Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/V86UJA1O-8HYQT54CIctp1oCO8c.roa
File: V86UJA1O-8HYQT54CIctp1oCO8c.roa (raw, json)
Hash identifier: J5EsS3YJMQEhACG+1Y3yRobs5dYSCmigi0dhNvrKc7I=
Subject key identifier: 57:CE:94:24:0D:4E:FB:C1:D8:41:3E:78:08:87:2D:A7:5A:02:3B:C7
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 0199A435075FBB549F77F58159321F74688F
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/V86UJA1O-8HYQT54CIctp1oCO8c.roa
Signing time: Thu 02 Oct 2025 09:16:02 +0000
ROA not before: Thu 02 Oct 2025 09:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198482
IP address blocks: 85.187.208.0/24 maxlen: 24
85.187.209.0/24 maxlen: 24
85.187.210.0/24 maxlen: 24
85.187.211.0/24 maxlen: 24
85.187.212.0/24 maxlen: 24
85.187.220.0/24 maxlen: 24
85.187.221.0/24 maxlen: 24
91.92.61.0/24 maxlen: 24
151.237.0.0/24 maxlen: 24
151.237.1.0/24 maxlen: 24
151.237.2.0/24 maxlen: 24
151.237.3.0/24 maxlen: 24
151.237.4.0/24 maxlen: 24
151.237.5.0/24 maxlen: 24
151.237.6.0/24 maxlen: 24
151.237.10.0/24 maxlen: 24
151.237.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:35:07:5f:bb:54:9f:77:f5:81:59:32:1f:74:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Oct 2 09:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57ce94240d4efbc1d8413e7808872da75a023bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ca:0b:65:4c:14:48:c5:0e:f4:d2:5d:31:3c:
5a:fb:f9:6c:e7:cb:b0:69:82:99:2f:2d:ab:1c:b6:
c7:db:df:98:c8:07:7c:92:7a:d2:c6:f5:4f:07:45:
bc:0f:e1:7c:7e:7f:d6:32:8f:ea:22:c3:d3:d9:02:
b3:7c:2b:1e:be:eb:59:6c:82:ba:f4:f6:5b:5e:cc:
e4:c4:e9:12:a5:28:6c:de:e1:c8:db:84:c8:6a:51:
82:93:64:80:37:1d:48:0f:de:43:9c:8e:d7:83:ba:
9c:b5:df:0f:a1:c9:6f:63:7b:74:32:b8:1d:87:c2:
14:e5:8e:76:ce:2c:8f:51:3a:fd:d8:3b:9b:e3:ac:
f7:9a:2e:8b:e5:f5:76:2d:52:5b:1d:b0:a4:bb:ec:
38:36:be:42:dc:91:3e:23:c1:ef:39:9a:27:23:f6:
7c:71:a2:82:d5:0b:ff:7c:e4:e4:76:4a:22:5c:60:
5d:5a:1b:b9:f6:34:d4:87:33:34:87:bc:3f:49:86:
95:db:9a:d8:e7:f1:b9:61:2e:c3:85:be:84:b9:66:
af:65:00:fc:44:92:15:88:ff:80:6f:09:a9:76:b4:
56:d8:0d:f2:ee:22:67:c4:33:3b:32:ea:e7:92:87:
ce:91:d6:2b:59:c1:77:d0:5e:db:05:04:77:3f:d5:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:94:24:0D:4E:FB:C1:D8:41:3E:78:08:87:2D:A7:5A:02:3B:C7
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/V86UJA1O-8HYQT54CIctp1oCO8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.208.0-85.187.212.255
85.187.220.0/23
91.92.61.0/24
151.237.0.0-151.237.6.255
151.237.10.0/24
151.237.94.0/24
Signature Algorithm: sha256WithRSAEncryption
71:42:5c:5d:45:3f:81:da:ee:62:1c:3c:4e:79:b3:37:97:c7:
25:7b:d7:64:d3:37:55:61:5e:03:f7:63:5a:27:70:90:c9:b7:
3b:fc:dd:b0:32:83:3b:91:b8:e7:82:6f:88:f3:2b:2c:05:c7:
7f:d7:c0:58:37:80:e3:42:73:1d:97:34:4d:98:98:ab:21:2f:
9c:e0:e6:88:5b:bf:97:e7:d4:9d:7b:1a:b5:ea:81:6e:4d:03:
41:d2:82:86:7e:7a:3d:a8:ae:b4:09:63:d9:e0:9b:68:ec:6b:
b5:b2:e9:df:ed:a4:f4:0b:d0:55:fe:44:2a:50:28:f9:20:27:
0d:d1:a6:6e:90:fb:f2:a2:bb:2a:74:43:ef:4f:97:6a:13:be:
20:79:24:77:0f:78:25:87:ea:54:b8:ad:c5:1b:14:82:68:ec:
dc:f0:ef:d2:8c:4d:e5:88:dc:27:cc:21:a3:b5:bd:01:71:e1:
20:11:f3:40:70:23:c4:fd:48:e4:6d:55:3f:8b:cc:89:00:23:
54:90:70:6d:b9:b9:5b:29:6b:06:83:31:43:2c:6e:77:28:c7:
47:9d:c1:20:63:29:45:f0:8c:67:46:6d:48:84:7e:65:e5:a1:
32:07:7e:01:f5:5c:f7:7d:2c:4b:d8:67:20:ef:ab:89:6a:39:
02:6f:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:02 2025 by rpki-client