Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/eo241X114whR_RMD9Cu9OP0HWuo.roa
File: eo241X114whR_RMD9Cu9OP0HWuo.roa (raw, json)
Hash identifier: UsnncQ2cicutQtMMPS8q9uH3CnlZ2T7CGdeQ6DaXrLA=
Subject key identifier: 7A:8D:B8:D5:7D:75:E3:08:51:FD:13:03:F4:2B:BD:38:FD:07:5A:EA
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019EDBF8AD947FDAF5B6EAC0574B2D6CC79B
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/eo241X114whR_RMD9Cu9OP0HWuo.roa
Signing time: Thu 18 Jun 2026 18:22:48 +0000
ROA not before: Thu 18 Jun 2026 18:22:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.115.163.0/24 maxlen: 24
2001:3280::/29 maxlen: 32
2001:3380::/29 maxlen: 29
2a0e:a780::/29 maxlen: 32
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 29
2a13:8000::/29 maxlen: 32
2a13:b840::/29 maxlen: 32
2a13:bfc0::/29 maxlen: 29
2a13:c040::/29 maxlen: 29
2a13:d2c7::/32 maxlen: 32
2a13:ddc0::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
2a14:6b40::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:f8:ad:94:7f:da:f5:b6:ea:c0:57:4b:2d:6c:c7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 18 18:22:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a8db8d57d75e30851fd1303f42bbd38fd075aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:e4:79:b9:14:7f:88:e5:28:6e:b7:fc:95:
b0:c3:70:a1:0b:83:7e:33:8c:da:54:40:f2:fc:77:
5a:30:43:f7:17:d4:26:16:dc:95:3a:4c:1d:43:87:
71:02:4d:85:fa:d7:09:72:72:30:45:c2:da:34:83:
f0:a1:f4:6f:cd:37:bc:c8:25:97:53:e3:ae:83:9d:
94:ec:cb:ab:ee:7d:97:da:9a:62:ef:04:02:6b:03:
04:57:61:80:1a:c2:65:30:d6:8d:10:e7:66:f3:b4:
54:26:c4:1c:3f:a0:25:3e:ef:49:14:4a:b1:5d:a2:
46:0a:dc:40:a5:7a:27:24:2f:40:14:2b:7c:17:ea:
4e:e6:d9:65:e3:94:1a:e1:67:c7:8a:9f:14:ba:7a:
b8:26:6c:8b:ed:d9:06:95:1d:7a:2f:cd:56:60:6f:
80:57:38:ef:97:d2:bb:96:55:c3:2e:43:e6:41:24:
e4:b3:5b:b6:ee:5b:5d:da:da:55:02:61:d1:ee:ab:
b2:ff:e5:dc:9a:88:47:4a:3c:5e:fd:49:eb:da:0d:
6c:d8:cc:5d:c1:6e:18:21:1a:7e:51:2a:e4:3c:30:
eb:30:9d:45:e3:92:e9:67:ce:85:22:b3:c6:02:d7:
10:21:79:fb:d3:0f:e0:71:52:6f:99:06:2c:81:ff:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:B8:D5:7D:75:E3:08:51:FD:13:03:F4:2B:BD:38:FD:07:5A:EA
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/eo241X114whR_RMD9Cu9OP0HWuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.163.0/24
IPv6:
2001:3280::/29
2001:3380::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:b840::/29
2a13:bfc0::/29
2a13:c040::/29
2a13:d2c7::/32
2a13:ddc0::/29
2a13:de40::/29
2a14:6b40::/29
2a14:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
11:6c:a4:f0:79:5d:ba:1b:fa:9f:bc:e3:e7:6d:c9:12:ee:28:
ee:a3:06:2b:ca:69:f4:bb:5e:4e:f6:59:85:ec:2a:d3:6c:63:
3b:a6:e0:81:f3:7c:fe:f4:34:fa:94:97:a8:4a:c6:cc:0b:1b:
cc:9b:8a:91:2f:90:1f:19:5c:e6:24:9f:a3:24:ef:4b:a0:44:
48:4b:da:25:d5:63:d2:ad:51:eb:08:a9:b4:30:d0:a6:5c:5b:
55:d0:15:b8:91:52:ab:8c:36:59:1a:6e:10:45:00:b5:5e:7d:
99:26:9c:f0:55:50:10:3a:45:d4:23:3e:11:10:c2:14:9f:7e:
39:de:c7:38:8b:f0:b7:58:29:a0:2b:1c:39:ca:91:84:f8:66:
45:76:42:22:4e:31:74:c6:b0:a2:1f:d5:6b:3b:80:c7:8c:35:
09:29:7a:97:c7:bd:e8:50:37:33:55:76:76:e3:81:32:3c:ac:
e6:b0:f6:2f:a4:ea:f2:42:04:99:11:c7:04:61:31:22:9d:62:
e5:e6:83:c8:93:20:ee:88:94:01:28:25:a2:93:de:0c:cb:e0:
43:7c:58:ae:7f:c1:7a:ec:18:8f:a5:2d:b8:b5:f3:b3:2d:28:
3b:2b:d0:d3:92:62:c4:29:69:df:f7:84:a3:ee:d1:a0:9c:ae:
a7:bc:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:10:55 2026 by rpki-client