Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/s9iX_8jHbmVHXFKczRfEqvS3lbg.roa
File: s9iX_8jHbmVHXFKczRfEqvS3lbg.roa (raw, json)
Hash identifier: 9PT8eOG35z7CULatEOKv2/jHURYTkpGSxPnig8wWGg4=
Subject key identifier: B3:D8:97:FF:C8:C7:6E:65:47:5C:52:9C:CD:17:C4:AA:F4:B7:95:B8
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 0199998EBDA4CC557F01C6450622939E6692
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/s9iX_8jHbmVHXFKczRfEqvS3lbg.roa
Signing time: Tue 30 Sep 2025 07:38:12 +0000
ROA not before: Tue 30 Sep 2025 07:38:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 85.11.180.0/24 maxlen: 24
85.11.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:8e:bd:a4:cc:55:7f:01:c6:45:06:22:93:9e:66:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 30 07:38:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3d897ffc8c76e65475c529ccd17c4aaf4b795b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:97:91:5f:71:7c:e0:a3:d2:58:1c:84:d9:
63:22:51:a8:6a:a4:9b:64:45:ac:27:78:aa:e7:bb:
26:23:45:c8:56:8e:7e:6d:b4:42:49:ca:32:30:1a:
4b:12:41:f5:83:dc:6d:9b:dd:f1:39:88:f9:21:76:
bb:16:39:57:45:89:97:e1:a3:01:7a:31:f0:5b:af:
77:09:36:d1:60:ba:e2:a4:10:d5:1e:69:58:c9:5e:
8e:54:4f:8b:88:fe:e3:56:74:02:1b:d7:aa:cd:5e:
34:e7:4a:e9:a8:66:78:01:66:b2:13:32:98:6c:75:
6c:ea:9d:86:34:73:98:56:87:ed:5b:f1:39:3f:e5:
6b:03:a5:ca:4a:9f:73:d4:c1:90:79:92:c4:7d:e7:
ea:d6:df:9e:c1:a7:aa:5e:c0:9e:05:9d:e8:21:5e:
12:b5:e0:52:68:f7:a5:6e:92:c8:e1:2d:2a:c3:46:
92:5e:7a:7e:e0:0f:6c:4a:c1:6d:b7:de:62:4b:e8:
25:15:a8:8a:7b:f1:63:bb:ce:14:2e:af:84:c4:e7:
a4:a2:91:ab:1a:ed:a7:4a:6e:db:d3:4c:44:12:8d:
da:a4:ac:1f:64:ae:96:7b:41:fb:93:5b:64:f2:6b:
c8:c4:97:71:aa:04:2b:df:34:11:89:21:c7:fa:f4:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D8:97:FF:C8:C7:6E:65:47:5C:52:9C:CD:17:C4:AA:F4:B7:95:B8
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/s9iX_8jHbmVHXFKczRfEqvS3lbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.180.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:ef:9a:f8:9e:ee:c2:07:48:44:de:62:12:57:df:33:9f:b8:
6b:fb:fe:0d:2d:e3:35:19:6f:f1:d6:d7:c3:7c:08:a7:e3:4c:
f5:30:e2:c4:5d:cf:06:65:39:54:2e:e4:c4:c9:50:c8:7a:f7:
9e:91:33:77:79:69:0e:dd:2f:d4:4d:6f:f7:6e:74:a7:9a:35:
7c:d5:7d:72:42:b1:5b:70:bb:97:86:6d:ae:06:1d:87:7c:5d:
39:29:a0:36:07:87:50:c8:aa:62:70:81:93:65:f1:69:b2:49:
62:25:9a:a6:71:89:60:55:76:88:0f:a4:d1:9c:1e:ee:fd:7b:
3d:c0:74:cc:31:b8:f4:1b:ee:f7:a5:cf:55:1b:fe:52:d4:8e:
16:12:03:dd:d5:25:5e:95:93:f2:ef:f2:10:92:53:75:e4:7e:
8f:7b:53:37:06:61:10:14:f9:c8:fd:eb:db:a4:9e:18:17:10:
99:2c:be:35:7f:18:92:a9:1d:11:52:4a:f4:5d:ad:e1:31:09:
f7:44:81:08:3a:a2:67:c8:a9:2a:39:ac:7a:f0:bc:49:df:65:
f6:ba:92:cd:7b:e8:47:5d:de:9f:82:67:67:34:cc:f6:1b:f2:
35:99:f2:4d:d1:f5:7b:64:5a:cb:66:79:2a:c2:68:ce:0c:7e:
7a:2f:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 11:54:33 2025 by rpki-client