Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/egSyyhbbsjb55QuPZtfqxZqeSJs.roa
File: egSyyhbbsjb55QuPZtfqxZqeSJs.roa (raw, json)
Hash identifier: WKfrGYQ1b3Lfj75vc1VzNeaUtBz4wwffr1ZgAyIZIOY=
Subject key identifier: 7A:04:B2:CA:16:DB:B2:36:F9:E5:0B:8F:66:D7:EA:C5:9A:9E:48:9B
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019FF598ADD3B00344C16A14ECFDA0DC8901
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/egSyyhbbsjb55QuPZtfqxZqeSJs.roa
Signing time: Wed 12 Aug 2026 10:50:51 +0000
ROA not before: Wed 12 Aug 2026 10:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a14:6bc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:98:ad:d3:b0:03:44:c1:6a:14:ec:fd:a0:dc:89:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 12 10:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a04b2ca16dbb236f9e50b8f66d7eac59a9e489b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:47:d3:c1:fe:88:a0:22:46:3c:44:8a:2c:
26:68:a6:61:4b:38:fa:7c:c0:20:1a:b2:0b:dc:fb:
4f:63:72:29:b3:c9:d8:0c:62:e7:34:51:98:e5:af:
dc:08:f4:1a:41:fd:55:ee:14:8d:9b:61:29:f6:ed:
9d:04:8f:c2:11:21:ee:8a:1b:05:ff:78:1a:36:cd:
bc:e8:62:3b:a4:6f:10:3e:bc:ac:d3:b8:4a:f9:9b:
0b:24:21:26:6b:8e:8b:20:f2:d2:80:3b:13:df:7c:
f7:78:e9:9c:ec:4e:d9:0d:f1:71:ae:9a:45:89:21:
f1:fa:10:fa:ef:94:cb:a9:94:af:a3:b6:f2:95:f4:
a7:3f:01:58:4f:47:0b:81:e9:c2:bd:04:ab:a4:48:
16:4a:29:e3:3f:24:08:bc:3a:e2:4a:a2:65:72:66:
74:33:6b:e4:e5:70:e8:f6:04:33:34:47:9c:1e:67:
8f:e4:81:fc:96:6d:ca:18:a8:aa:c6:2e:f5:db:44:
05:54:91:43:4e:70:d4:89:4f:94:e0:c3:b9:24:88:
71:b5:01:f0:be:da:b3:a3:1f:b5:8a:a0:b9:72:22:
0d:7a:1e:10:1c:54:4f:22:e4:3b:e1:cc:1f:ec:e9:
f8:83:ff:23:90:b8:f5:27:4c:01:04:15:8a:4b:cc:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:04:B2:CA:16:DB:B2:36:F9:E5:0B:8F:66:D7:EA:C5:9A:9E:48:9B
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/egSyyhbbsjb55QuPZtfqxZqeSJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6bc4::/32
Signature Algorithm: sha256WithRSAEncryption
76:c4:a8:bf:e0:ea:9a:ba:37:c7:9c:f2:4d:2c:04:3a:d8:24:
5d:3b:73:f7:3c:09:7c:88:b8:9a:01:e9:fb:90:39:3e:a7:cf:
56:92:ae:c1:18:99:f8:12:1f:ee:33:42:31:2f:25:a7:5f:ae:
2e:14:0e:02:14:c6:76:8e:12:43:d4:cf:84:df:4f:95:3f:b9:
27:82:fb:f3:a6:9d:a2:1b:5e:61:7e:c2:28:0e:89:4c:73:ff:
d9:61:53:23:62:77:e4:02:56:6a:61:11:6e:16:ca:3c:90:8a:
98:2f:eb:ae:eb:90:44:5c:79:3a:93:16:81:28:0d:5b:30:76:
45:44:36:7c:c8:f5:b2:fc:99:64:ad:26:85:84:86:ac:1f:50:
b4:b1:ac:cb:21:1c:a0:c9:c4:83:25:32:75:c7:da:97:f3:5a:
69:71:e0:12:24:98:e4:e8:94:2b:85:ab:96:2b:ce:1c:06:79:
a0:de:ab:ac:f8:2c:8e:d6:5c:9b:b2:3e:d2:f2:b0:79:b2:41:
13:f9:e7:8e:3a:e1:ca:a1:7e:d4:2b:70:e6:41:bc:ea:f1:41:
59:46:91:d5:34:72:4a:29:3a:96:35:22:51:00:3d:d5:a1:59:
95:da:6b:8f:7d:a2:a9:c2:f0:2c:b9:a4:03:14:bb:95:fc:9c:
a6:70:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:35:32 2026 by rpki-client