Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zVfHB6xgYbJtJCm4H5EGRk3hC7k.roa
File: zVfHB6xgYbJtJCm4H5EGRk3hC7k.roa (raw, json)
Hash identifier: c3yZq0K5+Oc2hAEr0nxCqDN3oLQT4Nw1D6AMcTqSbJ0=
Subject key identifier: CD:57:C7:07:AC:60:61:B2:6D:24:29:B8:1F:91:06:46:4D:E1:0B:B9
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A03250955C32DCC1E3E661FFCE6A055BF5
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zVfHB6xgYbJtJCm4H5EGRk3hC7k.roa
Signing time: Mon 24 Aug 2026 05:48:56 +0000
ROA not before: Mon 24 Aug 2026 05:48:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 85.232.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:50:95:5c:32:dc:c1:e3:e6:61:ff:ce:6a:05:5b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 24 05:48:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd57c707ac6061b26d2429b81f9106464de10bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:03:bb:94:f3:27:1b:4e:95:83:13:d1:36:ec:
c0:c9:59:6a:56:da:ac:10:a7:c6:73:a8:2c:e3:06:
29:9c:b6:7b:bd:96:39:84:fc:5c:4a:e2:ef:ae:31:
80:e0:c1:56:e8:bd:84:ca:b1:67:6e:a9:c1:42:c5:
0f:8f:4c:cf:05:c4:95:76:68:df:b6:4c:02:0c:60:
3c:75:c4:4f:62:3b:06:7f:61:96:b1:08:9b:24:c1:
b6:2e:32:c9:e2:9d:0c:cc:59:7e:06:2e:ba:04:4a:
9e:45:05:c3:c6:04:d0:3a:a1:49:d8:1b:48:b4:a5:
be:31:35:71:42:00:b2:89:53:8e:11:c3:9a:58:9b:
34:34:d5:6c:53:1f:89:a0:4c:a9:28:c4:a6:e5:27:
cc:5b:8d:b7:71:da:a2:30:5e:c9:0a:a4:35:1b:61:
8d:f1:24:e5:76:dd:b1:1a:64:03:e2:a5:95:f6:12:
a7:ec:53:d6:e8:09:70:6a:dc:fb:26:a6:25:3c:9c:
25:43:f3:bc:f7:9e:93:81:33:02:1e:33:01:8f:7f:
38:fe:26:d9:51:a9:37:45:75:e0:03:e3:3c:93:b4:
95:0a:11:0a:c4:dd:e0:c7:e2:9d:d9:6b:4d:09:b5:
04:ed:6c:0a:31:5d:4c:5d:2b:04:8b:de:eb:fb:c4:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:C7:07:AC:60:61:B2:6D:24:29:B8:1F:91:06:46:4D:E1:0B:B9
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zVfHB6xgYbJtJCm4H5EGRk3hC7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.183.0/24
Signature Algorithm: sha256WithRSAEncryption
08:aa:fb:2c:11:bb:80:16:1a:cb:1e:f9:32:65:4d:8f:ea:9d:
90:28:1b:97:37:af:a9:a2:2a:43:07:c9:c1:18:2e:29:60:ec:
4a:b5:b0:01:97:7a:1c:45:d5:13:24:cc:40:f1:0b:da:4c:55:
ae:fd:15:94:98:07:6d:e1:58:42:5c:95:33:4d:8b:32:4b:63:
0a:a0:0c:42:2a:77:a8:57:e9:a8:27:54:7f:7a:06:0f:f8:67:
64:5e:68:0a:80:f6:2d:bb:d1:de:c0:a1:b8:f6:e8:b5:b8:2f:
f7:19:96:01:1e:34:59:c5:e6:b0:1b:59:b1:f7:00:34:db:dd:
8a:16:91:51:d4:54:6f:14:0b:6e:49:94:d5:1e:f9:b5:53:51:
a1:03:66:00:f7:99:b5:19:ba:7e:a0:c8:d3:b4:23:63:5f:4f:
03:b5:96:0c:19:a1:16:89:ec:a8:6d:0f:94:5a:f9:da:bc:d0:
0b:89:e3:b2:c8:a9:b1:3a:45:5b:f3:fb:52:cc:43:34:e3:42:
d1:84:cc:fc:69:8a:2f:6c:bd:52:0a:69:8e:13:08:5c:cd:84:
67:5c:01:e0:f8:82:c1:46:63:0c:b3:bb:26:2c:53:4c:fc:74:
44:45:16:69:42:88:b9:8e:4b:74:8c:8f:c5:7e:f3:57:0a:38:
34:0e:74:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:56 2026 by rpki-client