Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/56HUMnOVLizp5vl6aXgPcPNn_fk.roa
File: 56HUMnOVLizp5vl6aXgPcPNn_fk.roa (raw, json)
Hash identifier: YF1jFG43jTgnM9BgnhfbPCFUiix1RI6CfclqbM/48Wg=
Subject key identifier: E7:A1:D4:32:73:95:2E:2C:E9:E6:F9:7A:69:78:0F:70:F3:67:FD:F9
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019EF0A2670FBA3A3C528431B205582FA2A3
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/56HUMnOVLizp5vl6aXgPcPNn_fk.roa
Signing time: Mon 22 Jun 2026 18:40:35 +0000
ROA not before: Mon 22 Jun 2026 18:40:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209658
IP address blocks: 2a11:1fc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:a2:67:0f:ba:3a:3c:52:84:31:b2:05:58:2f:a2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Jun 22 18:40:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7a1d43273952e2ce9e6f97a69780f70f367fdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:06:f9:b5:66:e0:52:04:e0:df:23:cc:bf:
2b:84:e6:6f:0c:d7:0f:6d:19:a0:ad:a3:bf:04:23:
df:41:7d:77:a4:96:05:ad:cb:61:8e:c6:fd:1a:3b:
2d:73:a6:b9:30:1a:ed:fb:6c:c6:c2:d3:3f:5e:cf:
2a:80:de:8b:cd:51:a4:ba:be:34:30:61:2e:b2:4c:
44:e7:92:86:83:bc:0a:8f:a8:83:00:99:e0:34:7e:
11:9f:c2:42:81:df:cd:73:f6:45:10:05:36:cf:3d:
21:d6:24:4f:33:5a:ad:15:24:02:e2:15:c5:b5:82:
d3:95:ea:b8:f7:6b:f8:a9:7a:47:a6:ed:f7:aa:3b:
5c:dc:5f:f4:8b:f8:2f:13:f5:fd:9d:5e:8c:91:db:
61:ef:4a:2e:ef:b0:80:29:18:1a:2a:cc:68:d5:d9:
22:cf:8a:be:02:94:c8:7a:38:b6:3d:ff:c3:c9:03:
4c:8c:a8:cd:23:90:3a:bc:cc:63:0c:26:b1:a7:b0:
39:98:9d:60:0a:ed:7a:8d:e8:28:6f:1f:75:4e:4a:
58:2e:6a:5f:15:5a:cb:80:fd:89:da:1d:30:14:e3:
5a:ee:de:b3:95:cd:90:74:41:0b:16:22:51:56:2f:
14:4c:3f:d9:e8:fc:42:65:7e:e6:2e:b4:e5:3d:f1:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A1:D4:32:73:95:2E:2C:E9:E6:F9:7A:69:78:0F:70:F3:67:FD:F9
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/56HUMnOVLizp5vl6aXgPcPNn_fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1fc7::/32
Signature Algorithm: sha256WithRSAEncryption
d8:97:ef:de:22:c7:a9:86:da:0e:84:f4:4d:e7:8c:f9:f0:9b:
65:17:00:78:54:b6:f9:fa:77:cf:e3:c9:67:e7:4e:a9:6c:5b:
f8:80:97:17:d3:1f:e4:39:e9:08:25:79:0d:45:d1:f0:4e:44:
17:55:c3:e9:ae:2d:29:d2:7a:f4:83:cf:9c:27:18:10:6e:75:
57:bd:67:37:31:10:d7:28:86:d0:59:4a:7f:84:59:35:e5:50:
8e:a9:e6:90:bb:52:24:7f:11:c1:6c:26:5f:40:95:2a:dc:42:
f9:96:b9:ab:9d:dc:81:be:2f:38:ad:6f:db:c9:cb:99:9b:40:
72:9d:77:0e:57:9c:53:d9:94:b6:a4:26:51:6f:77:ad:b3:af:
68:02:59:b4:76:06:c8:55:50:c0:8a:c2:11:74:93:b1:fc:22:
60:6c:6e:3c:70:2a:d5:c8:cf:83:80:d3:83:3b:73:23:6f:10:
a5:38:0a:a1:9a:64:7a:ee:d4:7a:a1:77:b9:42:e4:f4:ef:17:
6a:a7:e9:91:d2:da:5e:65:6e:4a:54:cc:57:7e:f5:18:c9:7f:
7c:e1:00:75:0d:5c:5e:86:3c:1a:c4:84:83:49:fb:cc:0a:13:
d6:b1:12:23:e0:95:60:1c:b1:19:87:e7:05:10:f6:de:dc:59:
cb:a6:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:32 2026 by rpki-client