Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/giISbHtgyLhiOfl20tDLtT9RYZo.roa
File: giISbHtgyLhiOfl20tDLtT9RYZo.roa (raw, json)
Hash identifier: 0qh5Lt6/z3Jie1CMjV2RD7EyMePOeEHHXqEBnDi6e0w=
Subject key identifier: 82:22:12:6C:7B:60:C8:B8:62:39:F9:76:D2:D0:CB:B5:3F:51:61:9A
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A127428E367DDB4E84C82BB9BE5A913CD4
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/giISbHtgyLhiOfl20tDLtT9RYZo.roa
Signing time: Sat 10 Oct 2026 19:20:35 +0000
ROA not before: Sat 10 Oct 2026 19:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 2a0e:a780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:42:8e:36:7d:db:4e:84:c8:2b:b9:be:5a:91:3c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Oct 10 19:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8222126c7b60c8b86239f976d2d0cbb53f51619a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:4f:5f:82:51:8c:8a:d4:b8:49:e8:d2:df:
69:c6:f9:02:20:1d:82:af:55:df:ba:b2:82:6d:99:
28:1c:4f:f0:08:98:a3:44:dc:27:b2:19:50:ae:49:
de:47:ce:29:73:9c:06:69:23:22:98:32:73:24:df:
b7:0e:3d:47:0a:1e:03:48:80:ab:c5:9d:03:fe:78:
89:7d:0c:f5:fd:6f:04:44:f2:98:8c:8e:0f:59:96:
21:9f:91:d2:46:6e:b1:35:b2:2e:97:3d:f1:05:38:
81:a7:3e:1b:c7:19:fc:7b:cf:cc:91:f7:86:b3:66:
bb:39:16:84:18:71:b3:14:11:74:bb:35:53:6e:a8:
36:50:32:56:28:52:da:1d:e9:89:3a:1d:c2:7f:e0:
06:01:29:fe:6c:4a:13:37:58:6e:61:b3:4e:58:c0:
32:a2:f5:71:9d:7f:06:62:ab:db:79:32:fd:25:14:
ed:9b:39:64:5d:1c:d0:80:6d:20:0b:e1:2d:4c:8b:
15:ea:f1:9f:89:07:75:7e:bc:df:c3:3b:6b:a5:fb:
41:83:82:bb:d7:8f:d5:91:fb:66:4c:60:85:55:83:
9f:f3:cc:44:75:a7:3d:05:6a:d6:d9:92:5a:5f:bf:
e1:f5:49:aa:59:dc:be:3a:5a:86:42:7d:9a:51:f8:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:12:6C:7B:60:C8:B8:62:39:F9:76:D2:D0:CB:B5:3F:51:61:9A
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/giISbHtgyLhiOfl20tDLtT9RYZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a780::/29
Signature Algorithm: sha256WithRSAEncryption
7a:6d:96:6a:35:06:26:ec:c4:a3:56:3f:55:ec:0a:6f:c9:4b:
48:15:29:e6:8e:c2:a6:eb:4e:4c:29:ea:2e:17:0f:0e:3f:1e:
f7:43:2c:62:5c:65:f9:f1:8d:07:24:ec:dd:a6:96:2d:03:65:
51:46:51:aa:71:35:a5:84:62:08:fe:e8:2e:3f:b6:74:34:86:
a8:81:7d:7a:1b:4a:0a:4c:9e:d1:9e:04:03:65:4f:1b:70:e4:
1e:54:96:4b:96:7b:86:eb:43:28:85:7d:2e:0a:b0:18:a3:c6:
30:04:15:e1:22:bd:b0:79:bd:2a:01:ca:60:5c:87:64:ef:e3:
7a:34:d3:b4:a6:c7:8c:52:c1:f4:63:a0:41:36:cc:28:0b:f1:
7f:25:64:ea:2f:09:d4:ae:a7:c4:04:fa:9a:66:3d:7d:4d:55:
96:9a:21:c2:8a:af:9f:90:fc:e8:99:d8:36:55:4d:12:6b:35:
b3:0a:76:ba:47:1c:6b:16:37:c9:1d:dd:5e:cf:f4:44:ca:62:
03:1a:35:03:34:37:4c:64:53:b3:11:6b:98:b0:55:56:6d:00:
52:76:42:9c:66:51:8c:27:1d:4e:24:8d:e9:3b:03:6c:fb:38:
35:8b:96:9b:e8:eb:77:f9:37:85:f4:72:59:b0:35:1c:4f:d5:
8e:b1:82:04
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaEnQo42fdtOhMgrub5akTzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYxMDEwMTkyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjIyMTI2YzdiNjBjOGI4NjIzOWY5NzZkMmQwY2JiNTNmNTE2MTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUlPX4JRjIrUuEno0t9pxvkCIB2C
r1XfurKCbZkoHE/wCJijRNwnshlQrkneR84pc5wGaSMimDJzJN+3Dj1HCh4DSICr
xZ0D/niJfQz1/W8ERPKYjI4PWZYhn5HSRm6xNbIulz3xBTiBpz4bxxn8e8/MkfeG
s2a7ORaEGHGzFBF0uzVTbqg2UDJWKFLaHemJOh3Cf+AGASn+bEoTN1huYbNOWMAy
ovVxnX8GYqvbeTL9JRTtmzlkXRzQgG0gC+EtTIsV6vGfiQd1frzfwztrpftBg4K7
14/VkftmTGCFVYOf88xEdac9BWrW2ZJaX7/h9UmqWdy+OlqGQn2aUfjSpQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIIiEmx7YMi4Yjn5dtLQy7U/UWGaMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvZ2lJU2JIdGd5TGhpT2ZsMjB0REx0VDlSWVpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg6ngDAN
BgkqhkiG9w0BAQsFAAOCAQEAem2WajUGJuzEo1Y/VewKb8lLSBUp5o7CputOTCnq
LhcPDj8e90MsYlxl+fGNByTs3aaWLQNlUUZRqnE1pYRiCP7oLj+2dDSGqIF9ehtK
Ckye0Z4EA2VPG3DkHlSWS5Z7hutDKIV9LgqwGKPGMAQV4SK9sHm9KgHKYFyHZO/j
ejTTtKbHjFLB9GOgQTbMKAvxfyVk6i8J1K6nxAT6mmY9fU1Vlpohwoqvn5D86JnY
NlVNEms1swp2ukccaxY3yR3dXs/0RMpiAxo1AzQ3TGRTsxFrmLBVVm0AUnZCnGZR
jCcdTiSN6TsDbPs4NYuWm+jrd/k3hfRyWbA1HE/VjrGCBA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:59:48 2026 by rpki-client