Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/PpS-bdhNgN3_1ulZ_xR5ZfUV5Tk.roa
File: PpS-bdhNgN3_1ulZ_xR5ZfUV5Tk.roa (raw, json)
Hash identifier: Q14TwdmLY8ef6YU4AldWsDWTgxMnzqbsHw5un+KeOhc=
Subject key identifier: 3E:94:BE:6D:D8:4D:80:DD:FF:D6:E9:59:FF:14:79:65:F5:15:E5:39
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A0F909BB902BCB766CDA230B07E9463B34
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/PpS-bdhNgN3_1ulZ_xR5ZfUV5Tk.roa
Signing time: Thu 01 Oct 2026 19:55:59 +0000
ROA not before: Thu 01 Oct 2026 19:55:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3080::/29 maxlen: 29
2001:3180::/29 maxlen: 29
2001:3280::/29 maxlen: 29
2001:3380::/29 maxlen: 29
2a0e:a780::/29 maxlen: 29
2a10:6c40::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:b640::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:bfc0::/29 maxlen: 29
2a13:c040::/32 maxlen: 32
2a13:d2c0::/32 maxlen: 32
2a13:d2c4::/32 maxlen: 32
2a13:d2c6::/32 maxlen: 32
2a13:d2c7::/32 maxlen: 32
2a13:ddc0::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
2a14:6bc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:09:bb:90:2b:cb:76:6c:da:23:0b:07:e9:46:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Oct 1 19:55:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e94be6dd84d80ddffd6e959ff147965f515e539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:35:8c:fa:61:3a:57:7d:d2:ba:9a:11:dd:
ed:13:b3:2b:37:81:c7:57:45:a1:87:31:10:a0:ae:
c2:b7:16:b4:8c:7c:3b:6d:d2:bf:04:9d:4c:05:fd:
9e:9e:e0:f2:a2:98:63:29:b8:fa:9d:f2:db:8f:39:
55:e0:3d:72:af:3a:12:ad:1c:fc:7c:ec:71:3c:ca:
db:38:0d:b1:c0:69:41:e8:54:27:bd:bb:ee:6b:c0:
d9:69:a7:fd:ad:a8:68:f0:bc:9d:ac:94:f9:71:c3:
27:24:bc:b3:05:1d:44:50:c6:f6:9f:c0:38:fa:f7:
4f:74:9b:78:da:37:e6:10:c1:50:42:18:b0:1e:0d:
d4:72:e5:5b:22:40:03:12:f0:c9:d6:4a:4c:88:b4:
d0:e4:0c:19:5a:d6:0a:30:0c:1e:d2:0b:ff:5a:4e:
b8:03:31:30:7c:b6:e1:51:3c:41:2f:a7:ac:70:a4:
8c:b8:25:e8:55:b1:49:68:d3:dc:16:1e:30:8a:66:
8e:45:6f:ff:83:a5:29:eb:19:ca:76:d8:d6:9e:23:
be:e9:73:9d:bb:f7:2b:93:03:8d:3f:24:a4:61:2b:
6b:23:e8:ee:b2:40:2c:c7:81:94:70:fc:61:7b:4a:
01:ca:98:80:71:ed:0b:7e:ea:02:15:9d:2e:4e:9e:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:94:BE:6D:D8:4D:80:DD:FF:D6:E9:59:FF:14:79:65:F5:15:E5:39
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/PpS-bdhNgN3_1ulZ_xR5ZfUV5Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2001:3180::/29
2001:3280::/29
2001:3380::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:b640::/29
2a13:b840::/29
2a13:bfc0::/29
2a13:c040::/32
2a13:d2c0::/32
2a13:d2c4::/32
2a13:d2c6::/31
2a13:ddc0::/29
2a13:de40::/29
2a14:6ac0::/29
2a14:6bc0::/32
2a14:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
99:2f:f5:a9:d2:3e:b1:62:e5:4d:70:b4:c0:2d:8e:21:36:b5:
cc:9b:36:1d:89:f7:be:44:62:55:a9:15:c8:4e:58:90:75:cd:
5a:4c:01:ce:e8:ac:0f:68:75:72:b8:21:a8:04:6a:01:45:e2:
fb:09:3d:25:d8:34:11:fc:18:6f:16:6e:d7:a1:b2:b0:69:a8:
15:0a:a3:1e:50:89:ef:c9:02:22:a3:33:dd:be:e4:8d:af:48:
b5:ae:6c:ee:46:7e:d1:55:6c:c4:3e:f0:4a:c5:71:27:75:0e:
1d:72:ed:2a:24:d7:40:bd:27:fb:e0:da:08:73:3c:5b:3f:16:
cc:d4:5b:16:60:df:50:5b:27:08:0b:b5:3c:54:be:bf:ff:18:
b8:b5:d0:cd:95:57:76:dd:80:0d:11:60:a9:1b:99:4c:87:bf:
7a:75:32:d1:bb:22:6e:2f:e6:cf:f1:71:90:2b:5c:bd:7c:fc:
96:26:95:25:b7:e5:4c:0d:b3:3f:0e:26:8f:ba:ec:9b:79:8a:
91:36:0c:c0:cd:5e:ec:c3:b3:a5:1a:e4:b3:06:52:2c:68:25:
4d:6d:f2:25:c7:cc:02:06:10:b1:34:4a:d6:da:24:e3:80:a1:
53:2e:2d:20:7f:1f:9d:89:c0:38:cc:3a:42:a7:23:27:a6:c1:
34:5e:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:15:44 2026 by rpki-client