Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/re4fAUN0nACDvRDgjnKO5e-89-s.roa
File: re4fAUN0nACDvRDgjnKO5e-89-s.roa (raw, json)
Hash identifier: 8nHMhlRT0pK2mqt6KaKmu50hkWZEw4Sy7qQp9hjbCbg=
Subject key identifier: AD:EE:1F:01:43:74:9C:00:83:BD:10:E0:8E:72:8E:E5:EF:BC:F7:EB
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019E5849E04A110DB09A206CA9FBAD3A0BB4
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/re4fAUN0nACDvRDgjnKO5e-89-s.roa
Signing time: Sun 24 May 2026 04:41:36 +0000
ROA not before: Sun 24 May 2026 04:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2001:3080::/29 maxlen: 29
2001:3180::/29 maxlen: 29
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
2a14:6bc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:58:49:e0:4a:11:0d:b0:9a:20:6c:a9:fb:ad:3a:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: May 24 04:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adee1f0143749c0083bd10e08e728ee5efbcf7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:98:36:15:f3:15:66:c9:ee:ed:ee:ac:9c:
5d:36:a1:42:75:d2:7b:dc:80:fb:2d:97:ee:2b:30:
a6:3e:65:b4:63:7e:dc:2a:37:cb:38:a2:74:ae:53:
34:54:3e:b6:ee:bc:00:42:9b:e8:95:86:77:fd:ae:
07:db:e8:c5:df:fe:b9:ba:12:a5:bd:f1:4f:ac:fa:
b7:cd:0e:39:8d:bf:aa:51:de:f1:3f:6f:68:c6:e6:
0b:5d:e0:dc:dd:5a:43:47:6d:1a:3e:51:99:0a:cc:
b7:49:ea:d0:60:3d:e4:fe:4b:8e:15:2f:3c:e6:ed:
0d:e5:ac:2f:6f:79:6f:fc:05:7f:40:c7:de:5c:64:
42:d1:9d:62:cc:f1:9a:87:05:77:b9:58:60:35:9e:
97:c5:1a:09:61:65:64:6f:c8:45:db:96:b7:8b:bf:
19:38:29:8c:7d:bd:7e:e9:0d:e8:cd:bd:1a:e0:0d:
21:92:d6:67:50:8b:3b:4b:c3:f8:ae:c5:80:cc:10:
20:fa:cf:f0:83:d9:ef:c0:80:21:41:e9:1f:cc:af:
ea:f0:a1:fa:5f:f5:f5:83:83:27:79:0e:00:cd:f8:
87:92:6c:6e:ca:87:45:12:3e:6b:56:0f:da:8c:f2:
36:f3:a8:9b:de:9e:9f:de:6f:da:02:5d:a9:06:5c:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EE:1F:01:43:74:9C:00:83:BD:10:E0:8E:72:8E:E5:EF:BC:F7:EB
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/re4fAUN0nACDvRDgjnKO5e-89-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2001:3180::/29
2a10:6c40::/29
2a10:9600::/29
2a14:6ac0::/29
2a14:6bc0::/32
2a14:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
a9:e3:b8:b3:93:0b:54:55:4a:d7:42:b8:e6:62:2a:ed:13:6b:
b0:23:73:71:f9:c5:1e:03:40:d4:a2:2b:52:28:65:02:2e:ad:
02:b6:f1:30:c7:0d:4b:9b:ee:59:c5:55:3e:90:0a:42:8d:1a:
f8:30:82:7b:b1:e8:51:f7:1d:85:3f:89:21:ae:23:91:4f:b2:
7d:63:68:bc:dd:b2:ec:3f:05:34:52:a7:fb:b3:0c:83:79:77:
a3:1a:cf:73:db:2b:71:9c:71:2f:b9:07:99:f5:5c:90:48:5f:
9b:81:56:d7:65:2d:46:05:d8:91:73:05:d5:58:eb:5d:c6:f7:
7f:74:dd:3f:b7:2b:33:81:33:da:a0:d4:51:66:8c:24:49:3f:
71:49:31:20:5b:9d:b0:0e:07:90:a4:01:88:e5:fd:09:23:9b:
e2:81:df:60:ae:9a:89:2b:8f:2e:6f:ae:3a:cd:7c:11:3e:b8:
9f:2e:ce:ba:ef:0c:8a:23:03:e3:ab:33:f8:57:2e:b7:ea:a2:
0c:c9:b1:38:28:14:9e:94:89:c6:df:c2:a5:be:e7:74:36:1b:
00:fe:c4:f0:d0:f6:c8:cb:cb:fb:7e:d3:72:2d:85:30:82:ba:
f1:6b:5f:e3:f7:ac:f3:93:e4:fd:97:45:fa:f3:b2:f9:fd:77:
71:3b:39:4a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZ5YSeBKEQ2wmiBsqfutOgu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNTI0MDQ0MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGVlMWYwMTQzNzQ5YzAwODNiZDEwZTA4ZTcyOGVlNWVmYmNmN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCGYNhXzFWbJ7u3urJxdNqFCddJ7
3ID7LZfuKzCmPmW0Y37cKjfLOKJ0rlM0VD627rwAQpvolYZ3/a4H2+jF3/65uhKl
vfFPrPq3zQ45jb+qUd7xP29oxuYLXeDc3VpDR20aPlGZCsy3SerQYD3k/kuOFS88
5u0N5awvb3lv/AV/QMfeXGRC0Z1izPGahwV3uVhgNZ6XxRoJYWVkb8hF25a3i78Z
OCmMfb1+6Q3ozb0a4A0hktZnUIs7S8P4rsWAzBAg+s/wg9nvwIAhQekfzK/q8KH6
X/X1g4MneQ4AzfiHkmxuyodFEj5rVg/ajPI286ib3p6f3m/aAl2pBlxcawIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFK3uHwFDdJwAg70Q4I5yjuXvvPfrMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvcmU0ZkFVTjBuQUNEdlJEZ2puS081ZS04OS1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUDIAEwgAMF
AyABMYADBQMqEGxAAwUDKhCWAAMFAyoUasADBQAqFGvAAwUAKhRrxjANBgkqhkiG
9w0BAQsFAAOCAQEAqeO4s5MLVFVK10K45mIq7RNrsCNzcfnFHgNA1KIrUihlAi6t
ArbxMMcNS5vuWcVVPpAKQo0a+DCCe7HoUfcdhT+JIa4jkU+yfWNovN2y7D8FNFKn
+7MMg3l3oxrPc9srcZxxL7kHmfVckEhfm4FW12UtRgXYkXMF1VjrXcb3f3TdP7cr
M4Ez2qDUUWaMJEk/cUkxIFudsA4HkKQBiOX9CSOb4oHfYK6aiSuPLm+uOs18ET64
ny7Ouu8MiiMD46sz+Fcut+qiDMmxOCgUnpSJxt/Cpb7ndDYbAP7E8ND2yMvL+37T
ci2FMIK68Wtf4/es85Pk/ZdF+vOy+f13cTs5Sg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:04 2026 by rpki-client