Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/v54yxFj7LT5Be0EdSKwainQJp-8.roa
File: v54yxFj7LT5Be0EdSKwainQJp-8.roa (raw, json)
Hash identifier: cs8xaoSLxXLnH3w920xxt8Wmog0DsZoJKhBTKG8aKew=
Subject key identifier: BF:9E:32:C4:58:FB:2D:3E:41:7B:41:1D:48:AC:1A:8A:74:09:A7:EF
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 01A0712624B5536312ABF4931ABB106B40DB
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/v54yxFj7LT5Be0EdSKwainQJp-8.roa
Signing time: Sat 05 Sep 2026 10:38:40 +0000
ROA not before: Sat 05 Sep 2026 10:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209101
IP address blocks: 85.11.182.0/24 maxlen: 24
85.11.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:26:24:b5:53:63:12:ab:f4:93:1a:bb:10:6b:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 5 10:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf9e32c458fb2d3e417b411d48ac1a8a7409a7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:11:4f:36:99:4b:51:26:e2:28:e2:38:2d:
2b:a6:d6:8e:b9:43:f6:35:26:b7:c8:00:fe:ab:ac:
bd:d6:86:87:bb:39:7f:cb:e5:b2:3e:f0:83:b4:f8:
11:4b:71:81:8f:85:2e:8c:1e:cf:4e:eb:e9:a3:95:
1b:35:2f:6e:48:16:b1:4f:5d:39:21:12:3c:79:d3:
3f:af:c3:7f:49:fd:f0:99:9b:e3:0d:ba:b4:3b:df:
12:fc:09:da:97:c2:22:17:50:fc:93:8b:58:dd:0c:
4a:27:f6:71:4f:7a:3a:81:e0:f9:ea:96:e9:c3:c9:
47:63:d5:c8:5b:55:d1:12:70:8a:80:aa:42:8e:46:
c0:e6:22:e9:07:8f:2c:3e:07:b6:3c:f7:ff:6a:48:
85:6a:69:db:31:f3:06:37:f1:0d:6d:a5:1b:f9:fc:
aa:22:db:16:6c:6c:3b:d7:31:8d:0a:3f:d3:32:af:
48:51:bd:46:c9:9f:e4:b9:6d:0e:13:f9:ad:14:ff:
dc:5a:2d:20:2f:c4:d1:0d:25:a8:88:8b:b4:64:11:
fd:37:ee:e0:4d:d1:2b:ab:bd:a0:52:00:f3:c7:85:
b4:bf:d1:55:5e:f1:5c:54:76:02:5d:bd:d4:0d:be:
39:22:c4:73:81:24:2f:3c:23:29:b8:3d:c0:73:f9:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:32:C4:58:FB:2D:3E:41:7B:41:1D:48:AC:1A:8A:74:09:A7:EF
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/v54yxFj7LT5Be0EdSKwainQJp-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.182.0/24
85.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
31:06:8a:45:20:cb:34:ae:93:d2:c9:74:e3:a1:ae:3f:c1:1f:
c7:1c:6e:e3:3f:6b:e3:09:bd:b4:85:9b:cc:f9:3c:a4:13:fa:
62:28:fb:65:f0:62:d6:c7:85:50:19:2e:9c:a3:8f:87:b9:de:
02:65:70:23:76:02:8a:f6:37:13:d0:0b:58:bf:5a:af:f2:9e:
9f:7b:bd:e7:17:ed:8c:bf:30:47:b3:bd:d8:f6:19:ac:62:88:
61:ce:df:c6:60:6e:33:a1:a5:84:c0:1e:0f:d3:f7:e0:14:2f:
f4:93:7b:91:2e:7e:16:b2:b2:c9:df:e2:54:03:04:50:36:c3:
d3:0a:bd:3e:d3:ca:77:d2:62:08:77:3c:8c:02:ce:30:eb:23:
79:43:ed:d2:76:2e:be:87:1f:16:d7:20:a9:0a:b9:3e:ca:97:
44:c1:13:25:ec:38:1e:29:5d:4d:6d:be:99:3d:4f:1f:9e:ca:
a6:cc:26:e9:cf:04:1e:c1:2c:cc:cb:db:0c:85:ee:13:a2:82:
6e:7e:dd:04:7a:5c:b1:35:ce:d1:db:4c:15:fe:78:60:73:31:
9c:05:11:cf:a1:8d:a8:25:80:99:12:eb:f5:31:de:47:b4:d4:
97:26:89:91:13:8f:85:61:e1:7d:aa:ed:17:e0:38:97:1f:d0:
6e:0e:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:33 2026 by rpki-client