Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/u0VmJaz83ppJmbDi-vreQAVJE-I.roa
File: u0VmJaz83ppJmbDi-vreQAVJE-I.roa (raw, json)
Hash identifier: yuRXn4zf3ks8mlj/u7psnp72Q1pUdc2S336QIUIkKIg=
Subject key identifier: BB:45:66:25:AC:FC:DE:9A:49:99:B0:E2:FA:FA:DE:40:05:49:13:E2
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 01A06116838211A0F512DEA1430F4112E06D
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/u0VmJaz83ppJmbDi-vreQAVJE-I.roa
Signing time: Wed 02 Sep 2026 07:47:40 +0000
ROA not before: Wed 02 Sep 2026 07:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25147
IP address blocks: 85.11.144.0/24 maxlen: 24
85.11.145.0/24 maxlen: 24
85.11.146.0/24 maxlen: 24
85.11.147.0/24 maxlen: 24
85.11.148.0/24 maxlen: 24
85.11.149.0/24 maxlen: 24
85.11.150.0/24 maxlen: 24
85.11.156.0/24 maxlen: 24
85.11.157.0/24 maxlen: 24
85.11.158.0/24 maxlen: 24
85.11.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:16:83:82:11:a0:f5:12:de:a1:43:0f:41:12:e0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 2 07:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb456625acfcde9a4999b0e2fafade40054913e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:06:f0:a0:35:8f:de:c7:4f:7c:bb:9e:b4:
28:0a:ac:0e:4a:e9:6c:3f:d4:09:8f:a1:49:8e:18:
91:e9:9e:e9:bd:39:10:02:d8:f8:81:c6:18:f5:ac:
3d:a0:07:3f:c0:8c:4c:cb:8f:fb:c1:9d:4e:9d:6f:
a7:d1:fb:2b:be:3e:6d:66:fd:46:01:6c:0c:d3:af:
f3:b3:53:65:1a:32:d5:9c:6f:ec:a0:f0:82:96:dc:
7d:3d:ce:1a:1e:f1:57:87:c9:55:cb:90:42:8a:f7:
5f:78:33:5d:4c:11:7a:4a:3e:8d:1b:58:bc:ee:d5:
ec:29:09:d1:75:18:3c:86:be:60:32:f4:e1:fc:13:
83:97:a5:9c:66:d6:47:9e:4e:0d:9e:60:a8:0b:2f:
e8:6b:99:39:04:3c:25:e0:0d:27:4d:9d:9a:79:76:
d2:19:47:a5:a1:ed:9f:1b:fb:b7:81:b3:16:19:1c:
1d:a0:92:f7:65:9c:6e:19:17:10:1a:9b:43:f7:f6:
4a:fb:39:ec:a3:26:29:86:9f:c9:c9:d2:07:e9:df:
93:21:86:83:18:4f:b3:7d:85:f5:dd:f6:64:ea:c8:
0f:22:bd:da:cd:f9:f5:34:55:54:2d:d1:92:6a:59:
ee:85:97:df:07:fb:f2:c1:df:fc:b8:ba:eb:6d:bf:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:66:25:AC:FC:DE:9A:49:99:B0:E2:FA:FA:DE:40:05:49:13:E2
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/u0VmJaz83ppJmbDi-vreQAVJE-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.144.0-85.11.150.255
85.11.156.0/22
Signature Algorithm: sha256WithRSAEncryption
11:f5:3f:d4:1e:96:58:b0:ff:74:40:b5:44:4a:af:c2:2d:92:
3d:cb:55:cf:08:d9:81:7a:13:56:71:02:af:46:eb:93:da:1f:
19:a4:e6:bf:e0:e7:71:2d:4e:42:0e:a0:c8:23:67:be:18:4d:
87:7f:db:d8:b5:73:5b:14:d4:c5:9f:ad:69:00:4a:cc:8b:60:
13:01:c4:8f:9d:30:53:59:f9:68:37:3c:73:f0:33:a7:7d:04:
05:c7:0d:ac:b4:0e:06:70:15:c0:a1:64:e4:60:ea:ae:c4:92:
73:af:fb:60:3c:7e:3e:e1:ee:82:b1:c1:13:91:1f:b1:d8:4f:
8f:11:86:07:92:fb:b0:f2:d7:02:4a:9b:8f:3d:b2:3d:fd:0f:
c3:c2:11:86:df:80:b7:db:17:24:d4:5a:78:12:f6:7c:f7:c9:
e0:02:9f:c3:37:a8:3b:c4:d0:c6:da:c6:6b:4a:3f:8b:d8:ca:
81:b4:d1:1b:f9:6a:df:43:b1:f1:27:63:b1:6a:22:37:e6:25:
b3:b4:5f:95:27:aa:f1:07:82:e8:d2:02:f7:23:59:6c:94:38:
c4:80:14:0c:a0:67:c8:fd:34:8d:fc:8d:7e:f6:e8:be:1b:58:
42:bc:60:df:ff:c8:8f:c4:e0:e4:03:1b:5d:e2:2d:81:fa:98:
25:3d:ea:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:24:21 2026 by rpki-client