Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/_9vo4TXV1QXIQx1kPpGrObuhcw4.roa
File: _9vo4TXV1QXIQx1kPpGrObuhcw4.roa (raw, json)
Hash identifier: WWIoXOLSOcIU4vu4eUyz7txuv2MOrBOHWxrxY1nRsPE=
Subject key identifier: FF:DB:E8:E1:35:D5:D5:05:C8:43:1D:64:3E:91:AB:39:BB:A1:73:0E
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 01A061176DBCCA662FC4382B8167CB528381
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/_9vo4TXV1QXIQx1kPpGrObuhcw4.roa
Signing time: Wed 02 Sep 2026 07:48:40 +0000
ROA not before: Wed 02 Sep 2026 07:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48747
IP address blocks: 85.11.151.0/24 maxlen: 24
85.11.152.0/24 maxlen: 24
85.11.153.0/24 maxlen: 24
85.11.154.0/24 maxlen: 24
85.11.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:17:6d:bc:ca:66:2f:c4:38:2b:81:67:cb:52:83:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 2 07:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffdbe8e135d5d505c8431d643e91ab39bba1730e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:10:67:63:1c:a5:fb:98:96:ce:1e:24:4c:
54:ba:81:a4:f3:21:4a:dd:77:cc:e4:cd:c6:8b:e3:
2b:a9:49:ac:82:35:11:9c:c3:90:f1:29:6f:cd:61:
98:72:ee:6c:a6:1c:a3:9b:52:97:f9:5a:54:8a:fa:
3a:49:3d:e3:bb:ce:6f:b2:90:2c:5a:11:06:2f:bd:
3a:84:a6:c4:da:aa:52:5c:e1:a9:77:d0:a2:21:88:
42:ce:b2:f1:28:c3:46:e7:47:37:ca:32:c2:00:62:
c8:4a:b3:60:f7:ac:8f:08:a2:0f:ce:b1:38:4d:f8:
1c:1f:c4:d3:e4:72:e8:9e:0b:c7:2b:4c:80:73:66:
ba:72:84:32:da:11:61:7c:9e:39:32:5a:58:0c:8b:
c7:d4:2b:f6:59:f5:17:02:5d:b3:ae:08:78:b6:d1:
a1:94:d8:91:90:c8:1a:2f:df:af:d1:bd:84:31:56:
7d:5a:55:b2:60:c1:52:e0:31:a7:14:96:b1:c6:c8:
ab:aa:0d:3e:40:93:db:ce:ee:82:30:ad:dc:07:41:
03:25:71:07:38:a3:5a:07:95:13:db:60:95:41:5c:
0e:1e:21:6e:04:ea:21:a2:9a:98:1f:ca:3b:5a:50:
89:df:eb:e0:cd:9d:8a:21:73:37:da:c7:20:f3:79:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DB:E8:E1:35:D5:D5:05:C8:43:1D:64:3E:91:AB:39:BB:A1:73:0E
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/_9vo4TXV1QXIQx1kPpGrObuhcw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.151.0-85.11.155.255
Signature Algorithm: sha256WithRSAEncryption
5f:1c:3d:9d:7a:3a:96:93:98:10:4e:30:c4:c4:1d:a4:5c:c5:
9c:0b:f2:b2:4d:b8:f3:8f:66:1d:49:16:8b:c4:ea:89:d0:1a:
b2:35:23:26:2b:58:6a:bf:0b:a4:ac:30:78:6f:f7:0e:d6:70:
1d:55:b6:4d:40:88:bc:70:c7:10:70:26:b7:0a:98:e2:62:d7:
89:42:74:a0:8a:72:b4:30:8d:f3:bd:9f:5a:7c:7b:12:fd:59:
0b:d5:43:f9:00:17:9e:a1:4d:70:4a:06:ac:48:07:4b:81:04:
5d:b1:6e:78:42:49:66:e9:a7:06:e0:63:70:72:e7:e1:0c:c9:
2a:c1:4a:f9:dc:40:1f:53:ae:6e:a5:8b:3e:d9:be:61:00:e3:
c4:d0:c0:62:9e:e2:41:9c:79:3c:55:31:65:4f:c5:d7:86:7e:
0f:15:ef:75:1b:82:c2:be:22:b4:e3:b8:03:35:95:9d:28:98:
68:15:b7:1f:56:71:3d:9c:7a:23:86:cc:99:59:d2:1a:32:58:
f7:db:79:a5:f8:c5:9a:3f:db:92:27:c3:8a:05:56:b8:5a:9e:
0f:c6:18:e0:b1:50:a1:06:74:2c:a9:76:db:88:ec:18:5c:cf:
d1:51:c6:db:87:91:7c:6d:41:54:73:75:62:42:ef:37:a1:c4:
6f:82:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:14:57 2026 by rpki-client