Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/7Jk9OYndHV42i_QN7gFz2XgdiYU.roa
File: 7Jk9OYndHV42i_QN7gFz2XgdiYU.roa (raw, json)
Hash identifier: 7bG/Hn1df9uvQMY3emYOyMs88LqSItUmZ1+JCQzqn/Q=
Subject key identifier: EC:99:3D:39:89:DD:1D:5E:36:8B:F4:0D:EE:01:73:D9:78:1D:89:85
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019F8FA183C15EAE78443075D7FFA202DD93
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/7Jk9OYndHV42i_QN7gFz2XgdiYU.roa
Signing time: Thu 23 Jul 2026 15:39:14 +0000
ROA not before: Thu 23 Jul 2026 15:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2a0b:3e00::/32 maxlen: 32
2a0b:3e01::/32 maxlen: 32
2a0b:3e02::/32 maxlen: 32
2a0b:3e03::/32 maxlen: 32
2a0b:3e04::/32 maxlen: 32
2a0b:3e05::/32 maxlen: 32
2a0b:3e06::/32 maxlen: 32
2a0b:3e07::/32 maxlen: 32
2a0c:8340::/32 maxlen: 32
2a0c:8341::/32 maxlen: 32
2a0c:8342::/32 maxlen: 32
2a0c:8343::/32 maxlen: 32
2a0c:8344::/32 maxlen: 32
2a0c:8345::/32 maxlen: 32
2a0c:8346::/32 maxlen: 32
2a0c:8347::/32 maxlen: 32
2a14:35c0::/32 maxlen: 32
2a14:35c1::/32 maxlen: 32
2a14:35c2::/32 maxlen: 32
2a14:35c3::/32 maxlen: 32
2a14:35c4::/32 maxlen: 32
2a14:35c5::/32 maxlen: 32
2a14:35c6::/32 maxlen: 32
2a14:35c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:a1:83:c1:5e:ae:78:44:30:75:d7:ff:a2:02:dd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 23 15:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec993d3989dd1d5e368bf40dee0173d9781d8985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:8b:09:cb:53:74:56:d0:5e:18:0b:13:9f:
23:f5:28:8b:54:01:36:1a:e2:25:ad:ac:50:3d:49:
79:4d:d7:05:85:f6:18:25:82:60:55:37:19:21:46:
af:a1:97:2d:f1:cc:91:81:9e:71:10:be:de:55:35:
85:3d:95:39:bd:62:5b:b3:d9:03:40:84:52:98:3d:
5e:9f:69:ca:a4:40:52:c8:7a:55:8b:1f:95:b4:84:
6c:63:0f:e4:c3:3e:df:21:aa:99:a8:29:ae:58:8d:
b2:88:93:2b:a5:f4:17:ef:f3:42:80:d1:8e:3b:87:
05:e7:e3:c9:de:ea:43:a6:75:58:e3:18:9f:de:01:
5f:34:d6:c9:8e:d6:49:a2:fc:99:bc:71:be:e4:be:
0a:cb:43:da:dd:e1:20:25:69:18:52:01:2d:84:bd:
0c:35:36:aa:cc:29:a7:66:51:36:1d:66:de:76:ea:
6b:b4:24:45:38:e0:94:7d:68:89:7f:73:85:29:04:
a8:0c:53:20:30:61:be:c0:c7:7c:84:7c:d1:6d:4e:
9b:63:28:a1:b6:64:fa:34:eb:77:d3:3d:58:bf:6c:
ff:52:d9:0e:6f:7c:39:4e:af:6c:c5:de:a2:83:65:
f5:39:ec:81:55:33:7d:a9:40:e7:84:45:76:0c:f0:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:99:3D:39:89:DD:1D:5E:36:8B:F4:0D:EE:01:73:D9:78:1D:89:85
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/7Jk9OYndHV42i_QN7gFz2XgdiYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3e00::/29
2a0c:8340::/29
2a14:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
35:36:10:b5:1f:dd:67:ef:53:de:ad:e0:0b:da:2c:bb:18:84:
5d:c2:01:5e:f3:61:73:83:92:f2:33:51:78:dc:8b:6d:f8:3b:
a5:e4:aa:49:73:ef:d0:04:27:9d:20:e3:92:74:0e:d2:94:03:
51:81:48:4e:cc:14:7c:da:8d:c2:23:22:89:4c:06:ab:38:5e:
b9:52:8d:5a:54:9b:4b:64:8f:eb:83:cd:7f:59:4a:5e:18:d7:
26:8e:39:d9:7b:74:9a:59:d5:8f:18:36:ac:1d:40:2a:85:eb:
6f:6f:0d:0e:3a:e6:d4:10:d8:19:6d:2a:dc:a1:18:ee:c9:a3:
28:63:37:7a:ec:b3:be:94:4f:69:3c:30:46:c3:96:8d:ee:a1:
80:e0:f8:54:4d:c5:30:cb:c3:34:46:87:0d:e6:73:e0:fd:bb:
84:b7:be:02:37:b1:e3:06:c8:93:2d:85:31:c6:73:0f:51:cf:
62:c1:c7:ab:29:7b:9e:d2:6a:5b:4e:89:d9:34:a6:2e:d8:bd:
2a:25:cd:80:95:22:ba:78:3a:36:ad:9d:f1:e9:c3:a2:b9:d5:
f7:55:be:6d:b6:59:69:0b:dd:c2:85:a9:39:08:e3:93:12:df:
44:a5:be:31:ee:1c:02:17:1a:20:57:e4:da:1e:3f:fd:7b:c7:
5f:0c:13:84
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ+PoYPBXq54RDB11/+iAt2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNzIzMTUzOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzk5M2QzOTg5ZGQxZDVlMzY4YmY0MGRlZTAxNzNkOTc4MWQ4OTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytuLCctTdFbQXhgLE58j9SiLVAE2
GuIlraxQPUl5TdcFhfYYJYJgVTcZIUavoZct8cyRgZ5xEL7eVTWFPZU5vWJbs9kD
QIRSmD1en2nKpEBSyHpVix+VtIRsYw/kwz7fIaqZqCmuWI2yiJMrpfQX7/NCgNGO
O4cF5+PJ3upDpnVY4xif3gFfNNbJjtZJovyZvHG+5L4Ky0Pa3eEgJWkYUgEthL0M
NTaqzCmnZlE2HWbeduprtCRFOOCUfWiJf3OFKQSoDFMgMGG+wMd8hHzRbU6bYyih
tmT6NOt30z1Yv2z/UtkOb3w5Tq9sxd6ig2X1OeyBVTN9qUDnhEV2DPC+oQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOyZPTmJ3R1eNov0De4Bc9l4HYmFMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvN0prOU9ZbmRIVjQyaV9RTjdnRnoyWGdkaVlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgs+AAMF
AyoMg0ADBQMqFDXAMA0GCSqGSIb3DQEBCwUAA4IBAQA1NhC1H91n71PereAL2iy7
GIRdwgFe82Fzg5LyM1F43Itt+Dul5KpJc+/QBCedIOOSdA7SlANRgUhOzBR82o3C
IyKJTAarOF65Uo1aVJtLZI/rg81/WUpeGNcmjjnZe3SaWdWPGDasHUAqhetvbw0O
OubUENgZbSrcoRjuyaMoYzd67LO+lE9pPDBGw5aN7qGA4PhUTcUwy8M0RocN5nPg
/buEt74CN7HjBsiTLYUxxnMPUc9iwcerKXue0mpbTonZNKYu2L0qJc2AlSK6eDo2
rZ3x6cOiudX3Vb5ttllpC93Chak5COOTEt9Epb4x7hwCFxogV+TaHj/9e8dfDBOE
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:42 2026 by rpki-client