Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/UXVtX6UoLEHhJuxT7xg98dsguX4.roa
File: UXVtX6UoLEHhJuxT7xg98dsguX4.roa (raw, json)
Hash identifier: Wn8t5yXBLmGlY0GUVjzMedcma1MlPEFfvqaYJWVQeOw=
Subject key identifier: 51:75:6D:5F:A5:28:2C:41:E1:26:EC:53:EF:18:3D:F1:DB:20:B9:7E
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019A29F4D7590C5783771FCB1C304A212338
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/UXVtX6UoLEHhJuxT7xg98dsguX4.roa
Signing time: Tue 28 Oct 2025 08:35:03 +0000
ROA not before: Tue 28 Oct 2025 08:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 85.11.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:f4:d7:59:0c:57:83:77:1f:cb:1c:30:4a:21:23:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Oct 28 08:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51756d5fa5282c41e126ec53ef183df1db20b97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:e1:e4:59:44:2e:b0:6b:1f:7f:d2:5a:77:
df:32:b8:c6:90:2e:e5:d9:c2:3d:b2:fe:29:ba:48:
0c:93:f6:ad:d6:00:c6:38:3d:40:9e:a2:a1:0a:da:
c3:05:37:cc:2e:cf:83:dd:8c:85:9e:99:e9:96:c9:
28:14:21:de:26:83:80:fb:c7:b1:66:ed:1d:a3:e2:
5f:de:6d:0b:4e:d8:45:38:ff:98:6f:e9:09:8b:52:
bd:46:c0:49:25:96:52:f3:b6:e1:c3:ee:58:17:f1:
3b:fa:be:6a:f5:5b:df:93:36:bb:aa:71:9d:cd:ec:
17:df:95:14:ca:98:07:f3:eb:a1:bd:6f:4f:a4:4b:
cc:af:c4:08:a9:20:c0:c2:65:a2:1c:8e:65:98:cd:
5f:d3:60:7d:1c:2c:22:87:1e:5d:51:11:ea:8e:5b:
4b:25:c3:0d:6b:84:f2:45:d7:28:33:78:83:9d:60:
31:2a:83:81:f7:bf:d1:fd:75:21:37:2f:1c:63:ec:
b3:9f:36:b3:c5:a6:a6:3a:9b:3e:ec:15:f3:ac:2e:
f8:e4:c7:1f:5d:55:75:fd:9c:24:05:4c:67:0b:b0:
77:97:3c:2c:7c:5d:a0:06:ee:a3:0c:09:e2:04:fd:
dc:ed:da:9d:49:1a:17:cc:21:f4:8d:62:b1:11:5f:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:6D:5F:A5:28:2C:41:E1:26:EC:53:EF:18:3D:F1:DB:20:B9:7E
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/UXVtX6UoLEHhJuxT7xg98dsguX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e9:20:b2:d4:fc:eb:36:e1:4a:d1:b5:60:f5:24:f6:ef:08:
77:5e:59:05:c0:0f:96:74:1e:60:9b:38:07:45:2c:f4:7d:12:
7a:ee:1d:ea:27:3e:9d:09:6c:24:f5:61:e8:a6:a3:50:7b:80:
81:5a:14:7e:aa:ca:a9:2f:82:7d:52:11:8f:70:36:92:7f:28:
18:65:1b:4d:9e:a3:c4:fa:fc:74:94:f7:e9:00:3b:ec:bc:ee:
9b:b1:d5:00:85:12:ea:a2:0b:94:9c:00:5f:76:d9:c0:5d:59:
63:0b:b6:45:05:96:ad:65:91:e7:dd:3b:a7:fe:16:af:cd:98:
30:6a:4e:7c:19:9a:40:78:8e:1e:25:61:4e:12:ad:f2:34:da:
0b:0b:9e:a3:25:07:1c:be:47:10:10:f4:4c:59:c8:50:91:f1:
f6:02:75:c9:43:14:68:c6:d0:b9:45:f4:7d:5e:c5:6e:70:73:
c4:2c:d9:1c:5a:18:bd:17:70:82:b3:88:85:20:7a:64:56:5f:
13:04:d8:3c:cb:b1:0d:d3:dc:86:ec:66:05:28:cd:ae:de:11:
84:e9:62:11:67:c3:7b:14:7a:98:ec:2b:20:c8:57:20:4b:61:
b9:4f:3f:24:59:33:16:f8:5c:3d:de:6c:70:4a:12:89:52:00:
6d:a3:1d:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZop9NdZDFeDdx/LHDBKISM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh
ZWYyNTQwHhcNMjUxMDI4MDgzNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTc1NmQ1ZmE1MjgyYzQxZTEyNmVjNTNlZjE4M2RmMWRiMjBiOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKLh5FlELrBrH3/SWnffMrjGkC7l
2cI9sv4pukgMk/at1gDGOD1AnqKhCtrDBTfMLs+D3YyFnpnplskoFCHeJoOA+8ex
Zu0do+Jf3m0LTthFOP+Yb+kJi1K9RsBJJZZS87bhw+5YF/E7+r5q9Vvfkza7qnGd
zewX35UUypgH8+uhvW9PpEvMr8QIqSDAwmWiHI5lmM1f02B9HCwihx5dURHqjltL
JcMNa4TyRdcoM3iDnWAxKoOB97/R/XUhNy8cY+yznzazxaamOps+7BXzrC745Mcf
XVV1/ZwkBUxnC7B3lzwsfF2gBu6jDAniBP3c7dqdSRoXzCH0jWKxEV9DlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFF1bV+lKCxB4SbsU+8YPfHbILl+MB8GA1UdIwQY
MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt
MmNjNjc1NzI2OTc1LzEvVVhWdFg2VW9MRUhoSnV4VDd4Zzk4ZHNndVg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1
LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQunMA0G
CSqGSIb3DQEBCwUAA4IBAQC+6SCy1PzrNuFK0bVg9ST27wh3XlkFwA+WdB5gmzgH
RSz0fRJ67h3qJz6dCWwk9WHopqNQe4CBWhR+qsqpL4J9UhGPcDaSfygYZRtNnqPE
+vx0lPfpADvsvO6bsdUAhRLqoguUnABfdtnAXVljC7ZFBZatZZHn3Tun/havzZgw
ak58GZpAeI4eJWFOEq3yNNoLC56jJQccvkcQEPRMWchQkfH2AnXJQxRoxtC5RfR9
XsVucHPELNkcWhi9F3CCs4iFIHpkVl8TBNg8y7EN09yG7GYFKM2u3hGE6WIRZ8N7
FHqY7CsgyFcgS2G5Tz8kWTMW+Fw93mxwShKJUgBtox3n
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:16 2025 by rpki-client