Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oeFdhlTrvvJXwSyr4dhLwFILWb8.roa
File: oeFdhlTrvvJXwSyr4dhLwFILWb8.roa (raw, json)
Hash identifier: pXqa0NpL3egHHKhdPPis08/jdLmhUrK1ep7yzMl+HFY=
Subject key identifier: A1:E1:5D:86:54:EB:BE:F2:57:C1:2C:AB:E1:D8:4B:C0:52:0B:59:BF
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019F4AD99FB345AFD006CCC858DCBF6B247E
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oeFdhlTrvvJXwSyr4dhLwFILWb8.roa
Signing time: Fri 10 Jul 2026 07:06:43 +0000
ROA not before: Fri 10 Jul 2026 07:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a13:c040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:d9:9f:b3:45:af:d0:06:cc:c8:58:dc:bf:6b:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 10 07:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1e15d8654ebbef257c12cabe1d84bc0520b59bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:82:fc:2a:d7:ea:f3:ec:3f:9f:64:d7:e2:
21:7e:38:b6:7f:af:1a:be:fd:15:8a:fa:98:04:18:
80:cb:2f:87:5f:f7:4c:36:52:88:8a:d9:4e:7f:c3:
46:5c:53:f5:68:2a:f8:8e:fc:13:f1:b3:d5:cc:2a:
cf:53:58:e8:b5:97:a5:6c:40:2f:fd:49:3d:0a:78:
43:97:59:f7:1b:66:99:b2:bb:ae:82:dd:89:aa:42:
b4:c6:e0:73:2f:47:f0:46:8e:d2:49:06:22:aa:43:
2b:74:7d:8c:40:48:17:07:2f:2b:68:85:e7:2d:f6:
eb:b0:50:39:9d:a7:51:3b:8c:10:46:85:e1:57:a7:
84:7e:f1:87:64:c0:93:db:a9:da:e7:7a:43:86:9a:
a5:6c:5c:c0:40:f4:97:e4:ea:88:24:e3:74:90:d1:
bb:36:6a:2a:23:a9:22:8f:53:03:32:4e:be:8a:2b:
fd:60:ab:41:0e:e3:8a:e6:24:b1:8d:1d:14:ba:de:
f5:7d:86:ed:ea:ff:86:88:63:ec:d5:1b:46:2e:7a:
b8:dd:7b:2c:22:88:76:d7:a6:90:3c:ea:51:22:10:
75:2f:eb:e9:f1:58:69:b3:ef:70:a5:93:57:1e:9c:
82:10:09:0c:3c:f4:4a:17:81:d8:e0:41:71:b9:ef:
29:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E1:5D:86:54:EB:BE:F2:57:C1:2C:AB:E1:D8:4B:C0:52:0B:59:BF
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oeFdhlTrvvJXwSyr4dhLwFILWb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c040::/32
Signature Algorithm: sha256WithRSAEncryption
6e:cd:5c:81:b8:c9:4e:64:20:44:55:a6:67:bd:2a:4b:07:20:
17:c8:32:6b:7f:7a:60:27:b5:0c:54:e0:a3:5a:9a:66:aa:a7:
bc:75:8b:5a:9b:b8:4b:8c:1e:a8:f0:9d:fb:76:94:f9:fa:4d:
8c:9e:9f:e3:72:66:c3:ec:93:73:e9:d7:61:d3:92:99:23:12:
d6:2d:1e:36:51:06:13:9f:d8:4b:11:60:b8:cf:81:75:47:e9:
82:d8:9e:1c:bb:10:39:1b:67:84:ae:32:ff:6e:ad:89:cb:cd:
67:c3:a2:d0:55:99:85:7d:46:bf:37:fc:c4:72:21:e4:44:f6:
75:7e:93:a5:b9:1f:1d:1c:23:4e:fb:7f:3e:47:36:d8:5e:10:
1f:99:99:d6:96:6c:f5:50:89:d2:72:bb:de:8e:65:a6:4d:19:
70:0b:f0:2c:17:d5:79:53:fd:97:d6:86:c1:ac:5e:c6:f7:e1:
46:83:71:ab:22:10:56:98:16:45:c1:90:b0:e0:e5:96:5d:56:
98:b9:13:6d:e8:4a:85:b8:45:dd:80:b9:aa:90:3d:7a:35:ae:
5e:d8:84:68:9f:8f:53:0a:d8:6d:37:42:70:23:ab:c2:24:2e:
01:f2:9e:1f:3b:1e:0c:e8:0d:98:30:7d:ae:a7:97:bb:6d:e0:
68:e6:45:37
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9K2Z+zRa/QBszIWNy/ayR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNzEwMDcwNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWUxNWQ4NjU0ZWJiZWYyNTdjMTJjYWJlMWQ4NGJjMDUyMGI1OWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnyC/CrX6vPsP59k1+Ihfji2f68a
vv0VivqYBBiAyy+HX/dMNlKIitlOf8NGXFP1aCr4jvwT8bPVzCrPU1jotZelbEAv
/Uk9CnhDl1n3G2aZsruugt2JqkK0xuBzL0fwRo7SSQYiqkMrdH2MQEgXBy8raIXn
LfbrsFA5nadRO4wQRoXhV6eEfvGHZMCT26na53pDhpqlbFzAQPSX5OqIJON0kNG7
NmoqI6kij1MDMk6+iiv9YKtBDuOK5iSxjR0Uut71fYbt6v+GiGPs1RtGLnq43Xss
Ioh216aQPOpRIhB1L+vp8Vhps+9wpZNXHpyCEAkMPPRKF4HY4EFxue8pSwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKHhXYZU677yV8Esq+HYS8BSC1m/MB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvb2VGZGhsVHJ2dkpYd1N5cjRkaEx3RklMV2I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPAQDAN
BgkqhkiG9w0BAQsFAAOCAQEAbs1cgbjJTmQgRFWmZ70qSwcgF8gya396YCe1DFTg
o1qaZqqnvHWLWpu4S4weqPCd+3aU+fpNjJ6f43Jmw+yTc+nXYdOSmSMS1i0eNlEG
E5/YSxFguM+BdUfpgtieHLsQORtnhK4y/26ticvNZ8Oi0FWZhX1Gvzf8xHIh5ET2
dX6TpbkfHRwjTvt/Pkc22F4QH5mZ1pZs9VCJ0nK73o5lpk0ZcAvwLBfVeVP9l9aG
waxexvfhRoNxqyIQVpgWRcGQsODlll1WmLkTbehKhbhF3YC5qpA9ejWuXtiEaJ+P
UwrYbTdCcCOrwiQuAfKeHzseDOgNmDB9rqeXu23gaOZFNw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:27 2026 by rpki-client