Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/zH4N5JwFIli0uJJOjeEySRgy5Og.roa
File: zH4N5JwFIli0uJJOjeEySRgy5Og.roa (raw, json)
Hash identifier: pvIgyK+aw40M5nn8XxcCEXBM7fvXIvRFkr8DOdiX1og=
Subject key identifier: CC:7E:0D:E4:9C:05:22:58:B4:B8:92:4E:8D:E1:32:49:18:32:E4:E8
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 01A110DCC42737E3C06A793384A0CAD629DD
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/zH4N5JwFIli0uJJOjeEySRgy5Og.roa
Signing time: Tue 06 Oct 2026 10:57:45 +0000
ROA not before: Tue 06 Oct 2026 10:57:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199457
IP address blocks: 85.155.14.0/24 maxlen: 24
85.155.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:dc:c4:27:37:e3:c0:6a:79:33:84:a0:ca:d6:29:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Oct 6 10:57:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc7e0de49c052258b4b8924e8de132491832e4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:5c:4c:ad:2f:b6:65:67:50:02:c5:6d:2b:
7d:37:bf:1d:66:5e:a9:e1:1c:24:a6:c5:f4:5b:d5:
1e:60:4d:13:af:25:ff:50:0d:87:b1:2c:bd:c8:8f:
a4:0d:9e:25:15:dd:20:10:d8:58:d4:82:6d:49:f1:
a0:43:6d:5d:68:1a:0c:44:4d:1f:8b:17:56:3d:37:
42:69:75:9c:d6:b0:a8:99:b2:a5:9c:cb:f4:64:d4:
ca:56:23:94:6e:33:76:e0:ba:a1:cf:6a:ab:0a:90:
48:77:d2:71:6f:93:6d:d8:a1:b0:a5:75:1f:e1:ae:
8e:ca:7a:50:d8:03:81:67:9f:f8:44:aa:0c:6a:48:
1b:1c:6d:c4:99:b1:15:43:0e:14:8b:3f:14:0c:fa:
e4:f1:99:d6:39:a3:a0:53:86:b8:1b:80:ef:0f:ac:
cb:85:62:4c:7c:d4:9f:95:a7:c3:c7:ea:f0:50:fe:
e7:8c:82:37:79:74:83:04:86:a3:84:da:b0:79:17:
16:d1:c2:63:bc:80:5e:e6:05:29:e3:cb:27:2a:dd:
1c:28:52:55:91:3a:77:d3:ed:f0:7e:ba:c4:33:6f:
d0:24:ee:7f:d3:56:2a:3e:af:6a:be:81:e6:2d:56:
93:0f:ed:03:7b:e9:63:79:08:f3:a2:41:22:a7:c5:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7E:0D:E4:9C:05:22:58:B4:B8:92:4E:8D:E1:32:49:18:32:E4:E8
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/zH4N5JwFIli0uJJOjeEySRgy5Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.14.0/23
Signature Algorithm: sha256WithRSAEncryption
77:2d:ae:0e:f5:d8:b3:b7:68:06:c2:7e:81:1d:85:ec:25:ab:
15:96:42:df:c3:a9:0f:8e:73:29:2b:73:0f:4b:55:97:a2:2c:
e1:d4:3e:93:f9:84:31:82:87:7a:35:c1:9d:23:da:7e:9d:18:
95:43:36:11:06:ed:a8:07:aa:30:e8:2b:8a:12:61:32:5f:a1:
22:3c:ea:47:ae:29:a3:db:d4:94:e7:ad:d3:d5:5b:74:2a:b9:
e1:9f:f8:d7:45:b2:da:d8:d6:30:ff:a2:37:b9:6b:00:9e:4b:
b7:ac:bb:44:c1:b1:74:f4:e5:09:fa:01:08:8d:90:c3:55:2d:
e4:2c:02:11:9e:c8:2c:60:c7:7e:28:be:03:61:7c:af:87:52:
d4:5e:85:59:69:a7:b8:bd:74:04:ec:e0:13:c6:b3:d9:48:00:
98:f6:8a:8a:ba:54:fc:48:49:9a:0c:f8:79:cf:ce:fe:03:9c:
dd:6d:38:45:a3:ee:c2:2d:3a:6c:a1:db:a1:26:83:3f:80:bd:
b6:40:59:54:73:5d:94:4c:21:ae:4c:cb:42:3c:2d:8a:eb:83:
8f:f9:e2:51:25:30:b3:2c:8b:34:37:5e:e1:5a:5e:d4:0c:4f:
ba:d5:ec:1c:fd:e2:4c:b8:bb:40:9c:f6:d5:88:41:72:07:58:
9a:12:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:29:02 2026 by rpki-client