Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/r1Wgk_E44e8zsMWgC1r4W5YUJII.roa
File: r1Wgk_E44e8zsMWgC1r4W5YUJII.roa (raw, json)
Hash identifier: ELefKMRzzdalO55UC3JXQT/ndnezPnV4L0Il/XhQyl8=
Subject key identifier: AF:55:A0:93:F1:38:E1:EF:33:B0:C5:A0:0B:5A:F8:5B:96:14:24:82
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A053D35000EB25809CF796742AB0E125CE
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/r1Wgk_E44e8zsMWgC1r4W5YUJII.roa
Signing time: Sun 30 Aug 2026 17:59:12 +0000
ROA not before: Sun 30 Aug 2026 17:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216215
IP address blocks: 2001:3280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:53:d3:50:00:eb:25:80:9c:f7:96:74:2a:b0:e1:25:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 30 17:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af55a093f138e1ef33b0c5a00b5af85b96142482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:0b:11:c0:38:d7:7e:d4:cc:d4:4b:7b:bd:
f0:24:7c:2a:0a:8e:3d:6b:9e:0a:b7:a3:04:36:89:
fe:0b:6a:41:26:28:b5:7b:04:01:13:25:8f:1f:9c:
b6:f2:7e:30:93:9b:89:3d:1b:f3:e6:f2:06:a9:53:
bb:d5:6a:81:e5:62:06:a4:a9:93:a1:d0:f7:b5:15:
4a:f3:5a:45:f7:f3:2b:d7:6a:c7:4d:db:c8:53:3a:
7d:87:f4:26:f7:0f:de:91:fb:37:ac:8a:3b:0c:60:
10:23:98:f6:0d:13:5c:b7:a3:07:15:96:15:01:e9:
41:f8:9a:6e:43:92:a5:e5:25:b7:8f:91:9b:65:98:
b0:54:f2:f7:7f:fa:d5:d3:57:18:b6:30:89:39:29:
10:6a:46:27:37:b9:36:ca:cb:f5:69:79:c8:6f:e4:
64:1c:1a:96:0a:14:54:2b:62:64:62:55:5d:aa:31:
67:a0:34:d8:15:2f:36:cb:8b:57:78:fb:7f:9b:04:
7b:54:c3:0a:db:74:e2:a8:4b:6a:ae:5d:48:b2:6e:
90:55:bb:c5:c6:fc:c8:6c:7a:5a:2b:64:e8:8c:af:
5e:fd:48:a2:07:bd:49:3a:a9:22:d1:62:09:8a:db:
c6:3f:9a:04:92:9a:27:f1:86:0f:70:5a:80:30:92:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:A0:93:F1:38:E1:EF:33:B0:C5:A0:0B:5A:F8:5B:96:14:24:82
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/r1Wgk_E44e8zsMWgC1r4W5YUJII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3280::/29
Signature Algorithm: sha256WithRSAEncryption
47:68:7f:78:0c:88:b8:0a:6e:d5:97:17:f9:51:b7:71:d9:5c:
fa:f5:f6:5b:8b:35:b0:bb:da:1f:86:b5:88:48:02:dd:42:a7:
8f:2b:32:ef:44:f0:bc:b9:17:57:4b:42:5a:a3:be:59:68:d3:
b4:3f:8f:9b:7d:64:b8:a4:67:a8:56:c4:b7:54:c9:3b:40:e3:
a9:fa:a7:6a:4e:b5:56:09:82:1d:a7:97:50:7d:5c:e8:30:97:
89:2b:db:87:d2:68:03:b5:f9:49:e9:11:30:84:7c:aa:6f:e0:
89:9d:20:2d:3a:9f:12:68:b1:e3:57:ee:ca:9e:6a:f7:39:4b:
2c:1c:f6:22:d6:c2:a7:6a:25:69:1a:ff:ab:19:4b:a0:16:82:
95:3f:1b:aa:d6:09:16:23:cd:aa:14:4a:16:c3:a5:f3:92:ff:
d0:00:3a:d3:8f:ec:43:ec:92:0a:73:b5:3f:18:53:95:b6:fe:
0f:30:f4:7c:f8:1d:95:10:86:6a:69:d9:2f:6c:e3:c5:f6:6b:
62:bd:e8:b0:72:ae:14:95:f5:ce:31:22:3c:4c:de:06:df:6f:
98:27:fb:7b:4a:19:6d:58:5b:23:2f:b7:37:e4:f5:98:ba:83:
3d:3d:12:28:08:c6:cd:6c:63:41:e4:fa:bc:57:ff:39:45:e1:
91:67:4a:52
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaBT01AA6yWAnPeWdCqw4SXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwODMwMTc1OTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjU1YTA5M2YxMzhlMWVmMzNiMGM1YTAwYjVhZjg1Yjk2MTQyNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w0LEcA4137UzNRLe73wJHwqCo49
a54Kt6MENon+C2pBJii1ewQBEyWPH5y28n4wk5uJPRvz5vIGqVO71WqB5WIGpKmT
odD3tRVK81pF9/Mr12rHTdvIUzp9h/Qm9w/ekfs3rIo7DGAQI5j2DRNct6MHFZYV
AelB+JpuQ5Kl5SW3j5GbZZiwVPL3f/rV01cYtjCJOSkQakYnN7k2ysv1aXnIb+Rk
HBqWChRUK2JkYlVdqjFnoDTYFS82y4tXePt/mwR7VMMK23TiqEtqrl1Ism6QVbvF
xvzIbHpaK2TojK9e/UiiB71JOqki0WIJitvGP5oEkpon8YYPcFqAMJLRfQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFK9VoJPxOOHvM7DFoAta+FuWFCSCMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvcjFXZ2tfRTQ0ZTh6c01XZ0MxcjRXNVlVSklJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAEygDAN
BgkqhkiG9w0BAQsFAAOCAQEAR2h/eAyIuApu1ZcX+VG3cdlc+vX2W4s1sLvaH4a1
iEgC3UKnjysy70TwvLkXV0tCWqO+WWjTtD+Pm31kuKRnqFbEt1TJO0Djqfqnak61
VgmCHaeXUH1c6DCXiSvbh9JoA7X5SekRMIR8qm/giZ0gLTqfEmix41fuyp5q9zlL
LBz2ItbCp2olaRr/qxlLoBaClT8bqtYJFiPNqhRKFsOl85L/0AA604/sQ+ySCnO1
PxhTlbb+DzD0fPgdlRCGamnZL2zjxfZrYr3osHKuFJX1zjEiPEzeBt9vmCf7e0oZ
bVhbIy+3N+T1mLqDPT0SKAjGzWxjQeT6vFf/OUXhkWdKUg==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:04 2026 by rpki-client