Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/AmPxHgt14KPL1k1tfSo6VB1-Y98.roa
File: AmPxHgt14KPL1k1tfSo6VB1-Y98.roa (raw, json)
Hash identifier: a0KpujfM0jg5uZoCSiDuRJk90KjY/TouFTQb6DeJ5Bo=
Subject key identifier: 02:63:F1:1E:0B:75:E0:A3:CB:D6:4D:6D:7D:2A:3A:54:1D:7E:63:DF
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 01A0FBEF2BAB61D5D78C9F8248873455B955
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/AmPxHgt14KPL1k1tfSo6VB1-Y98.roa
Signing time: Fri 02 Oct 2026 09:25:50 +0000
ROA not before: Fri 02 Oct 2026 09:25:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 85.11.163.0/24 maxlen: 24
85.11.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:ef:2b:ab:61:d5:d7:8c:9f:82:48:87:34:55:b9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Oct 2 09:25:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0263f11e0b75e0a3cbd64d6d7d2a3a541d7e63df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:1d:00:2b:94:25:1a:b3:4d:88:5a:c8:cc:
44:1f:aa:a8:a0:7f:d0:1b:77:e5:6b:ee:2a:23:77:
aa:a7:b9:de:81:4f:dd:d2:96:db:a7:a7:a1:2d:d9:
39:3d:04:9e:71:c0:15:34:a4:41:32:c9:c9:a6:9e:
fb:b2:0b:98:f5:9b:eb:a6:40:37:c8:be:f5:e7:c6:
50:6d:fc:b9:00:e7:c1:b8:cf:81:a3:9c:e1:2e:b9:
91:6c:41:20:33:53:ba:a6:e6:14:13:a3:5b:b9:a9:
a1:76:e1:64:40:00:60:09:c8:c7:13:3d:a1:27:a5:
60:23:27:69:5b:fc:ca:5b:bf:b4:0f:6f:23:39:aa:
d4:65:25:37:b3:0a:50:50:43:81:7c:e6:55:18:0e:
75:7d:f7:1f:03:cb:6d:2a:81:88:13:d1:55:94:29:
06:52:21:30:e1:dd:da:6d:6a:ce:92:3b:7a:48:df:
1f:a7:7d:55:b1:cf:72:cc:e9:fb:d4:98:d4:23:a4:
19:bd:7d:75:85:bb:be:6c:d0:6d:32:73:af:b8:cb:
3b:df:3f:4c:c1:5f:c4:58:18:80:af:15:05:07:86:
7a:c7:89:e7:73:95:2f:3f:40:75:ed:b2:24:74:b6:
7c:65:23:1c:4d:6e:d6:b2:a1:3b:6d:d2:7d:d7:aa:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:63:F1:1E:0B:75:E0:A3:CB:D6:4D:6D:7D:2A:3A:54:1D:7E:63:DF
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/AmPxHgt14KPL1k1tfSo6VB1-Y98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.163.0/24
85.11.180.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f7:3e:60:8b:1d:45:f7:4f:b3:89:9b:a0:5c:c8:c3:e2:87:
86:64:ae:ec:1e:86:98:d9:40:70:08:e8:8e:a7:29:80:b6:99:
4c:67:28:a5:3f:53:eb:9d:86:a2:3f:20:a3:60:e6:d1:e6:77:
30:9b:a2:7d:d8:15:9c:80:f9:66:09:91:a8:e7:15:eb:2d:cc:
63:14:00:ce:c9:11:e5:7f:e0:13:5b:76:4b:c9:34:59:0d:6a:
b1:7b:f8:b6:8d:8a:89:a0:63:38:e2:e8:5d:c1:1b:8d:8b:5e:
45:26:ac:66:d4:ec:dd:a4:b3:28:11:68:b9:9b:1e:76:d8:a6:
29:d9:b5:77:5b:d1:4b:02:5e:d6:f4:f5:14:d9:b6:f6:e6:aa:
e1:3f:12:fd:b8:d2:29:11:d4:ca:48:57:3e:c6:24:9f:b0:10:
13:b4:cf:b5:22:17:ec:dd:df:ae:06:54:8c:48:a7:17:c2:85:
89:ff:64:36:ca:09:1a:ef:1b:df:f1:04:68:ba:5d:63:91:d2:
cb:99:cc:23:c5:bf:01:d0:cf:5b:d9:91:c9:6d:45:dc:c3:92:
0e:93:d4:13:f9:64:b0:c7:da:e8:c3:e1:8a:cf:51:8a:20:4d:
43:d3:df:92:c4:20:98:df:b9:cf:4d:ae:a2:92:ca:c6:e4:38:
ef:ec:e3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:42 2026 by rpki-client