Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ENfi398-VJ1QvTZ9YL6nNM6z3x4.roa
File: ENfi398-VJ1QvTZ9YL6nNM6z3x4.roa (raw, json)
Hash identifier: RXmEKC2aKEuTWb8kU/cCLrBg7g83D0O3fDo3Q5mhY4U=
Subject key identifier: 10:D7:E2:DF:DF:3E:54:9D:50:BD:36:7D:60:BE:A7:34:CE:B3:DF:1E
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019DF764C3B0E99279962971CBE27577CBF6
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ENfi398-VJ1QvTZ9YL6nNM6z3x4.roa
Signing time: Tue 05 May 2026 09:07:49 +0000
ROA not before: Tue 05 May 2026 09:07:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3180::/29 maxlen: 29
2001:3280::/29 maxlen: 32
2001:3380::/29 maxlen: 29
2a0e:a780::/29 maxlen: 32
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 32
2a13:8000::/29 maxlen: 32
2a13:b840::/29 maxlen: 32
2a13:bfc0::/29 maxlen: 29
2a13:c040::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:64:c3:b0:e9:92:79:96:29:71:cb:e2:75:77:cb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: May 5 09:07:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10d7e2dfdf3e549d50bd367d60bea734ceb3df1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:7f:e0:20:f4:e9:07:42:98:26:7e:e0:d6:
f8:68:98:5d:0e:52:b3:d2:76:a4:f0:5c:4f:46:95:
a1:6a:e5:2d:49:12:db:40:fe:ff:fe:fd:8a:53:ad:
c4:3e:12:3d:93:2a:a8:4d:0c:c4:07:c6:9f:a2:52:
4e:21:5c:32:0e:41:ae:e6:3e:b5:b7:2a:9d:74:60:
d6:7c:f8:5b:51:4f:20:32:25:e4:d2:53:db:e5:79:
1a:1b:92:b1:49:9e:53:fa:25:4d:60:de:36:03:3f:
d2:cd:0d:69:b8:ab:dd:ef:d7:cb:20:25:0e:d8:98:
fd:19:50:0c:5d:3c:a9:da:be:da:bf:88:af:bf:95:
9b:b1:6c:ba:e0:ba:15:a2:38:f4:6f:d8:77:a9:ed:
63:43:3c:0c:5d:9e:a3:f6:a8:01:9c:c7:0b:7a:50:
e5:e8:7a:e5:f0:47:ee:86:03:a5:0c:99:8c:23:4c:
8c:d8:20:36:49:6d:32:15:a9:c9:a7:67:12:1c:11:
39:93:44:c4:b9:85:dc:49:ad:04:26:b4:01:cf:17:
0b:97:55:d2:1f:1e:a9:2a:f3:d3:b2:09:da:f3:d9:
99:a5:86:a1:06:93:98:c5:5d:be:5f:ac:8c:db:21:
03:58:10:2e:03:22:82:15:dc:31:e7:d8:d5:8b:95:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D7:E2:DF:DF:3E:54:9D:50:BD:36:7D:60:BE:A7:34:CE:B3:DF:1E
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ENfi398-VJ1QvTZ9YL6nNM6z3x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3180::/29
2001:3280::/29
2001:3380::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:b840::/29
2a13:bfc0::/29
2a13:c040::/29
2a13:de40::/29
2a14:6ac0::/29
2a14:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
41:11:b2:17:1a:24:ab:7e:86:9d:a5:3c:a4:7a:f0:44:48:b1:
8b:e3:2e:0c:66:9c:87:a7:6d:54:97:61:15:92:ab:64:29:a5:
02:16:8a:e3:a2:ba:96:57:d1:63:3c:59:5c:ef:a4:e8:25:1f:
f0:ea:77:2b:6b:9c:75:6b:d5:bc:e7:74:ea:da:62:bb:20:a2:
3c:8a:21:35:85:47:5b:e0:7f:e4:ee:e8:d0:30:25:7f:a9:7b:
f1:89:28:a0:6f:e4:8c:1c:94:da:26:dc:9f:40:39:54:22:6d:
6d:53:ca:a8:fe:83:ed:c4:14:a9:f7:05:e3:ef:0c:e2:13:64:
85:d7:ac:6d:2e:9f:07:98:36:2a:fc:e2:e0:2d:3e:a5:0e:7c:
6d:ad:aa:35:af:5f:f5:6a:95:ed:cb:3b:3b:72:ea:d5:ad:bc:
a0:02:36:37:9c:73:af:c8:5b:46:6c:df:7e:bd:b7:73:8f:08:
3b:09:d8:11:94:77:9d:5f:bf:81:0c:00:17:f0:73:01:1e:ce:
97:4f:45:ed:8a:1a:a0:8b:c4:ce:8f:80:04:e0:85:0f:ef:99:
32:7d:51:c7:ba:2a:7d:f6:d3:ac:c9:16:e0:55:df:6c:a3:39:
9a:75:ce:3b:92:09:22:f7:d4:dd:56:44:2e:6c:d8:6a:1f:70:
2e:3f:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:55 2026 by rpki-client