Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/lwsNulVVJWNaxsNEgmTTWI1dP4A.roa
File: lwsNulVVJWNaxsNEgmTTWI1dP4A.roa (raw, json)
Hash identifier: SxeVxFLvjbbAzoKV8otoO/PJKiT4ml8tPdVv1A4JVWY=
Subject key identifier: 97:0B:0D:BA:55:55:25:63:5A:C6:C3:44:82:64:D3:58:8D:5D:3F:80
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A05CFA263A0C3DC246BB3A58D0CF0C0817
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/lwsNulVVJWNaxsNEgmTTWI1dP4A.roa
Signing time: Tue 01 Sep 2026 12:38:12 +0000
ROA not before: Tue 01 Sep 2026 12:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402933
IP address blocks: 2a13:b640::/29 maxlen: 29
2a13:bfc0::/29 maxlen: 29
2a13:c040::/32 maxlen: 32
2a14:6ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:fa:26:3a:0c:3d:c2:46:bb:3a:58:d0:cf:0c:08:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 1 12:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=970b0dba555525635ac6c3448264d3588d5d3f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:fc:f9:ff:c1:5b:ac:bd:02:6a:21:9b:81:
70:fa:6e:db:cc:ba:e0:5f:10:c7:30:f2:24:79:6f:
cf:b4:ad:1e:e0:1e:ad:9e:f0:8b:d2:d9:6a:e3:64:
52:df:3c:de:46:6f:66:f9:66:4f:d1:8f:ff:b7:a5:
c8:ba:8c:e7:87:52:14:31:81:38:8b:29:e4:d8:10:
10:20:8d:0b:a8:be:bf:85:14:17:fa:63:a4:dd:76:
f5:41:a7:5f:48:9a:26:2c:27:7a:24:71:35:8f:db:
e4:c3:48:0c:d8:b6:28:f9:ba:f8:10:43:2b:a3:fe:
47:66:ad:7b:fb:e6:d0:94:32:f1:a6:1d:19:62:fd:
30:5f:5e:4f:67:c4:ab:2f:3c:01:21:63:ad:4a:bf:
4b:58:f7:a4:dc:51:d5:9a:da:90:3e:2b:ba:00:03:
80:87:53:5e:66:13:73:ba:67:af:4e:b5:e0:00:ee:
95:cf:f5:5a:65:91:75:f0:98:4e:1f:a8:06:00:30:
24:da:84:14:94:db:15:62:da:7d:7b:fc:7f:90:7a:
fe:dd:05:59:04:7b:10:3c:d2:78:88:e0:52:b0:a9:
34:8d:37:6d:d6:3b:9f:f9:fa:77:72:23:35:ca:d6:
1f:ad:77:e9:22:0c:a2:f6:27:42:df:c9:a1:cb:db:
5a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0B:0D:BA:55:55:25:63:5A:C6:C3:44:82:64:D3:58:8D:5D:3F:80
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/lwsNulVVJWNaxsNEgmTTWI1dP4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b640::/29
2a13:bfc0::/29
2a13:c040::/32
2a14:6ac0::/29
Signature Algorithm: sha256WithRSAEncryption
49:d7:63:b1:da:27:b8:57:57:c0:e5:4b:7f:2e:eb:73:5b:61:
ca:75:37:b9:4d:d7:7f:0e:1e:96:29:39:95:0b:cb:2d:b9:6e:
21:83:ca:c2:aa:d6:b9:7e:ee:3e:ad:de:73:65:96:5f:b6:41:
7b:53:69:bc:0f:3c:50:82:e3:00:5f:a7:f9:9f:c9:09:18:1a:
94:53:f2:38:cb:3b:1a:fa:8e:3f:c8:67:6d:d2:02:ca:47:c5:
0d:cb:4d:37:0a:60:ba:74:ec:c6:62:fc:97:cf:9c:3a:3b:c6:
f7:5d:6b:87:cc:31:9a:a5:03:3f:90:44:eb:72:48:be:49:b4:
0e:b7:d6:3e:c8:e0:ce:1b:88:51:de:f9:5d:8a:73:ba:be:a4:
44:5b:47:37:4b:94:c8:a0:40:f4:b5:53:78:9f:f7:a0:31:0a:
4b:bc:f8:74:43:44:49:83:29:d4:07:65:f4:b0:16:64:cc:5b:
01:b4:db:a7:2b:cc:6d:3a:f4:7a:17:93:b2:2b:19:63:3d:cc:
25:f1:4e:1a:44:11:f7:0a:fa:93:c5:65:34:26:31:ac:cd:5f:
fb:fc:4a:d2:b1:53:67:6e:bf:24:d7:09:ee:68:93:de:78:9a:
d5:95:79:c6:1b:2c:fd:ca:75:9f:6a:b3:b7:d5:04:34:95:22:
c1:5d:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:44 2026 by rpki-client