Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/yZwsLCLxkLtfitXXeEOI5AriQ5I.roa
File: yZwsLCLxkLtfitXXeEOI5AriQ5I.roa (raw, json)
Hash identifier: FCm9aXyNhOi8/TlmLq+ZnY1dbeCxrjPul5TAE2wJRI4=
Subject key identifier: C9:9C:2C:2C:22:F1:90:BB:5F:8A:D5:D7:78:43:88:E4:0A:E2:43:92
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019A20075679C4D29E40A3689C041E30B7C7
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/yZwsLCLxkLtfitXXeEOI5AriQ5I.roa
Signing time: Sun 26 Oct 2025 10:19:03 +0000
ROA not before: Sun 26 Oct 2025 10:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 85.11.182.0/24 maxlen: 24
85.11.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:07:56:79:c4:d2:9e:40:a3:68:9c:04:1e:30:b7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Oct 26 10:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c99c2c2c22f190bb5f8ad5d7784388e40ae24392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:82:2b:e1:c0:38:0c:15:0e:51:83:b7:e5:
c3:14:4b:b7:2b:2e:f0:a1:81:ca:9d:44:7a:95:21:
66:37:33:fb:2b:3e:1b:1e:98:74:2d:6f:9b:57:f1:
77:06:5f:b0:0e:af:af:bb:d6:9f:4f:50:03:54:47:
ee:cc:18:a8:31:59:00:40:9f:9b:bf:90:53:03:ba:
8f:ad:cd:54:36:74:7e:18:6b:dc:67:49:39:77:92:
36:34:b0:cc:ca:78:65:6c:7f:a4:ce:37:0d:b5:77:
57:74:c6:58:d3:2b:94:83:07:58:93:78:d2:87:3f:
8c:3c:ff:38:f1:5f:d8:bc:bb:21:43:d5:ff:b8:fe:
ef:14:01:9a:5e:b0:62:3f:84:2c:0a:02:76:4d:3a:
c5:4f:d5:99:c8:f9:33:74:e2:eb:dd:d0:84:8b:93:
e1:e3:72:64:6e:c8:cd:e4:4a:6f:26:e1:9f:5a:89:
09:2c:0f:e9:35:95:dd:5d:49:8e:6c:df:6d:a4:66:
48:77:cd:35:53:20:f7:00:c8:6d:4e:ba:c9:27:a3:
07:92:16:ab:ad:aa:cc:a9:8c:91:d6:ef:2a:6e:34:
84:a6:50:94:fe:b8:e2:37:d8:ad:48:8f:fd:a5:4b:
b8:b4:58:b9:dc:5c:02:ed:bf:1d:35:3d:39:f2:08:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9C:2C:2C:22:F1:90:BB:5F:8A:D5:D7:78:43:88:E4:0A:E2:43:92
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/yZwsLCLxkLtfitXXeEOI5AriQ5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.182.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:53:7a:b1:30:fc:bd:a5:61:61:57:34:3c:fb:47:bd:af:e9:
cd:a3:b3:9b:8d:a9:ad:5d:04:0b:3a:e4:5b:07:a0:30:7e:0a:
fa:2b:f5:0b:51:04:5c:54:bc:14:28:58:e2:11:93:81:43:2b:
ce:f6:61:ff:0c:d8:5d:80:75:5b:01:bb:b5:78:76:30:51:1a:
e7:d2:48:6a:18:4d:82:d5:08:c1:25:7d:8a:5b:39:24:c8:f7:
f2:a5:29:e2:8b:0e:3f:8b:0a:06:94:ba:eb:ee:2e:e1:c1:20:
54:9f:d3:7b:97:a2:16:e0:26:8c:e0:6e:a8:b6:a0:7e:74:cc:
e6:cc:d2:17:2a:4a:33:8f:b8:14:36:78:6b:9d:14:a2:06:39:
33:87:94:0a:1f:c3:fc:84:04:a5:de:ba:b4:33:91:91:4a:12:
07:48:31:b6:39:8b:f1:80:f1:45:1d:ac:e5:fe:a3:9d:bc:e1:
0b:7e:8f:dd:70:e1:9d:5e:30:87:be:ef:c3:35:3c:52:04:43:
16:42:c4:d5:65:b7:86:bf:1b:10:77:01:a4:38:24:ac:75:2c:
52:10:6d:62:2e:83:70:94:3e:3f:75:be:02:41:89:59:08:30:
64:83:18:f4:c4:bb:44:83:fb:59:cb:ab:84:fd:3e:07:43:9d:
a1:48:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:50:17 2025 by rpki-client