Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/aob2IAjiCdLWeSKFWvHQty-HSq0.roa
File: aob2IAjiCdLWeSKFWvHQty-HSq0.roa (raw, json)
Hash identifier: kcKtloNgJwlr8RIHRshCMHk7RKPmDW1q0uceQb4OHLs=
Subject key identifier: 6A:86:F6:20:08:E2:09:D2:D6:79:22:85:5A:F1:D0:B7:2F:87:4A:AD
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A19BCCABDAED691B5A154F234AF9A653CF
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/aob2IAjiCdLWeSKFWvHQty-HSq0.roa
Signing time: Mon 02 Nov 2026 10:27:24 +0000
ROA not before: Mon 02 Nov 2026 10:27:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39521
IP address blocks: 185.115.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:cc:ab:da:ed:69:1b:5a:15:4f:23:4a:f9:a6:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Nov 2 10:27:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a86f62008e209d2d67922855af1d0b72f874aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:e9:44:76:f6:4f:ef:b1:26:3b:13:94:75:
84:80:e9:0d:73:84:22:b5:dd:9a:a5:ae:c4:28:ae:
64:79:53:bb:ec:42:c9:14:2a:dc:c6:a2:07:9b:8f:
c8:9b:6a:e1:2e:11:77:77:c6:37:aa:26:cb:f7:5a:
03:20:2c:f9:25:31:5b:c0:8e:49:81:af:d6:3c:92:
6e:87:87:22:13:15:9b:59:01:ee:ce:a3:94:76:eb:
ed:f6:d7:42:57:82:24:42:21:19:38:7d:99:7c:a2:
b7:27:f7:87:fd:be:1a:22:58:a0:2a:ef:51:c7:12:
80:ce:a2:1b:b7:2d:e7:64:f9:57:11:fd:25:38:42:
2f:13:eb:9a:44:f2:cf:26:61:e9:fe:a8:ac:a6:57:
c9:e6:4b:42:4b:8b:80:59:bd:1d:0f:2b:1b:fd:db:
72:98:47:5b:80:a7:4e:8d:0b:82:2b:15:22:33:59:
46:13:47:d5:99:08:df:0e:54:69:a1:c0:33:59:01:
24:b2:e5:82:d8:05:d0:e7:71:dc:a6:81:03:d0:30:
42:66:52:ca:e0:6a:5a:3f:21:20:06:2e:0b:87:05:
57:e7:2a:90:cb:cb:43:bc:93:54:cd:ad:c8:66:a6:
2c:bd:c8:89:39:87:ab:9b:72:a6:67:a2:aa:69:c2:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:86:F6:20:08:E2:09:D2:D6:79:22:85:5A:F1:D0:B7:2F:87:4A:AD
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/aob2IAjiCdLWeSKFWvHQty-HSq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.162.0/24
Signature Algorithm: sha256WithRSAEncryption
20:69:da:a0:3c:3f:91:67:fa:f9:93:b6:49:83:34:b7:7b:bb:
ae:0a:11:75:0a:d2:3d:a4:23:a1:3c:e1:e4:e7:6a:2c:e9:8e:
bf:f0:4a:b4:46:4e:cd:b4:26:58:b2:1f:47:b5:fe:82:c7:6f:
0a:d3:e8:11:7e:0f:99:6b:61:ad:3a:e1:47:80:e5:61:21:80:
e0:2f:78:de:c9:eb:54:5f:f9:6c:cf:0b:1b:68:25:5a:96:f4:
28:7d:39:68:63:57:9c:75:c5:78:c7:c6:be:42:cb:85:48:52:
b3:85:3c:21:d9:93:eb:78:d0:56:95:47:0d:0e:db:f5:87:6a:
1f:69:d5:d6:2e:91:3d:6a:a8:66:61:aa:dc:18:1e:ac:bb:f8:
8b:3e:30:72:e8:57:db:d6:7c:30:e6:5a:e0:27:67:1d:0b:fd:
87:3d:a3:8b:01:00:4a:4c:00:cd:0b:24:b1:03:0d:f3:39:c7:
b2:44:b9:df:59:73:9a:62:6d:ab:d1:87:4f:42:f0:e4:cf:3c:
30:80:99:1a:ef:c9:27:b4:9e:2c:13:f5:4f:8d:13:60:f6:f4:
fc:ad:87:f1:30:ca:8c:bb:bd:88:f0:f8:7f:d7:bc:74:c6:cb:
a9:11:0c:e4:44:61:f4:36:43:47:89:c3:45:22:78:eb:1a:a2:
0a:b1:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:31 2026 by rpki-client