Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/lgd8k4cMEALQYCY7hUKgkfImf7U.roa
File: lgd8k4cMEALQYCY7hUKgkfImf7U.roa (raw, json)
Hash identifier: I75ZyCUrDpwmolfikHQ2jpuvu61lAsFc62yQqpKFZhs=
Subject key identifier: 96:07:7C:93:87:0C:10:02:D0:60:26:3B:85:42:A0:91:F2:26:7F:B5
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019FB9D732A401E9AC65EF8AC02D8FE3C1DA
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/lgd8k4cMEALQYCY7hUKgkfImf7U.roa
Signing time: Fri 31 Jul 2026 20:21:55 +0000
ROA not before: Fri 31 Jul 2026 20:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3180::/29 maxlen: 29
2001:3380::/29 maxlen: 29
2a0e:a780::/29 maxlen: 32
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:bfc0::/32 maxlen: 32
2a13:d2c0::/32 maxlen: 32
2a13:d2c4::/32 maxlen: 32
2a13:d2c6::/32 maxlen: 32
2a13:d2c7::/32 maxlen: 32
2a13:ddc0::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:d7:32:a4:01:e9:ac:65:ef:8a:c0:2d:8f:e3:c1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 31 20:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96077c93870c1002d060263b8542a091f2267fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:ef:0c:18:5a:eb:43:82:0a:07:05:9b:31:
d0:f3:17:e9:84:ba:a4:45:5b:48:be:c2:12:6f:46:
71:13:00:a1:1a:fd:75:de:31:b2:e2:71:9e:aa:43:
22:89:da:df:f0:18:b1:e0:4d:04:c5:8e:a0:44:4c:
47:31:a0:73:82:c0:c0:77:77:50:59:e7:27:85:ff:
55:ed:d9:67:30:28:dd:29:3d:84:f8:f3:1a:4e:7c:
38:d3:a5:13:26:8a:6d:0d:3d:49:55:53:25:7e:ec:
9d:7c:08:d1:20:8f:31:4e:f0:66:46:97:7b:2e:aa:
43:5a:39:d9:9d:54:ce:2c:cc:d1:16:85:7a:50:c3:
10:f8:0f:6e:97:78:8c:a7:87:54:56:19:3c:2c:0c:
c5:3e:fa:36:80:f1:99:07:ed:5c:b2:58:97:6a:a9:
3d:30:14:3f:e0:21:05:21:ce:62:f0:98:a4:a8:8f:
28:1a:e5:0d:fc:d9:fb:dd:63:1e:cd:15:6f:69:c1:
84:3e:72:99:f6:a1:f8:e6:f5:a1:f3:c7:37:87:b2:
2e:57:05:c1:89:a1:23:68:97:97:aa:53:a8:b8:0e:
bf:97:95:82:77:4f:29:a2:17:ee:c8:b2:cf:45:c3:
6d:64:e3:27:df:5d:f7:5a:78:a0:b7:33:a2:a5:10:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:7C:93:87:0C:10:02:D0:60:26:3B:85:42:A0:91:F2:26:7F:B5
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/lgd8k4cMEALQYCY7hUKgkfImf7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3180::/29
2001:3380::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:b840::/29
2a13:bfc0::/32
2a13:d2c0::/32
2a13:d2c4::/32
2a13:d2c6::/31
2a13:ddc0::/29
2a14:6ac0::/29
2a14:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
44:ed:4e:45:73:b2:66:3c:29:cf:72:29:c9:77:98:5d:27:94:
93:c2:06:c7:76:26:df:89:6b:f4:eb:3b:69:2e:a8:f3:27:9f:
ae:9f:49:8a:f6:d0:62:0a:a1:50:7a:84:92:2e:dc:6c:9e:47:
e7:55:05:5c:e5:47:25:4a:f7:66:78:05:2f:0c:f9:74:0b:d8:
b7:a1:bd:75:f3:46:46:7f:10:97:cd:f5:a5:d2:a2:89:4b:96:
31:04:62:14:eb:61:cf:45:7a:43:2b:6e:32:3a:fd:07:82:ba:
43:49:2f:41:0d:ea:47:51:93:bb:90:87:72:35:4d:fd:ad:8f:
20:c5:27:4e:e2:e1:69:87:8d:9e:b6:78:b8:9e:80:30:0b:fd:
6b:10:d2:02:58:02:74:5b:38:95:fe:46:30:33:cb:8b:cf:62:
0d:36:1a:ac:2a:af:ca:f1:e7:e1:07:33:1f:48:38:9c:14:c1:
ba:7e:8b:bc:e8:c7:5d:ab:bc:54:4f:bd:0c:4d:8a:55:fe:9b:
08:79:b0:cc:b1:81:85:6a:39:c0:57:20:4d:c0:91:85:5c:42:
59:59:b7:8d:4e:32:eb:96:8e:19:4f:9d:9f:ba:ac:17:7e:c2:
a5:ae:d6:67:9b:8e:0f:59:e4:d3:05:5d:c4:55:7d:00:45:7e:
a9:9a:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:05 2026 by rpki-client