Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/9cV0X0n-p9uzO90rfQdU1i82F3w.roa
File: 9cV0X0n-p9uzO90rfQdU1i82F3w.roa (raw, json)
Hash identifier: /HB+co6upoKyJJoXpMHejZXB8NP/VVnRT7iKYB9AOcI=
Subject key identifier: F5:C5:74:5F:49:FE:A7:DB:B3:3B:DD:2B:7D:07:54:D6:2F:36:17:7C
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019FEB10C4ABF79741B40A857A4148B90F09
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/9cV0X0n-p9uzO90rfQdU1i82F3w.roa
Signing time: Mon 10 Aug 2026 09:46:12 +0000
ROA not before: Mon 10 Aug 2026 09:46:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.115.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 06:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:10:c4:ab:f7:97:41:b4:0a:85:7a:41:48:b9:0f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 10 09:46:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5c5745f49fea7dbb33bdd2b7d0754d62f36177c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:ba:59:f9:74:29:8b:3a:78:aa:15:b4:e0:
93:99:38:ca:b1:9d:d0:e9:85:d2:78:e6:e3:2c:4e:
88:be:48:27:8a:14:02:ea:a5:4e:69:5b:70:2b:86:
59:71:e8:08:35:8b:91:66:98:2d:34:6a:c2:49:ec:
a7:21:f4:ff:3f:03:56:36:9c:3c:29:9f:40:33:12:
35:e5:9c:81:98:73:86:e5:90:28:1d:36:85:ed:ce:
ea:95:b0:db:78:68:c1:fa:de:22:e6:70:ea:2e:96:
dc:68:87:f2:e5:73:4f:5b:cc:3c:99:65:31:19:74:
69:9f:42:9c:65:c9:37:43:e0:17:46:46:25:d0:a7:
a0:bd:a1:07:99:f4:84:ad:b8:6a:2a:94:3f:ff:f8:
d9:50:46:ea:bd:8c:bd:d4:f8:f9:01:03:64:8c:95:
e8:3f:39:49:97:a7:25:0e:62:c1:88:f3:30:2c:6b:
9d:7f:ce:e2:4d:f4:9a:c6:3d:f0:52:71:0c:c7:60:
ea:7e:1d:20:a6:2b:e0:b1:98:6b:31:12:ac:0d:1e:
99:a6:e1:09:ba:9f:35:66:a0:7b:a2:dc:53:c0:ce:
4b:86:74:0f:bd:97:8d:d5:d4:7d:84:a1:2a:c0:cd:
83:bf:67:67:8c:29:9e:c1:88:8f:9c:8a:5b:69:9e:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C5:74:5F:49:FE:A7:DB:B3:3B:DD:2B:7D:07:54:D6:2F:36:17:7C
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/9cV0X0n-p9uzO90rfQdU1i82F3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.162.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5c:60:27:4e:19:a9:69:ca:35:c6:d7:17:48:d4:85:bc:d5:
42:1a:3f:4a:dd:0a:71:d4:e2:19:fc:16:33:90:98:13:c1:1b:
f9:8a:bc:93:93:0a:5e:07:a1:37:11:6c:00:43:16:75:65:8a:
d9:4a:52:78:ab:21:b7:f1:11:90:1a:15:45:7c:db:bb:19:e0:
e4:d7:94:43:c5:c1:75:0e:1b:36:06:33:42:7b:28:08:a6:73:
0d:d8:7d:f2:ca:36:dc:a7:5e:d8:69:26:91:f3:81:b3:55:3a:
9d:26:96:03:f9:ae:88:35:e3:7e:26:ca:e9:40:a5:b7:7d:4b:
3b:f6:8d:05:8b:bd:50:e9:b7:0a:3a:96:34:6a:11:e8:0f:66:
f3:72:e2:16:5f:bc:ea:b5:f3:41:6f:54:32:28:c3:1d:bd:7e:
bb:10:fd:35:70:9d:a1:e1:fa:14:1f:85:c8:98:65:c1:8f:b4:
55:3c:e3:ce:9a:4e:af:d1:3b:1a:03:98:29:da:9e:2b:04:6e:
5e:ed:3d:5f:a8:a7:27:bb:30:ab:57:30:ea:fe:bf:97:7e:49:
16:fd:ee:28:50:33:95:e9:22:49:6f:45:da:27:97:d1:d8:85:
05:7b:7d:5f:7d:b2:7f:85:68:54:0a:e5:9d:7f:7c:f6:01:67:
92:3d:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 12:02:20 2026 by rpki-client