23:05:4c:7e:ba:ef:f5:9a:8d:f2:4c:ef:27:92:
93:9a:27:55:68:5a:ed:dc:39:a4:35:24:cd:6e:a3:
78:8c:97:8b:f6:da:0d:a7:80:a6:7f:c8:27:be:86:
20:7c:9f:44:25:80:83:d6:b0:cc:bf:a3:d6:37:6c:
e7:af:e1:1c:b2:34:ef:83:90:f3:2c:ec:16:7f:e2:
bb:97:24:8b:0c:67:50:d0:79:bb:6f:fb:d8:91:b3:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:7D:4C:77:BC:7F:E8:4C:5D:20:04:1B:0A:C9:39:A8:3C:01:E4
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OC59THe8f-hMXSAEGwrJOag8AeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bfc6::/32
Signature Algorithm: sha256WithRSAEncryption
5e:73:09:85:14:3e:93:4a:09:b6:c4:1c:e1:73:a5:f5:38:0a:
0c:36:2a:45:94:83:b9:42:e4:20:cb:64:b9:21:1f:da:50:3d:
b7:09:5d:be:70:f8:b4:d6:b8:52:86:7e:a7:93:ae:b6:a6:18:
9f:e7:9c:dd:3b:e3:78:ed:0f:b8:33:4d:8e:00:1f:6b:04:b1:
9a:5a:57:37:c9:0d:58:d3:c5:c8:42:25:d6:db:f0:e2:4d:d4:
42:44:d3:ea:43:ab:81:54:09:a5:d7:92:89:d8:ab:be:05:31:
27:d8:64:d2:bb:c7:bb:e8:91:71:da:23:c7:68:7c:e1:7d:6a:
9a:69:15:2a:1e:21:1c:98:d4:9e:5e:09:9d:dd:fa:e2:ca:39:
41:f9:c8:81:6b:93:9e:be:6d:58:3c:30:d3:67:a7:3e:ac:6b:
49:97:67:9e:cd:54:f2:51:98:7e:b5:3f:b5:82:64:e1:c8:22:
0c:ea:bc:f9:ad:1d:4e:e4:83:a5:fc:78:c0:1f:9e:33:39:cc:
80:ab:dc:03:b7:36:3e:2b:8b:83:ae:ea:7a:52:bc:bc:56:47:
de:00:bc:14:5b:45:32:d2:38:ba:06:af:01:54:02:4a:ef:94:
4c:a7:e8:31:13:0f:6b:93:49:a6:ff:72:c6:7e:d8:57:aa:99:
c7:81:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:08 2026 by rpki-client