Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/JIYMhbkOeO0pSNEOVGJBAbuW6Z4.roa
File: JIYMhbkOeO0pSNEOVGJBAbuW6Z4.roa (raw, json)
Hash identifier: GY8WDYpP9OTbPtH0RoRmqRWgz/M7p/6mNp2SWNBriZw=
Subject key identifier: 24:86:0C:85:B9:0E:78:ED:29:48:D1:0E:54:62:41:01:BB:96:E9:9E
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019E9C3E51537D51E089DF81B202ED9D3BAF
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/JIYMhbkOeO0pSNEOVGJBAbuW6Z4.roa
Signing time: Sat 06 Jun 2026 09:23:10 +0000
ROA not before: Sat 06 Jun 2026 09:23:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 85.11.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:3e:51:53:7d:51:e0:89:df:81:b2:02:ed:9d:3b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Jun 6 09:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24860c85b90e78ed2948d10e54624101bb96e99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:b2:c2:7f:27:84:98:dc:fa:e6:89:b3:fb:
f7:6f:dc:7f:37:cf:cf:5c:53:a6:7f:27:30:da:76:
79:1c:6b:93:77:a6:80:8f:d8:87:6f:be:5b:03:c0:
3f:c0:a5:4a:7d:2c:46:97:dd:4b:76:85:9f:3b:cc:
a0:63:94:51:08:70:db:2c:5a:af:6a:e8:f9:39:9e:
41:fd:31:8b:2d:27:12:4d:46:74:a8:35:4e:d6:2c:
2b:66:90:a0:51:5d:b5:d1:69:60:ef:e5:1c:e2:de:
4c:76:a7:7b:41:16:a2:b8:e9:36:48:36:65:32:29:
59:ba:a0:e3:c1:cf:47:9d:f1:61:79:2b:a3:84:85:
cd:1e:fb:f7:5a:0e:cd:68:7f:66:5e:db:83:73:24:
2a:ca:1b:66:9e:14:eb:39:c3:f1:1b:86:2d:b3:94:
79:92:64:59:ae:b7:81:12:30:39:b0:f7:b6:30:f2:
ce:da:21:43:d2:1d:bd:20:e0:2e:f6:cc:c4:d2:ea:
d7:bf:0f:63:4e:b2:53:97:a3:9d:fa:6c:5c:27:31:
58:82:27:66:04:b1:53:3f:3b:cd:61:20:c1:31:ee:
89:ca:5c:fb:1d:bb:9f:1a:94:d3:57:b7:d8:5a:c1:
e6:8c:70:72:d0:10:9b:37:13:c1:7f:d1:d2:9b:96:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:86:0C:85:B9:0E:78:ED:29:48:D1:0E:54:62:41:01:BB:96:E9:9E
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/JIYMhbkOeO0pSNEOVGJBAbuW6Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
50:02:bd:29:ff:05:d2:36:44:34:0a:87:d5:45:d6:ab:0a:ec:
00:2e:35:c5:0e:71:1e:5f:be:62:31:23:70:a0:c0:3b:bc:1a:
96:f2:fd:fd:d5:5e:e8:33:54:b5:f4:38:4d:de:68:13:74:14:
70:63:25:30:d3:70:99:f7:0c:1d:ec:b6:4c:01:e9:68:97:14:
a5:31:c6:a0:af:ab:9a:ef:19:23:42:d6:0f:f6:70:56:1a:22:
38:be:64:c2:5e:0b:55:b9:c6:38:6d:c8:48:5a:c2:0f:5a:75:
9d:2b:49:44:bd:7e:70:af:69:71:37:27:b6:83:3f:48:04:28:
f9:c6:83:2c:ef:f2:b2:27:30:31:6d:64:a1:bf:f7:be:a8:bc:
86:8c:df:aa:2d:0e:29:19:d9:7d:b0:42:f4:be:58:91:1f:1b:
e4:a1:12:42:14:96:63:84:ec:76:cf:ee:69:3e:43:f8:de:04:
f5:3a:e6:27:5e:d5:aa:21:94:6e:f6:dd:99:85:80:7d:07:41:
a1:e4:66:08:7e:b1:15:97:45:da:f0:4a:6e:ee:b6:80:80:48:
64:89:39:79:aa:68:8d:fd:be:f8:3f:61:e8:ba:d5:09:f2:f7:
f2:8c:3a:06:41:f4:57:46:9a:35:6c:21:87:e3:b1:cf:5d:12:
f3:87:ec:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:41:01 2026 by rpki-client