Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/gWZwPKS89WN3kAXqeA4lsO-MMiE.roa
File: gWZwPKS89WN3kAXqeA4lsO-MMiE.roa (raw, json)
Hash identifier: 01gAovYEBYTtIsp4ZgCq0W+5p6EEj+WQArIpRCjPCSk=
Subject key identifier: 81:66:70:3C:A4:BC:F5:63:77:90:05:EA:78:0E:25:B0:EF:8C:32:21
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019EBB0ADC19DD088F8421D39A2B14D7F270
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/gWZwPKS89WN3kAXqeA4lsO-MMiE.roa
Signing time: Fri 12 Jun 2026 08:55:11 +0000
ROA not before: Fri 12 Jun 2026 08:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.115.163.0/24 maxlen: 24
2001:3280::/29 maxlen: 32
2001:3380::/29 maxlen: 29
2a0e:a780::/29 maxlen: 32
2a13:8000::/29 maxlen: 32
2a13:b840::/29 maxlen: 32
2a13:bfc0::/29 maxlen: 29
2a13:c040::/29 maxlen: 29
2a13:ddc0::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
2a14:6b40::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:0a:dc:19:dd:08:8f:84:21:d3:9a:2b:14:d7:f2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 08:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8166703ca4bcf563779005ea780e25b0ef8c3221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:ea:f8:ad:62:37:2c:4d:d2:5a:e5:95:67:
21:2e:a0:1c:d4:63:a3:cd:7e:52:f8:0f:4e:9f:2b:
d5:5b:44:6b:f4:bd:bc:22:bb:aa:58:fd:8a:0a:36:
24:1f:2e:96:00:17:95:ae:92:95:66:bb:0a:34:5e:
a9:11:30:41:26:05:92:c7:cb:c4:b3:8d:c5:a8:eb:
b4:a2:85:49:41:9b:d4:d3:f4:20:fc:6b:a5:98:f0:
23:ff:aa:a2:f5:83:16:16:02:03:ee:4a:37:ee:ce:
88:00:92:e1:09:5c:0b:1b:dd:db:7e:3f:4f:3b:df:
81:89:8b:a9:5e:a9:a1:82:05:27:fa:3e:28:66:99:
a6:f3:c2:7f:7a:dc:cc:c7:1a:68:47:c1:6f:2a:e8:
80:a2:c0:e2:1d:d2:33:39:22:6b:79:19:6c:df:79:
87:32:39:d3:67:c8:5f:60:30:a1:f8:47:a3:9d:ad:
12:57:ed:84:c9:85:27:7b:8e:d9:cf:d2:1d:da:02:
ce:28:4f:68:e6:d7:52:3b:cd:a4:da:9d:98:1f:fd:
0c:9f:0c:b7:ca:ef:5a:80:c1:0f:a8:4a:47:12:28:
4d:48:48:40:20:2e:93:9c:7e:3d:34:14:6e:f9:18:
f9:a0:53:b6:a1:87:31:92:c1:81:e5:08:30:75:0c:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:66:70:3C:A4:BC:F5:63:77:90:05:EA:78:0E:25:B0:EF:8C:32:21
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/gWZwPKS89WN3kAXqeA4lsO-MMiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.163.0/24
IPv6:
2001:3280::/29
2001:3380::/29
2a0e:a780::/29
2a13:8000::/29
2a13:b840::/29
2a13:bfc0::/29
2a13:c040::/29
2a13:ddc0::/29
2a13:de40::/29
2a14:6b40::/29
2a14:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
08:12:17:3e:b7:92:b0:0f:d5:b1:04:39:ea:4d:ee:c6:6c:cb:
ab:23:8c:f7:35:de:88:f4:f8:91:ac:a7:d3:ad:31:36:69:78:
12:7e:33:f3:8a:c6:6b:b8:df:af:ad:f0:bd:3f:02:f8:08:ea:
03:64:ce:a5:2a:c9:b2:cf:df:0c:c8:01:f3:85:b3:d7:6d:4f:
24:f2:ce:96:6b:3e:2c:2a:1a:be:54:ab:a5:ec:d4:6e:47:df:
1c:7e:a4:83:a9:77:6e:36:b9:17:58:b6:4c:b0:8e:b3:d9:f4:
78:46:e4:78:65:8c:c8:b1:76:d3:33:60:93:f2:47:53:6c:ff:
42:0c:d3:03:6b:93:00:87:43:22:8b:76:1a:95:7c:f2:6f:d6:
e2:6c:2e:cd:e4:b4:25:d4:08:9e:8f:b5:6f:b5:86:ec:22:97:
73:17:f9:7c:43:5b:a5:99:7e:32:b0:cb:d6:69:7a:32:a7:cf:
82:24:d7:b3:36:60:f9:cf:33:b8:e6:ed:26:a6:07:4d:98:ba:
09:55:0f:41:c6:d9:89:51:00:a7:1e:3d:bd:92:b6:c9:51:19:
6c:dc:5f:bf:11:42:21:7f:b4:ce:32:80:06:78:0e:fd:2f:3e:
a5:0d:2c:ce:5a:e3:fe:e8:78:d2:e4:fa:dc:06:bf:bf:38:d7:
a8:a5:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:09 2026 by rpki-client