Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/hRbYgsYPpqMVmyfIYBMKbEu3_6Y.roa
File: hRbYgsYPpqMVmyfIYBMKbEu3_6Y.roa (raw, json)
Hash identifier: t8TGuGATsZ3i6732zO+kANns4C+LG5KLFnrBHOYD3eo=
Subject key identifier: 85:16:D8:82:C6:0F:A6:A3:15:9B:27:C8:60:13:0A:6C:4B:B7:FF:A6
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019EBB0BC6C83A4B24B7E0D3C2BD3C6D98B0
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/hRbYgsYPpqMVmyfIYBMKbEu3_6Y.roa
Signing time: Fri 12 Jun 2026 08:56:11 +0000
ROA not before: Fri 12 Jun 2026 08:56:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207388
IP address blocks: 185.115.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:0b:c6:c8:3a:4b:24:b7:e0:d3:c2:bd:3c:6d:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 08:56:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8516d882c60fa6a3159b27c860130a6c4bb7ffa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:f7:62:d3:d8:7b:55:7e:5f:47:d2:7f:71:
b4:78:c0:e4:a5:8e:f5:f8:c0:b6:c6:bd:b9:61:68:
6e:f7:91:b0:c4:1d:fd:14:2d:94:73:fb:e7:17:a7:
c0:ff:38:75:6c:54:ec:fb:48:ea:fb:03:6c:c3:5c:
fd:e4:b2:8e:65:cc:6f:ff:53:e0:d9:ce:c1:c1:80:
aa:70:b7:a5:0c:6b:b2:17:b2:b5:2e:8a:4d:5b:17:
7c:0f:50:d7:45:58:b5:01:ec:5c:f1:03:06:b0:67:
9d:03:61:e3:1f:84:f0:ba:8b:a1:2a:68:b8:59:92:
69:a5:96:20:03:e6:09:43:de:e0:a2:00:30:ff:54:
c4:11:41:64:0d:78:ee:e1:a0:6a:3f:37:8b:05:8d:
09:38:02:82:c6:b9:57:5e:b7:29:13:50:d9:10:8d:
26:33:99:ff:8b:b0:1b:8f:04:70:42:65:4e:16:aa:
2c:1f:d9:c8:88:8c:2c:72:55:99:f1:6c:9a:77:11:
50:a0:1c:32:b7:e9:0d:0d:fd:cb:b0:e1:d4:f2:b9:
ea:c4:a5:40:15:2d:11:c5:d9:e7:02:d2:be:98:79:
00:39:90:8a:c8:bf:7f:69:25:91:2b:81:35:a1:d0:
cd:7a:f1:6c:5e:56:fd:01:ef:57:38:42:01:27:e6:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:D8:82:C6:0F:A6:A3:15:9B:27:C8:60:13:0A:6C:4B:B7:FF:A6
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/hRbYgsYPpqMVmyfIYBMKbEu3_6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.160.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a5:02:7d:6d:96:a6:4a:5b:d0:68:a6:ff:2e:f2:ad:c0:93:
92:8a:5c:3b:eb:ed:ac:78:c5:8b:62:2d:b2:16:2f:bc:27:ae:
d5:a4:9e:82:2d:36:ac:61:75:5d:26:32:13:d7:d3:7f:7b:42:
7d:d6:8c:cf:fb:a7:b2:f8:17:1b:10:df:95:fc:1f:83:8c:0c:
49:55:f2:c0:ac:a8:d6:e3:21:0d:a2:64:83:4b:ee:8d:0c:d8:
b0:41:58:a3:42:d8:96:1f:8a:bd:89:f3:08:63:58:fa:c3:56:
67:ee:7e:84:fa:7f:35:94:23:9f:09:4c:4e:16:7c:76:31:f4:
b8:05:64:5d:00:84:6d:a2:d6:75:e8:c1:4a:0b:77:f7:9f:bc:
88:df:06:9b:80:14:07:77:95:16:8c:8c:21:9c:bd:3e:74:b8:
65:48:66:49:59:eb:0c:ef:7d:8a:aa:e1:32:aa:5b:83:43:70:
bc:e5:79:5c:a2:01:9d:db:6b:c9:0c:2c:98:c5:a6:ce:f3:b2:
3a:1d:68:32:dd:fc:f2:32:87:79:b5:d9:29:8f:f0:82:c1:f5:
c8:78:f4:1a:9f:b9:7e:cc:a2:b7:b5:96:57:fe:2f:a5:a6:0e:
55:3a:ee:62:0d:9e:7f:be:44:ce:c6:31:53:f0:b2:36:6e:1a:
53:22:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:47 2026 by rpki-client