Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ColFWMx2SicSK2vPCJtdp35IxLw.roa
File: ColFWMx2SicSK2vPCJtdp35IxLw.roa (raw, json)
Hash identifier: rN/XHcCGJxpspXE9IogMlXoXWrc2sWRTkNIB4nxC/V8=
Subject key identifier: 0A:89:45:58:CC:76:4A:27:12:2B:6B:CF:08:9B:5D:A7:7E:48:C4:BC
Certificate issuer: /CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Certificate serial: 019F2368BB95E610D141E0196DBE933D446F
Authority key identifier: 79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ColFWMx2SicSK2vPCJtdp35IxLw.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17767
IP address blocks: 185.192.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bb:95:e6:10:d1:41:e0:19:6d:be:93:3d:44:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a894558cc764a27122b6bcf089b5da77e48c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:ae:3b:2d:f0:51:92:a5:b9:61:52:36:70:
f9:3f:b9:7f:51:89:a5:52:90:44:28:7f:9f:5c:32:
ea:04:ec:a6:02:5b:1b:b3:0a:90:19:55:1c:17:73:
1d:f2:32:84:e0:32:31:e8:35:66:80:54:0b:7a:20:
2e:f4:be:03:80:d9:2f:88:ac:89:64:fd:56:ff:76:
b1:62:0e:71:50:6a:b1:c2:39:20:4e:61:b7:8a:22:
b3:0a:f8:55:19:cf:28:b7:fe:0a:9e:ac:e3:e8:1b:
f2:73:38:d7:29:8f:ff:66:d8:c9:6c:41:9a:83:c6:
a8:cd:2d:6f:49:96:fa:10:a1:59:40:f4:08:fe:e6:
3a:f9:84:df:98:2e:50:17:3f:aa:d4:a6:9f:b8:fe:
79:f8:aa:02:58:88:c0:12:b6:85:dd:77:ef:f7:9c:
e4:0f:dd:e0:33:17:03:8d:a5:d1:ae:02:85:83:bd:
5c:92:fa:2b:86:a3:6e:74:b6:f9:09:6f:89:41:1b:
ff:f6:cf:55:b6:ec:23:06:82:1e:1e:61:97:21:45:
cc:d4:67:3b:cf:d7:19:90:c5:fe:f0:b1:66:7f:0c:
d8:1e:ac:90:4d:8e:fe:10:35:1b:8b:33:7b:be:e6:
3b:d8:73:c7:11:67:bc:66:b1:7a:31:89:ee:3f:61:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:45:58:CC:76:4A:27:12:2B:6B:CF:08:9B:5D:A7:7E:48:C4:BC
X509v3 Authority Key Identifier:
keyid:79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ColFWMx2SicSK2vPCJtdp35IxLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:47:ba:7d:61:57:35:8d:2e:f3:18:ea:c6:26:d5:5c:3d:34:
c1:98:f0:d6:0a:20:a5:da:21:13:1f:49:1b:7b:29:74:75:44:
c2:83:39:b4:2e:a0:d1:34:5d:55:f7:05:fb:ab:f4:50:43:26:
b0:dd:b8:0e:59:e6:60:62:95:b0:e1:5f:5c:c0:82:de:53:ac:
88:d4:f1:78:bc:86:ec:45:99:6a:78:0e:51:e1:c3:bd:f0:35:
2c:aa:41:f4:a0:0b:06:cb:2a:e0:ae:4c:80:50:df:a5:6f:40:
4d:0e:fa:b2:e2:97:83:c4:69:ac:66:49:6f:ce:91:ff:1c:97:
6f:fd:00:06:c5:41:9c:d1:61:1e:36:76:8e:57:dc:2a:98:7e:
be:9d:65:fa:cf:56:8f:9c:e6:df:ce:ec:8e:aa:86:5e:42:82:
e9:bb:f4:99:74:66:9e:98:08:fd:38:7b:4c:ba:9c:6c:f1:dd:
7a:ed:4e:77:57:69:02:5d:e6:7e:12:41:a3:fd:1b:ba:5a:a1:
fd:ec:9e:f6:e6:6f:49:a1:c5:3e:7a:9f:90:03:41:a1:b1:c2:
88:10:6c:44:f1:18:f7:3b:71:06:ff:ef:59:cc:2a:97:98:d3:
22:ff:74:74:2c:b4:82:ef:cd:04:90:d7:cb:39:92:34:74:6b:
9a:bf:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:31:19 2026 by rpki-client