Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/r8s5tzbMUG5Xxm4wpGMwmH4Tdm8.roa
File: r8s5tzbMUG5Xxm4wpGMwmH4Tdm8.roa (raw, json)
Hash identifier: b3bdeO29VhM0yct3jp2k4bFO7mjnU+V2hMv1lruFkTM=
Subject key identifier: AF:CB:39:B7:36:CC:50:6E:57:C6:6E:30:A4:63:30:98:7E:13:76:6F
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 01A0A409E69771BC94022513187F6BB1D9F4
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/r8s5tzbMUG5Xxm4wpGMwmH4Tdm8.roa
Signing time: Tue 15 Sep 2026 07:48:27 +0000
ROA not before: Tue 15 Sep 2026 07:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208437
IP address blocks: 176.56.128.0/21 maxlen: 21
176.56.128.0/24 maxlen: 24
176.56.129.0/24 maxlen: 24
2a00:9f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:09:e6:97:71:bc:94:02:25:13:18:7f:6b:b1:d9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Sep 15 07:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afcb39b736cc506e57c66e30a46330987e13766f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:95:2e:43:45:2d:9a:22:c9:65:a0:26:39:
9b:29:7b:20:e3:8c:98:f9:47:0b:fd:78:48:e8:04:
64:eb:f5:c1:c4:13:5d:43:52:0f:b0:60:07:95:60:
72:2f:e4:7e:e6:46:61:03:40:64:6f:98:85:dc:5c:
4d:d5:25:c4:39:e9:54:20:b5:0d:0d:d0:43:a0:57:
67:13:c0:b4:53:68:44:33:83:46:33:89:56:b8:98:
43:18:cf:ed:99:42:4e:1d:b4:62:12:e9:e9:60:d5:
fb:75:8e:28:82:03:85:a3:f7:0b:e1:70:4f:56:2a:
f7:cd:b7:fe:25:51:25:a9:ae:1b:ac:6c:1f:1c:a6:
f6:ec:31:4b:5d:26:51:d9:d9:e8:60:63:63:6e:77:
cb:32:17:e9:d5:d8:2c:11:32:3e:c9:b2:d9:6d:d4:
50:8b:25:6e:f2:ee:e1:46:00:d4:b7:99:ef:fb:c7:
26:a1:cf:4f:24:d9:bd:00:62:c1:c6:b0:40:3d:c6:
3c:28:46:9e:30:3d:d4:f5:df:6c:57:43:e1:19:7d:
40:24:48:b2:11:78:67:fb:b3:c4:be:75:b8:53:ed:
e2:64:c7:54:7b:e7:ab:5a:59:28:d7:5c:06:16:2f:
b3:12:25:46:e6:99:53:21:b0:9f:7b:12:3a:00:d2:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:39:B7:36:CC:50:6E:57:C6:6E:30:A4:63:30:98:7E:13:76:6F
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/r8s5tzbMUG5Xxm4wpGMwmH4Tdm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.128.0/21
IPv6:
2a00:9f80::/32
Signature Algorithm: sha256WithRSAEncryption
69:af:e7:c5:09:a8:89:5b:df:20:53:25:01:61:58:9d:b7:b2:
1a:70:0f:e8:3d:15:56:2c:f0:80:2f:7f:af:92:da:9e:a5:0c:
b3:e5:8c:c0:ed:8a:91:ea:bb:2d:c4:2b:f2:b2:42:69:4e:50:
b9:6c:db:6c:59:ac:21:d0:6a:7f:42:bb:73:88:76:67:d1:20:
14:6f:2a:e7:a3:a5:24:78:aa:a7:80:ec:8e:45:6b:bc:41:82:
2e:87:ef:60:d9:9c:86:3b:31:71:2d:36:d2:1e:33:05:79:a2:
cf:6f:36:3c:ec:3a:a0:da:2f:d8:c4:8b:2c:85:61:c4:ba:ef:
4e:97:89:68:1e:9b:03:f0:b9:c2:5c:9f:dd:21:42:69:85:a1:
96:86:ca:17:3d:86:0f:84:e9:cd:bc:d5:34:b8:eb:c0:c0:fb:
e3:bb:28:f8:93:e4:4e:44:01:51:fc:08:3a:bb:2a:85:14:99:
b5:6c:62:06:28:9e:e0:a5:af:4d:5f:e1:2e:6f:24:67:2b:cd:
09:b5:64:74:73:f2:74:61:75:62:7a:8e:73:d9:7c:3d:b1:0b:
5d:f4:c3:57:7d:2b:63:c9:f8:60:be:12:6a:82:82:da:ea:46:
2b:39:96:0e:c6:e1:28:9c:30:1e:f1:ef:ff:2f:2e:6f:11:e8:
7b:2d:33:32
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaCkCeaXcbyUAiUTGH9rsdn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjYwOTE1MDc0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmNiMzliNzM2Y2M1MDZlNTdjNjZlMzBhNDYzMzA5ODdlMTM3NjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXGVLkNFLZoiyWWgJjmbKXsg44yY
+UcL/XhI6ARk6/XBxBNdQ1IPsGAHlWByL+R+5kZhA0Bkb5iF3FxN1SXEOelUILUN
DdBDoFdnE8C0U2hEM4NGM4lWuJhDGM/tmUJOHbRiEunpYNX7dY4oggOFo/cL4XBP
Vir3zbf+JVElqa4brGwfHKb27DFLXSZR2dnoYGNjbnfLMhfp1dgsETI+ybLZbdRQ
iyVu8u7hRgDUt5nv+8cmoc9PJNm9AGLBxrBAPcY8KEaeMD3U9d9sV0PhGX1AJEiy
EXhn+7PEvnW4U+3iZMdUe+erWlko11wGFi+zEiVG5plTIbCfexI6ANJfNQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK/LObc2zFBuV8ZuMKRjMJh+E3ZvMB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvcjhzNXR6Yk1VRzVYeG00d3BHTXdtSDRUZG04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDsDiAMA0E
AgACMAcDBQAqAJ+AMA0GCSqGSIb3DQEBCwUAA4IBAQBpr+fFCaiJW98gUyUBYVid
t7IacA/oPRVWLPCAL3+vktqepQyz5YzA7YqR6rstxCvyskJpTlC5bNtsWawh0Gp/
QrtziHZn0SAUbyrno6UkeKqngOyORWu8QYIuh+9g2ZyGOzFxLTbSHjMFeaLPbzY8
7Dqg2i/YxIsshWHEuu9Ol4loHpsD8LnCXJ/dIUJphaGWhsoXPYYPhOnNvNU0uOvA
wPvjuyj4k+RORAFR/Ag6uyqFFJm1bGIGKJ7gpa9NX+EubyRnK80JtWR0c/J0YXVi
eo5z2Xw9sQtd9MNXfStjyfhgvhJqgoLa6kYrOZYOxuEonDAe8e//Ly5vEeh7LTMy
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:44:40 2026 by rpki-client