Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/CCamJsUlsR2IsCc5YR7PcQF2Rjw.roa
File: CCamJsUlsR2IsCc5YR7PcQF2Rjw.roa (raw, json)
Hash identifier: MnK7WwFE2yVM/iA+y4cUCPZv4yt4PtgzESlYCYIN+Uw=
Subject key identifier: 08:26:A6:26:C5:25:B1:1D:88:B0:27:39:61:1E:CF:71:01:76:46:3C
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019EFB05FEA71A990750104CF0A48492F24D
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/CCamJsUlsR2IsCc5YR7PcQF2Rjw.roa
Signing time: Wed 24 Jun 2026 19:05:34 +0000
ROA not before: Wed 24 Jun 2026 19:05:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 185.115.163.0/24 maxlen: 24
193.9.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:05:fe:a7:1a:99:07:50:10:4c:f0:a4:84:92:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 24 19:05:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0826a626c525b11d88b02739611ecf710176463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:aa:f8:fe:3e:2e:f8:bf:ff:20:b0:c0:68:
7d:49:93:16:38:cb:70:45:29:d0:75:5c:4d:5f:80:
61:ae:68:fd:05:5a:61:f1:c1:32:57:09:25:39:ce:
c6:53:ea:91:db:43:a5:55:95:2d:da:50:01:74:7b:
62:d6:17:ee:af:67:1e:e0:da:7d:1a:06:b6:c4:dc:
83:f1:f3:7b:d9:33:31:44:55:aa:c1:31:f0:b7:b8:
26:0d:3b:23:6e:a1:3d:1a:03:93:3d:6c:ff:22:be:
bd:9a:43:f4:e0:c3:54:6f:d8:2a:9b:a6:d2:e2:8f:
97:c8:11:4c:25:48:64:91:3f:b2:82:da:7e:63:99:
a1:0a:5d:aa:0f:80:65:a4:25:5d:13:94:b7:c7:84:
8c:98:f6:3b:d1:25:9c:b5:7e:f8:29:b3:ac:e9:6b:
fb:7a:fc:9c:e4:a5:16:7a:77:1a:d9:13:b4:6b:df:
a2:41:56:ba:bb:1a:5a:0a:00:ff:ac:62:81:12:87:
fe:63:16:f1:2d:5c:90:cb:a4:e1:75:2d:58:d5:cc:
da:bd:46:d8:10:8f:f6:33:28:29:5c:ad:70:3c:d2:
1c:28:ee:2b:06:7a:8e:41:fc:70:ef:76:a7:92:f9:
4b:ec:8b:9e:ca:85:24:f7:7d:33:a6:27:fa:16:5e:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:A6:26:C5:25:B1:1D:88:B0:27:39:61:1E:CF:71:01:76:46:3C
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/CCamJsUlsR2IsCc5YR7PcQF2Rjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.163.0/24
193.9.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4c:9f:63:af:2b:9e:9d:1a:d5:6f:d8:07:08:18:72:5e:34:
f2:b7:bb:10:9d:bd:79:d0:ea:99:8e:41:f9:e2:7c:cb:a5:83:
79:62:73:8e:89:29:aa:33:bc:18:1d:4c:05:40:b8:43:9c:77:
f7:5d:b0:79:0e:93:f2:3a:12:6b:4a:a5:de:b4:fd:c8:a8:24:
f3:a2:45:16:39:78:3e:fc:ff:1f:b8:aa:cf:4b:0f:80:ba:2a:
6e:fc:53:4e:af:f6:00:86:3c:da:ad:05:62:4f:38:0b:82:de:
74:fb:4f:26:68:65:c5:be:52:b2:50:ec:10:b2:08:c2:00:59:
30:c6:89:38:b6:11:ea:03:40:f6:fe:63:c3:5e:23:e1:93:d3:
a7:bc:4e:04:f1:c3:56:45:cd:a1:4b:a9:6b:dc:e4:7a:28:4e:
a8:a3:14:dd:d1:76:1a:ad:da:6f:a0:3f:4e:59:3c:22:2a:ed:
df:0c:e9:a6:31:19:4d:cb:9a:6f:ae:47:27:13:69:14:80:9c:
ee:53:87:29:7f:de:9d:95:d8:fd:85:fd:17:ed:ff:5e:20:4e:
1d:02:03:0e:5c:a2:08:be:4e:65:1a:cd:50:44:ff:bb:04:00:
e5:7c:f3:08:05:fb:e7:b6:cf:80:8c:26:b2:96:e7:3d:6c:56:
2b:52:cb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:08 2026 by rpki-client