Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Rua5aXmaZ0cTAyL2wzLDFD3z2Y0.roa
File: Rua5aXmaZ0cTAyL2wzLDFD3z2Y0.roa (raw, json)
Hash identifier: /VyBRk5OqWGk6rKvLvZBGoKiQq0lLDGIs2kjfMI6eQQ=
Subject key identifier: 46:E6:B9:69:79:9A:67:47:13:03:22:F6:C3:32:C3:14:3D:F3:D9:8D
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019DF69F0395B97FDD3679F6B16A90AB7D78
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Rua5aXmaZ0cTAyL2wzLDFD3z2Y0.roa
Signing time: Tue 05 May 2026 05:31:49 +0000
ROA not before: Tue 05 May 2026 05:31:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a13:ddc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f6:9f:03:95:b9:7f:dd:36:79:f6:b1:6a:90:ab:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: May 5 05:31:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e6b969799a6747130322f6c332c3143df3d98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:dd:6e:8f:b7:91:77:5b:74:4f:ee:e1:01:
f4:cc:c9:da:fc:90:56:b3:32:36:75:b7:80:5b:b1:
bd:bf:85:30:07:12:14:79:c3:d7:12:38:63:2d:a9:
31:0a:de:b1:c2:4b:9d:90:16:4c:2e:ff:a9:ff:39:
6d:ab:b7:8b:4a:c5:2e:c6:4b:34:5d:c4:1b:94:71:
67:71:e5:9b:9c:7b:2c:cf:29:f9:78:20:fb:9d:38:
04:af:67:fe:88:06:22:5a:b5:4a:b7:10:6c:be:f8:
f9:0d:42:77:ae:70:68:bc:f0:cb:50:05:44:a8:0c:
ef:3f:50:27:cf:9a:4b:62:fc:f7:1e:16:b0:ba:b9:
9a:8c:4b:46:be:f2:26:b9:08:c3:aa:a5:1a:02:7b:
4e:a6:62:a1:87:44:2b:46:84:69:b5:4f:2d:65:c5:
01:27:83:2f:a1:15:72:a1:64:51:4c:30:78:47:35:
76:42:a4:83:96:4d:43:f2:a5:2b:b7:d2:cf:33:f9:
4f:be:b8:42:57:11:9b:e8:b4:90:86:3e:01:7e:68:
8f:44:0e:2c:55:da:78:53:8a:87:25:7f:f7:2c:e7:
f9:53:28:4f:10:10:e2:32:5a:58:87:84:14:25:b3:
03:83:3f:9d:b0:42:83:5d:f5:af:c6:60:61:9c:59:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E6:B9:69:79:9A:67:47:13:03:22:F6:C3:32:C3:14:3D:F3:D9:8D
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Rua5aXmaZ0cTAyL2wzLDFD3z2Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
56:79:df:15:78:67:68:7c:e5:c8:76:a0:4a:55:94:dd:68:45:
a8:ec:19:62:14:c4:9e:8a:92:2a:12:8d:e1:51:51:b1:51:49:
9c:9a:54:46:03:56:40:43:40:c8:63:55:fb:9d:d9:09:f4:e9:
6b:3e:ac:63:2a:1d:7e:8b:0a:f2:45:9e:80:26:9a:2c:64:0d:
f4:cb:00:d6:ba:ad:fc:2c:af:b0:1c:15:f3:48:00:b4:d9:55:
46:77:13:3c:d6:e9:5d:a7:75:06:27:86:ee:03:d4:7b:f5:e7:
ed:6c:a6:72:61:71:29:47:70:a3:a0:88:98:69:e4:30:14:0f:
19:ca:d6:e0:1c:a5:a5:6a:ee:04:40:12:f7:55:8f:b5:dc:db:
17:1b:2a:6d:6e:02:78:27:9d:f0:df:55:dc:19:e5:ba:d1:10:
05:84:4d:08:97:17:58:ab:fb:a0:dc:17:50:71:39:f4:39:d3:
c9:55:7f:25:19:09:1f:75:48:80:5d:91:28:72:a9:8c:bf:0a:
7b:aa:20:e9:ae:d0:d3:69:79:ba:b7:1a:d9:aa:67:23:31:eb:
48:ee:37:b2:dd:e7:aa:4a:d8:53:ec:7f:9c:75:cd:37:ee:d0:
0c:5d:ae:5b:74:a1:78:c5:f7:bc:7e:80:77:59:45:0c:62:c4:
22:70:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:32 2026 by rpki-client