Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/zykWo9Ct0L3lBW7ewPhEqmB_T60.roa
File: zykWo9Ct0L3lBW7ewPhEqmB_T60.roa (raw, json)
Hash identifier: zpltO7/7ljaNziIpUrjqsethtbmoWLWerHaLe5S+B/s=
Subject key identifier: CF:29:16:A3:D0:AD:D0:BD:E5:05:6E:DE:C0:F8:44:AA:60:7F:4F:AD
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019DBB934F9CC5A4BBBD280F7D1AF630AA1C
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/zykWo9Ct0L3lBW7ewPhEqmB_T60.roa
Signing time: Thu 23 Apr 2026 18:21:26 +0000
ROA not before: Thu 23 Apr 2026 18:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198585
IP address blocks: 185.115.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:93:4f:9c:c5:a4:bb:bd:28:0f:7d:1a:f6:30:aa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 23 18:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf2916a3d0add0bde5056edec0f844aa607f4fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:89:24:4a:80:07:c1:b3:6e:2a:07:74:9c:
2d:0b:af:d6:30:2b:53:e2:1d:1e:c0:2e:9e:7c:d9:
32:26:50:87:65:7b:ea:94:2b:54:31:50:b4:19:b4:
02:c6:6d:b5:65:7c:ca:9b:ce:27:b8:26:e7:66:d4:
ec:4f:99:e8:93:3f:90:b3:ed:b2:92:62:e0:fe:f8:
d6:31:2a:8f:2b:30:1b:9f:85:f2:fd:bf:c2:38:9d:
ac:b4:76:6d:9d:7b:f1:6a:e1:28:39:a3:51:cc:b1:
b8:4a:b4:21:40:73:fa:9e:8b:d9:7f:34:49:f1:87:
9c:ab:4b:34:05:00:fc:6f:53:0e:6c:3a:e6:bb:42:
63:dc:b1:58:1e:6d:0c:f6:4b:b2:71:80:c8:86:18:
d1:95:88:27:8b:e2:45:1e:e2:81:ec:8b:c3:b5:b9:
62:5a:e9:f8:13:9c:a3:ec:cb:b9:5c:4a:b6:f8:75:
9c:d7:83:25:2b:44:67:4a:a8:f9:44:af:31:04:41:
66:5c:fd:fb:f3:c7:a8:87:12:19:53:ab:53:59:3d:
e1:04:9c:5e:a2:74:76:d1:ec:5c:45:7d:be:21:25:
af:61:78:cf:89:7f:7b:ca:29:cc:a7:87:d9:93:5c:
b6:78:cf:5a:3c:be:4e:31:cc:4a:69:20:9f:f4:40:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:16:A3:D0:AD:D0:BD:E5:05:6E:DE:C0:F8:44:AA:60:7F:4F:AD
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/zykWo9Ct0L3lBW7ewPhEqmB_T60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.161.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e4:c1:a9:19:d8:04:56:c5:cc:1e:d9:0f:cd:63:63:98:4f:
4c:d9:ac:c7:2d:02:cc:47:b4:29:3b:8f:ae:ed:2c:e4:32:30:
0c:d3:01:ff:1d:d5:a0:c8:6c:63:b2:51:96:ce:5b:ea:b8:1a:
06:5e:04:c1:1b:f7:46:11:93:64:83:c1:b0:b2:ab:ed:ff:99:
cf:cb:60:9c:a6:0b:b5:a7:0a:1e:2e:e1:2b:ac:25:75:e5:60:
88:42:52:d6:81:36:ce:8f:4c:f9:de:4d:97:b5:3d:81:b9:af:
ae:3e:69:c1:f3:62:09:67:60:41:ff:e5:9e:e4:e6:ba:28:e9:
98:89:a4:86:21:2b:1d:50:c1:b7:3b:cd:60:09:f8:81:37:8d:
33:1e:69:2d:ee:57:01:64:5f:c5:78:34:03:3e:bb:ce:4f:2f:
d5:c3:c4:6b:f7:3a:e1:ae:66:63:1a:57:ad:91:99:7e:d9:1f:
8e:1d:a1:58:5b:97:5c:00:e9:5c:45:77:1b:cd:ce:71:9d:8c:
3e:c8:1e:85:83:47:8f:c1:8f:0f:9d:a6:d0:de:df:d6:5b:e5:
c4:d6:7a:b6:59:25:ce:72:e2:ae:6f:1f:64:42:4a:a2:79:5a:
36:20:06:7a:16:c4:24:c2:02:10:21:b6:10:46:58:0f:ad:a8:
41:6b:da:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ27k0+cxaS7vSgPfRr2MKocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNDIzMTgyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjI5MTZhM2QwYWRkMGJkZTUwNTZlZGVjMGY4NDRhYTYwN2Y0ZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK+JJEqAB8GzbioHdJwtC6/WMCtT
4h0ewC6efNkyJlCHZXvqlCtUMVC0GbQCxm21ZXzKm84nuCbnZtTsT5nokz+Qs+2y
kmLg/vjWMSqPKzAbn4Xy/b/COJ2stHZtnXvxauEoOaNRzLG4SrQhQHP6novZfzRJ
8Yecq0s0BQD8b1MObDrmu0Jj3LFYHm0M9kuycYDIhhjRlYgni+JFHuKB7IvDtbli
Wun4E5yj7Mu5XEq2+HWc14MlK0RnSqj5RK8xBEFmXP3788eohxIZU6tTWT3hBJxe
onR20excRX2+ISWvYXjPiX97yinMp4fZk1y2eM9aPL5OMcxKaSCf9EDnzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8pFqPQrdC95QVu3sD4RKpgf0+tMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvenlrV285Q3QwTDNsQlc3ZXdQaEVxbUJfVDYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXOhMA0G
CSqGSIb3DQEBCwUAA4IBAQBh5MGpGdgEVsXMHtkPzWNjmE9M2azHLQLMR7QpO4+u
7SzkMjAM0wH/HdWgyGxjslGWzlvquBoGXgTBG/dGEZNkg8Gwsqvt/5nPy2Ccpgu1
pwoeLuErrCV15WCIQlLWgTbOj0z53k2XtT2Bua+uPmnB82IJZ2BB/+We5Oa6KOmY
iaSGISsdUMG3O81gCfiBN40zHmkt7lcBZF/FeDQDPrvOTy/Vw8Rr9zrhrmZjGlet
kZl+2R+OHaFYW5dcAOlcRXcbzc5xnYw+yB6Fg0ePwY8PnabQ3t/WW+XE1nq2WSXO
cuKubx9kQkqieVo2IAZ6FsQkwgIQIbYQRlgPrahBa9qv
-----END CERTIFICATE-----
Generated at Wed May 13 02:51:25 2026 by rpki-client