Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/BPDz8D9XACL4UcbhxjC8azmexWA.roa
File: BPDz8D9XACL4UcbhxjC8azmexWA.roa (raw, json)
Hash identifier: pvIjY7dbs1u0T9sKVMoG6Y3bOxoFmgFn2rt4eWQUBZ8=
Subject key identifier: 04:F0:F3:F0:3F:57:00:22:F8:51:C6:E1:C6:30:BC:6B:39:9E:C5:60
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019F8FA182E1E2F45F4EFCB387E07AB57BC2
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/BPDz8D9XACL4UcbhxjC8azmexWA.roa
Signing time: Thu 23 Jul 2026 15:39:14 +0000
ROA not before: Thu 23 Jul 2026 15:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3180::/29 maxlen: 29
2001:3380::/29 maxlen: 29
2a0e:a780::/29 maxlen: 32
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 29
2a13:b840::/29 maxlen: 32
2a13:bfc0::/32 maxlen: 32
2a13:d2c0::/32 maxlen: 32
2a13:d2c4::/32 maxlen: 32
2a13:d2c6::/32 maxlen: 32
2a13:d2c7::/32 maxlen: 32
2a13:ddc0::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6b40::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:a1:82:e1:e2:f4:5f:4e:fc:b3:87:e0:7a:b5:7b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 23 15:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04f0f3f03f570022f851c6e1c630bc6b399ec560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:23:88:2b:af:d1:cb:fe:07:76:65:9d:84:
6e:0c:3e:c3:49:0e:fc:85:9f:08:cd:14:5d:fc:02:
80:9b:08:96:31:96:db:67:94:bc:58:7d:6d:d1:95:
df:2c:51:1c:34:4a:ce:28:cb:21:45:89:82:e7:31:
c0:4e:50:78:3b:84:9b:aa:60:6e:a0:14:01:94:c1:
bb:7c:81:11:43:36:fa:65:cf:95:81:f1:95:36:ae:
89:c4:af:1a:f6:5b:ba:f9:d5:80:de:71:d7:90:b6:
90:18:64:ed:5a:db:50:13:75:d3:9d:27:07:19:91:
a9:97:68:6c:52:dc:dd:44:93:86:ee:81:19:11:73:
e1:45:59:dc:af:97:12:f1:53:6c:33:32:83:07:22:
06:7a:65:98:cf:1f:cc:30:88:b9:0c:ed:18:af:99:
8a:a4:44:ff:7b:dc:57:de:d8:6e:38:58:57:e1:68:
b2:30:19:cf:89:da:29:eb:ba:3d:d3:a3:e7:60:53:
73:62:46:4c:b9:a7:65:31:41:1e:e4:bd:18:8e:9e:
03:56:9b:ea:2e:c1:d0:ff:fe:e0:2b:4b:42:31:7f:
d6:e4:e6:64:56:ec:4a:f3:5c:29:d9:ee:c1:98:db:
e8:8e:70:9c:8d:91:ee:25:e1:27:a9:13:30:52:01:
05:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F0:F3:F0:3F:57:00:22:F8:51:C6:E1:C6:30:BC:6B:39:9E:C5:60
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/BPDz8D9XACL4UcbhxjC8azmexWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3180::/29
2001:3380::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:b840::/29
2a13:bfc0::/32
2a13:d2c0::/32
2a13:d2c4::/32
2a13:d2c6::/31
2a13:ddc0::/29
2a14:6ac0::/29
2a14:6b40::/29
2a14:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:e4:02:16:b9:03:ca:c5:64:c6:2c:d8:20:d3:db:f9:8d:2e:
68:b1:f3:f0:45:6a:3f:e5:6a:0e:e2:b0:b7:3b:ed:51:0a:9d:
d4:c8:d8:61:c9:03:2a:6f:de:2c:d7:f0:a2:f9:d7:23:70:3c:
37:ce:86:50:d1:09:d0:25:27:9c:f3:cc:b5:ae:12:c2:92:75:
47:d0:d8:66:fc:01:82:86:f5:7b:fc:50:53:95:da:cf:3a:61:
56:df:df:aa:92:8f:a8:e2:83:97:d9:b1:bc:73:3f:79:2c:9f:
d6:77:18:a0:4a:19:70:b2:d6:64:90:b2:34:be:14:3c:59:dc:
69:b5:86:e5:7b:48:62:8a:00:81:ca:a4:87:03:c2:8a:97:da:
5a:8f:fa:22:52:d0:51:4f:5f:d3:01:33:cf:07:d7:73:15:bd:
5e:ab:01:b8:ac:a8:cc:f4:d8:89:5d:97:ff:11:78:7a:40:68:
b2:51:57:5d:d3:92:3f:2a:7a:43:9f:33:f2:30:d4:5a:db:e1:
19:57:96:9f:f9:86:4a:af:84:92:68:79:d3:9f:9f:14:ce:6a:
be:65:40:90:61:1a:cf:c2:16:d5:9b:a0:cf:a7:8a:36:66:82:
ad:57:93:93:64:69:58:f0:25:63:cf:58:91:4f:b4:7f:99:5f:
da:f0:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:35 2026 by rpki-client