Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GLIVDZwdHIhf2YmTYBHvAbNDrx4.roa
File: GLIVDZwdHIhf2YmTYBHvAbNDrx4.roa (raw, json)
Hash identifier: maJ9v9a1HfvNH9UIPPe02lvLG4iy2FiMboD9G9nuCb0=
Subject key identifier: 18:B2:15:0D:9C:1D:1C:88:5F:D9:89:93:60:11:EF:01:B3:43:AF:1E
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019E02A62F409926C0E5717AA192E8F5FA75
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GLIVDZwdHIhf2YmTYBHvAbNDrx4.roa
Signing time: Thu 07 May 2026 13:35:05 +0000
ROA not before: Thu 07 May 2026 13:35:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 2a13:d2c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:a6:2f:40:99:26:c0:e5:71:7a:a1:92:e8:f5:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: May 7 13:35:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18b2150d9c1d1c885fd989936011ef01b343af1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:40:34:c6:b0:46:5d:6f:fc:e3:a1:e3:2d:
1e:a7:8a:3b:83:58:44:1e:c8:7a:e4:8e:34:eb:34:
71:af:2a:2c:9f:b3:14:fe:9c:88:31:51:8d:ca:7c:
ec:48:d7:63:42:f0:28:67:e5:a4:c0:fe:22:38:4b:
de:26:be:a9:4b:62:19:ad:ce:18:ce:b5:be:89:69:
01:7c:a5:29:04:78:5d:6d:8e:43:39:37:62:d8:be:
f7:66:c5:54:4a:25:af:12:82:07:bf:f8:c0:c0:bf:
88:d8:cb:0f:2a:7d:1b:bd:88:a9:b6:60:8f:33:49:
4c:d6:5d:45:44:d1:6e:11:c8:19:6b:4f:cf:13:02:
29:79:35:02:95:ae:f8:e8:db:1a:12:65:c0:c4:5b:
8b:15:ff:19:8c:3a:ee:a9:44:ca:69:09:23:17:6d:
29:82:f6:87:89:e8:a6:4e:44:c4:64:1b:a9:ad:28:
a5:8b:39:89:03:39:a1:5f:cf:a7:b1:a8:b7:d3:13:
ed:84:e8:92:54:68:ca:23:ee:61:5b:70:6f:4d:2a:
c6:15:1c:4d:ea:43:d8:cf:0c:f9:14:2e:b1:b7:e6:
ad:e3:de:45:7e:2d:19:62:af:96:ab:c3:e1:71:de:
94:06:e5:46:04:ae:69:15:42:c5:cf:39:a3:fb:90:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B2:15:0D:9C:1D:1C:88:5F:D9:89:93:60:11:EF:01:B3:43:AF:1E
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GLIVDZwdHIhf2YmTYBHvAbNDrx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d2c0::/32
Signature Algorithm: sha256WithRSAEncryption
05:5d:df:3b:75:0b:3b:e8:78:a2:bd:ad:19:c2:24:4e:4e:0f:
77:b7:d5:dc:85:77:58:60:a2:86:b7:8c:2c:0d:31:16:2f:cf:
e8:ba:ce:59:e1:b9:cb:81:44:46:89:df:7e:33:37:b0:79:37:
a7:35:82:27:ea:b9:48:77:36:e8:f7:6a:33:a7:48:eb:1f:6a:
4d:ee:f8:d4:cf:82:2b:e3:37:be:68:cc:88:f2:8a:17:ed:de:
0f:d3:c6:0c:b5:68:51:35:10:8c:74:96:39:aa:f8:2d:63:4e:
ab:1e:5f:58:ab:64:89:5f:9b:9f:a1:14:64:e1:08:22:58:35:
fd:96:05:f7:d7:0a:a7:8e:79:07:56:26:c6:36:de:db:de:bd:
ae:27:14:35:70:cd:e9:2c:c1:20:9a:18:c4:c3:39:dc:38:42:
79:83:40:e7:cb:74:f7:b9:f2:82:48:7b:84:c6:a2:2e:47:cb:
93:fb:d2:c9:a2:a5:18:16:37:83:7b:85:69:28:de:e4:0b:c5:
5e:5a:9d:73:e5:ac:9c:02:01:89:13:cf:97:4d:39:66:d6:17:
5f:f7:de:3b:7d:c8:3d:25:ef:19:9b:8e:13:b5:5d:eb:2b:6d:
41:d8:82:fe:e6:be:a5:f2:3e:9e:e8:0e:9c:4b:4b:7a:bb:97:
58:f7:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:52 2026 by rpki-client