Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/lCDchho_p6O1HkcjaI678jeCNFU.roa
File: lCDchho_p6O1HkcjaI678jeCNFU.roa (raw, json)
Hash identifier: hr3wfthwZSaXyNR5InX1ndXwK8w4g5BCCHle6Vq1S/E=
Subject key identifier: 94:20:DC:86:1A:3F:A7:A3:B5:1E:47:23:68:8E:BB:F2:37:82:34:55
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A037AC843AA683173D9927679E6A4FA22A
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/lCDchho_p6O1HkcjaI678jeCNFU.roa
Signing time: Tue 25 Aug 2026 06:47:27 +0000
ROA not before: Tue 25 Aug 2026 06:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 2001:3380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:ac:84:3a:a6:83:17:3d:99:27:67:9e:6a:4f:a2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 25 06:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9420dc861a3fa7a3b51e4723688ebbf237823455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:4b:e6:87:23:c0:c0:97:14:49:c9:de:65:
43:45:53:09:e9:c2:8d:8d:d7:d8:9c:4f:ed:08:8a:
77:81:e2:94:40:b0:ce:e0:ea:a0:05:fd:33:57:49:
01:18:28:42:42:f4:c3:b0:6d:f1:77:0e:f0:6a:96:
e7:79:e3:f1:c7:ea:36:83:a9:ab:4f:87:43:cc:a3:
b3:ec:79:4a:78:f0:aa:a0:65:ca:d1:0d:da:39:e6:
30:c3:83:61:a6:9b:14:c2:7e:a2:29:e1:d0:09:0c:
35:af:66:09:b0:32:7d:dd:22:eb:b7:69:30:4a:15:
fa:61:e5:dd:82:a3:7d:e1:f9:3a:cb:f0:1e:2d:82:
2d:f0:b8:ed:bd:c8:77:82:41:c0:44:bb:24:e2:5d:
ab:1b:bf:30:fe:36:e7:18:25:c6:55:7e:fc:3d:69:
d2:a0:f6:14:3b:15:84:71:ef:86:9b:28:ca:ef:d4:
c9:e2:f1:87:72:59:22:00:71:ec:57:5b:c2:a1:a5:
fb:e0:95:e8:4e:8c:de:5c:58:26:c1:18:66:cd:12:
de:61:17:68:64:33:a2:85:f2:b2:62:39:aa:de:0d:
70:77:90:9a:92:a5:ec:f9:d8:cc:d9:7d:dc:4a:a3:
99:21:27:e4:c6:33:8c:1a:59:cb:61:8e:47:2e:8c:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:DC:86:1A:3F:A7:A3:B5:1E:47:23:68:8E:BB:F2:37:82:34:55
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/lCDchho_p6O1HkcjaI678jeCNFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3380::/29
Signature Algorithm: sha256WithRSAEncryption
62:4a:35:ce:32:fa:e5:c2:4b:cb:72:a1:cf:18:bc:37:5c:f8:
4c:d1:7a:6c:a9:d9:1a:45:5a:e1:4f:96:8a:5d:aa:c8:ab:1d:
c4:9a:85:85:b8:23:00:bf:a7:81:dd:80:a7:dd:d6:fd:dc:7c:
03:72:d5:f0:e4:99:6c:09:6f:2a:35:d5:25:1e:77:71:23:fc:
ad:83:f3:27:cf:41:75:09:5d:2b:76:66:9e:d7:0a:e4:75:17:
6c:70:3f:b7:1f:df:f7:bb:e7:59:4c:c7:1d:49:4b:1f:1e:25:
68:b9:a4:7a:64:91:9b:cf:bb:a2:03:e9:a6:5d:10:23:37:51:
4b:2c:b1:48:bf:67:2b:09:f8:a8:4d:09:7b:d7:9a:4a:f9:0d:
20:e3:3b:aa:a5:a7:73:9b:bf:7a:13:25:58:0b:e0:42:94:d9:
30:80:a3:59:f1:d9:77:d9:f4:51:3b:e7:d2:c1:57:fe:1b:01:
8b:94:77:55:83:67:ef:3b:4c:10:8d:ac:84:13:ad:96:ad:03:
e6:dc:c8:20:bc:02:66:8a:ca:20:07:7b:ad:f5:8f:58:7d:a3:
f9:8e:d5:c9:2c:a9:fc:a9:3b:21:2c:38:53:f0:80:5c:dd:ab:
23:22:f7:af:09:8b:e7:cf:c1:bf:9e:0e:cf:c3:f6:78:44:a8:
a4:59:88:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:47 2026 by rpki-client