Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/cOPlXPVG36d0wB2IYUkpzV6iog8.roa
File: cOPlXPVG36d0wB2IYUkpzV6iog8.roa (raw, json)
Hash identifier: 4DrXXtt2bjM5uCwjHQWc2WxFe2nrecGYFbdUPFJVeNg=
Subject key identifier: 70:E3:E5:5C:F5:46:DF:A7:74:C0:1D:88:61:49:29:CD:5E:A2:A2:0F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A082AC08819320B644BAB8DB37D0645D20
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/cOPlXPVG36d0wB2IYUkpzV6iog8.roa
Signing time: Tue 08 Sep 2026 20:18:27 +0000
ROA not before: Tue 08 Sep 2026 20:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20724
IP address blocks: 91.239.216.0/24 maxlen: 24
178.211.159.0/24 maxlen: 24
185.130.89.0/24 maxlen: 24
193.9.16.0/24 maxlen: 24
193.109.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:ac:08:81:93:20:b6:44:ba:b8:db:37:d0:64:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 8 20:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70e3e55cf546dfa774c01d88614929cd5ea2a20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:74:aa:97:5e:02:5a:bf:a6:51:49:91:8a:
b7:32:cb:1f:ed:e5:d1:f1:dc:45:cf:8f:34:bc:ed:
20:8b:f7:ab:9d:01:e0:b4:4a:7a:15:75:6a:9c:9c:
44:46:12:03:42:2d:fb:2a:39:88:56:0d:55:e5:fd:
45:e5:99:34:8e:f0:c2:8c:e0:4c:79:ad:0c:d1:aa:
29:5b:0c:7e:28:ec:57:fe:7b:ba:d5:0a:f5:43:c8:
02:71:17:cf:5f:64:f3:9d:73:a1:be:28:d3:15:0e:
cd:19:24:2d:b2:e0:05:7e:c6:d8:d6:87:8c:e9:f4:
2b:c1:17:be:d8:99:02:33:98:c5:25:2d:3b:3b:0e:
ba:e9:6f:93:61:3c:6c:82:46:ff:09:6f:9f:05:cd:
53:89:7c:a9:27:00:94:ce:91:eb:3f:69:08:b6:7f:
bb:67:d5:10:bf:f6:d4:8b:13:fa:e9:6e:1d:af:32:
63:1b:be:23:78:2d:4a:99:f2:f7:3f:30:ca:fa:1f:
4c:f2:82:44:f8:94:00:d2:dc:ff:d4:39:0f:3e:46:
db:af:4d:d5:5c:8e:f9:b9:8e:0f:ae:13:da:f3:40:
98:a7:20:8a:95:d4:a7:e1:f7:0f:dc:07:a3:b5:42:
7d:87:23:36:80:54:c5:82:bf:d8:a7:f5:ac:70:54:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E3:E5:5C:F5:46:DF:A7:74:C0:1D:88:61:49:29:CD:5E:A2:A2:0F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/cOPlXPVG36d0wB2IYUkpzV6iog8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.216.0/24
178.211.159.0/24
185.130.89.0/24
193.9.16.0/24
193.109.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d8:e1:dd:e4:93:4a:a7:ba:49:62:30:cc:05:43:d9:93:9b:
7f:f2:d8:3c:e3:e0:bc:c6:dc:74:83:97:6d:3c:7e:0a:a3:1e:
b3:b0:3c:6a:5b:69:e8:22:1e:13:e6:7b:d9:44:06:ba:e7:1d:
95:24:03:83:46:ca:93:9e:3d:c9:d8:0c:15:d4:68:2e:bb:3c:
9f:57:ee:bf:23:ef:04:9b:44:5f:ea:8f:3b:e7:ee:fc:14:61:
18:c4:cc:f8:85:e7:78:dc:bd:88:2f:1e:07:02:01:5a:e0:ed:
f4:40:1a:af:b1:32:f9:27:08:27:54:da:13:94:ec:48:0c:b1:
6c:29:21:dc:be:e8:57:3a:fa:fa:71:bf:71:15:43:75:90:d1:
b7:07:fa:d9:2d:9e:59:6a:c3:67:a7:23:25:2e:c0:36:01:0c:
22:6c:4d:6e:52:94:8c:c9:ca:bf:b1:65:07:6f:d7:21:5c:68:
a6:5c:ab:38:eb:96:23:ae:41:88:d2:63:fe:e4:e8:67:b8:cd:
44:3c:dc:9e:b5:3d:d4:3a:43:79:5b:0b:9f:4d:59:36:be:a4:
5d:d1:1e:c7:78:74:4c:10:1e:f2:30:0e:f5:81:31:6d:d8:ef:
ca:f2:c1:27:76:02:6c:e6:2c:bd:9b:20:55:c6:e5:34:93:a5:
88:36:b2:73
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaCCrAiBkyC2RLq42zfQZF0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwOTA4MjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGUzZTU1Y2Y1NDZkZmE3NzRjMDFkODg2MTQ5MjljZDVlYTJhMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1910qpdeAlq/plFJkYq3Mssf7eXR
8dxFz480vO0gi/ernQHgtEp6FXVqnJxERhIDQi37KjmIVg1V5f1F5Zk0jvDCjOBM
ea0M0aopWwx+KOxX/nu61Qr1Q8gCcRfPX2TznXOhvijTFQ7NGSQtsuAFfsbY1oeM
6fQrwRe+2JkCM5jFJS07Ow666W+TYTxsgkb/CW+fBc1TiXypJwCUzpHrP2kItn+7
Z9UQv/bUixP66W4drzJjG74jeC1KmfL3PzDK+h9M8oJE+JQA0tz/1DkPPkbbr03V
XI75uY4PrhPa80CYpyCKldSn4fcP3AejtUJ9hyM2gFTFgr/Yp/WscFR6ZwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHDj5Vz1Rt+ndMAdiGFJKc1eoqIPMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvY09QbFhQVkczNmQwd0IySVlVa3B6VjZpb2c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW+/YAwQA
stOfAwQAuYJZAwQAwQkQAwQAwW39MA0GCSqGSIb3DQEBCwUAA4IBAQBq2OHd5JNK
p7pJYjDMBUPZk5t/8tg84+C8xtx0g5dtPH4Kox6zsDxqW2noIh4T5nvZRAa65x2V
JAODRsqTnj3J2AwV1GguuzyfV+6/I+8Em0Rf6o875+78FGEYxMz4hed43L2ILx4H
AgFa4O30QBqvsTL5JwgnVNoTlOxIDLFsKSHcvuhXOvr6cb9xFUN1kNG3B/rZLZ5Z
asNnpyMlLsA2AQwibE1uUpSMycq/sWUHb9chXGimXKs465YjrkGI0mP+5OhnuM1E
PNyetT3UOkN5WwufTVk2vqRd0R7HeHRMEB7yMA71gTFt2O/K8sEndgJs5iy9myBV
xuU0k6WINrJz
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:21 2026 by rpki-client