Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/o67Gfz82nwl8ugAoWmSpQ4PJjV0.roa
File: o67Gfz82nwl8ugAoWmSpQ4PJjV0.roa (raw, json)
Hash identifier: nmhpbsrA+y/x9ns8YaX1bTT+ZGA9EpeVcf7CA3bUkfo=
Subject key identifier: A3:AE:C6:7F:3F:36:9F:09:7C:BA:00:28:5A:64:A9:43:83:C9:8D:5D
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A1295FA16B2D2BD2A8B86D612100F51694
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/o67Gfz82nwl8ugAoWmSpQ4PJjV0.roa
Signing time: Sun 11 Oct 2026 05:11:35 +0000
ROA not before: Sun 11 Oct 2026 05:11:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3080::/29 maxlen: 29
2001:3180::/29 maxlen: 29
2001:3280::/29 maxlen: 29
2001:3380::/29 maxlen: 29
2a10:6c40::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:b640::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:c040::/32 maxlen: 32
2a13:d2c0::/32 maxlen: 32
2a13:d2c4::/32 maxlen: 32
2a13:d2c6::/32 maxlen: 32
2a13:d2c7::/32 maxlen: 32
2a13:ddc0::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6b40::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
2a14:6bc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:5f:a1:6b:2d:2b:d2:a8:b8:6d:61:21:00:f5:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Oct 11 05:11:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3aec67f3f369f097cba00285a64a94383c98d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a2:81:97:84:9b:ad:71:44:a1:72:e7:96:5d:
40:bf:ea:8d:5e:ac:80:8e:5f:3f:e9:fd:f0:8f:7c:
e5:af:5d:94:aa:bb:cf:02:9d:9b:67:06:ae:97:43:
3b:3a:20:98:97:44:4c:aa:28:1d:67:9c:8a:29:d9:
8f:68:d9:f7:2a:c2:0a:32:fd:7f:92:69:b7:61:90:
aa:e9:6b:dc:32:de:fd:f8:98:23:d9:17:2b:57:d7:
c7:54:a0:d8:db:f3:bf:7b:d7:91:66:ac:7f:b8:7b:
2f:11:c2:8e:16:cb:25:77:f6:c8:06:cb:39:52:53:
56:12:ba:bc:9f:6e:c6:ab:dd:11:c7:93:31:91:77:
e1:81:d3:f1:8d:0e:02:af:b8:03:7f:64:09:63:90:
ac:d1:6e:f6:58:6c:ae:b3:f1:e8:53:0d:69:0d:23:
a5:6f:1a:96:88:1b:f1:83:f5:67:d7:ce:64:15:97:
97:6b:f2:6c:83:17:6b:e4:24:47:93:b3:2b:e9:4d:
c6:c0:da:d2:63:51:9c:55:ba:a7:b1:48:c3:56:1d:
9e:19:ac:88:62:83:67:6f:b6:5a:88:99:7b:73:8c:
4f:8e:e6:cc:b5:89:a1:33:db:7f:32:a3:76:b4:4e:
b3:49:57:46:3d:21:6c:7f:d2:36:7a:74:5b:cc:1b:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:C6:7F:3F:36:9F:09:7C:BA:00:28:5A:64:A9:43:83:C9:8D:5D
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/o67Gfz82nwl8ugAoWmSpQ4PJjV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2001:3180::/29
2001:3280::/29
2001:3380::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:b640::/29
2a13:b840::/29
2a13:c040::/32
2a13:d2c0::/32
2a13:d2c4::/32
2a13:d2c6::/31
2a13:ddc0::/29
2a13:de40::/29
2a14:6ac0::/29
2a14:6b40::/29
2a14:6bc0::/32
2a14:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
13:0f:b3:11:ab:80:ae:85:36:9f:20:b5:aa:20:3b:84:b3:99:
48:d8:ed:f3:98:a8:64:93:a6:3c:ea:49:a3:94:78:d7:72:60:
d8:fe:8f:78:19:59:de:b1:95:90:46:7e:0d:01:c1:ba:7a:a5:
4a:96:16:11:4e:d4:05:83:29:f8:16:31:fc:ef:58:a9:f3:e8:
9d:d4:09:3d:35:22:43:33:e3:a5:62:72:8f:ef:15:99:61:35:
50:dd:c3:95:44:b6:4b:b7:74:5f:5d:b0:76:e2:cc:89:fb:09:
48:15:ee:a5:ed:1a:82:a1:d9:0a:73:ed:8f:bf:61:7d:6a:91:
32:2e:06:8b:67:3c:84:73:bc:a3:36:a4:a9:ce:29:31:0e:6d:
50:71:ea:5b:f1:6d:db:55:42:a1:a7:49:ce:92:3b:5a:2a:26:
33:94:81:65:aa:a9:c4:65:ce:f8:41:2e:1d:5a:54:d0:e4:08:
6c:de:7d:87:17:4c:ec:ec:6d:7c:85:40:b6:31:3c:0c:23:ec:
ea:f8:88:3c:42:51:c6:7d:e8:7e:79:af:34:cd:33:ff:53:8e:
7b:8e:30:d2:2f:d5:a8:96:be:a5:01:1b:5d:5d:97:ea:5b:99:
15:8c:16:f8:c6:9d:51:02:61:a0:8c:d2:4c:63:ca:b7:e3:f8:
44:c2:4b:83
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgISAaEpX6FrLSvSqLhtYSEA9RaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYxMDExMDUxMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2FlYzY3ZjNmMzY5ZjA5N2NiYTAwMjg1YTY0YTk0MzgzYzk4ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qKBl4SbrXFEoXLnll1Av+qNXqyA
jl8/6f3wj3zlr12UqrvPAp2bZwaul0M7OiCYl0RMqigdZ5yKKdmPaNn3KsIKMv1/
kmm3YZCq6WvcMt79+Jgj2RcrV9fHVKDY2/O/e9eRZqx/uHsvEcKOFssld/bIBss5
UlNWErq8n27Gq90Rx5MxkXfhgdPxjQ4Cr7gDf2QJY5Cs0W72WGyus/HoUw1pDSOl
bxqWiBvxg/Vn185kFZeXa/Jsgxdr5CRHk7Mr6U3GwNrSY1GcVbqnsUjDVh2eGayI
YoNnb7ZaiJl7c4xPjubMtYmhM9t/MqN2tE6zSVdGPSFsf9I2enRbzBs21QIDAQAB
o4ICjTCCAokwHQYDVR0OBBYEFKOuxn8/Np8JfLoAKFpkqUODyY1dMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvbzY3R2Z6ODJud2w4dWdBb1dtU3BRNFBKalYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzCBjAQCAAIwgYUDBQMg
ATCAAwUDIAExgAMFAyABMoADBQMgATOAAwUDKhBsQAMFAyoQlgADBQMqE4AAAwUD
KhO2QAMFAyoTuEADBQAqE8BAAwUAKhPSwAMFACoT0sQDBQEqE9LGAwUDKhPdwAMF
AyoT3kADBQMqFGrAAwUDKhRrQAMFACoUa8ADBQAqFGvGMA0GCSqGSIb3DQEBCwUA
A4IBAQATD7MRq4CuhTafILWqIDuEs5lI2O3zmKhkk6Y86kmjlHjXcmDY/o94GVne
sZWQRn4NAcG6eqVKlhYRTtQFgyn4FjH871ip8+id1Ak9NSJDM+OlYnKP7xWZYTVQ
3cOVRLZLt3RfXbB24syJ+wlIFe6l7RqCodkKc+2Pv2F9apEyLgaLZzyEc7yjNqSp
zikxDm1Qcepb8W3bVUKhp0nOkjtaKiYzlIFlqqnEZc74QS4dWlTQ5Ahs3n2HF0zs
7G18hUC2MTwMI+zq+Ig8QlHGfeh+ea80zTP/U457jjDSL9Wolr6lARtdXZfqW5kV
jBb4xp1RAmGgjNJMY8q34/hEwkuD
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:24:52 2026 by rpki-client