Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/0_JzXfe1613TDe3yzI5NKdgjEy0.roa
File: 0_JzXfe1613TDe3yzI5NKdgjEy0.roa (raw, json)
Hash identifier: 6mjMZOZJKPKgR/qJeMvJsfxqMTYuKcJeAnbuzvSvxt0=
Subject key identifier: D3:F2:73:5D:F7:B5:EB:5D:D3:0D:ED:F2:CC:8E:4D:29:D8:23:13:2D
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A03DE70B9C320AFB96A65881904B80B2C2
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/0_JzXfe1613TDe3yzI5NKdgjEy0.roa
Signing time: Wed 26 Aug 2026 11:49:07 +0000
ROA not before: Wed 26 Aug 2026 11:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205220
IP address blocks: 185.115.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:e7:0b:9c:32:0a:fb:96:a6:58:81:90:4b:80:b2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 26 11:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3f2735df7b5eb5dd30dedf2cc8e4d29d823132d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:7b:52:2d:e2:00:fe:c8:24:c8:6f:55:fa:
61:48:c4:e5:0f:53:38:7e:91:a0:eb:45:f7:31:ea:
13:51:ed:14:71:fd:f7:4d:f1:d6:9d:7a:35:8d:15:
2c:7a:d7:2b:ec:5e:5f:71:c5:3b:95:74:f7:0d:b3:
58:f0:e2:d8:8e:e0:ba:41:f3:59:55:ca:6b:72:33:
77:15:52:81:d2:8e:44:52:f1:ba:9e:6d:37:27:dc:
0c:74:35:54:66:54:dc:2a:6e:a0:0a:e6:1d:89:bc:
7e:ae:a7:3d:f9:c1:46:03:b7:22:31:79:f2:33:68:
2d:13:d2:86:f1:93:68:cc:93:58:b3:2d:7f:62:57:
fa:67:03:53:95:d8:45:66:c5:4b:59:d6:d4:78:f5:
55:1a:6b:f1:dd:e8:1d:ba:fe:04:71:77:ce:b8:1d:
ee:eb:ac:3d:50:9f:0a:28:cd:bc:93:f6:5e:49:5a:
e6:23:e6:cb:3b:ea:68:95:e6:2e:df:03:73:62:ca:
6b:5b:91:07:c0:91:ff:94:7b:fe:10:39:27:17:d3:
9e:e9:53:19:17:ce:02:6a:7d:b1:75:a9:24:6e:8e:
ff:25:b8:6d:12:b7:78:d1:b8:93:b2:a6:ff:61:b0:
36:14:c8:8b:47:17:0e:7f:e6:20:23:e3:44:29:b8:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:73:5D:F7:B5:EB:5D:D3:0D:ED:F2:CC:8E:4D:29:D8:23:13:2D
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/0_JzXfe1613TDe3yzI5NKdgjEy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.163.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c1:8b:16:d5:57:8b:29:6b:60:d2:42:12:f5:3e:b6:02:7a:
9f:76:7e:66:e9:ca:31:26:65:0b:c5:a2:56:e2:90:5f:c4:6b:
a3:cb:12:34:57:96:35:f9:e7:93:24:b2:aa:e6:5c:92:0b:66:
db:51:3c:a9:fe:ef:ec:2e:4e:df:08:8a:47:f0:30:db:45:3f:
ab:86:c6:71:84:f3:45:07:a3:3f:07:b7:e9:22:cd:7e:55:43:
f3:17:7f:87:f7:9c:de:78:87:dc:24:bf:cd:1d:97:5e:d9:cc:
64:a2:ff:22:62:9d:2d:e1:e1:35:5d:1b:12:63:79:64:eb:e8:
15:6b:02:57:aa:57:8b:00:56:15:8b:14:86:1d:45:26:17:04:
71:89:74:c0:84:43:30:72:53:eb:6d:da:bc:fc:36:01:e8:ae:
37:75:30:6f:ef:87:42:db:6b:4c:d5:2e:3d:ef:2e:9e:8e:cf:
56:46:94:ff:d4:c1:0a:05:00:f2:d9:44:a1:a2:77:85:cb:a5:
99:61:c9:e0:de:af:9b:0c:7b:f4:fe:43:35:ff:a1:b1:fb:eb:
aa:67:87:3d:5b:d1:3c:4e:9d:c7:08:8b:00:e4:44:24:37:a1:
2d:93:28:08:db:0c:af:96:d4:56:41:63:bc:c2:b2:7e:fa:3b:
64:fe:d5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:35 2026 by rpki-client