Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/aDuto6eoszuVwDFbBarAR5yv0Hs.roa
File: aDuto6eoszuVwDFbBarAR5yv0Hs.roa (raw, json)
Hash identifier: QzNod093ypgng7jum5k2cAIRdd+ymaN+3dU7EqqyakA=
Subject key identifier: 68:3B:AD:A3:A7:A8:B3:3B:95:C0:31:5B:05:AA:C0:47:9C:AF:D0:7B
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 01A0D908CC33E55C7097C246AD2769528C52
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/aDuto6eoszuVwDFbBarAR5yv0Hs.roa
Signing time: Fri 25 Sep 2026 14:47:07 +0000
ROA not before: Fri 25 Sep 2026 14:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211443
IP address blocks: 85.11.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:08:cc:33:e5:5c:70:97:c2:46:ad:27:69:52:8c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 25 14:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=683bada3a7a8b33b95c0315b05aac0479cafd07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:58:56:6f:f5:eb:a1:ba:a3:86:a3:06:98:
38:2c:b5:6c:ab:36:59:87:7c:d1:9a:c1:4c:86:48:
f0:75:08:dc:83:75:5d:c0:68:4a:cf:93:ae:ab:aa:
a1:5a:f6:c1:c0:7b:be:5a:d1:b0:11:c5:03:af:95:
19:6e:a4:84:04:0a:96:ba:c1:e3:08:4e:17:c5:f6:
4f:f8:82:5e:58:1b:7d:81:47:d3:92:72:c3:56:95:
11:46:f2:36:f9:d8:f9:88:d5:36:25:81:41:0b:7a:
00:17:47:bf:e3:3f:5b:d2:99:0e:5f:73:73:82:5c:
42:19:f7:4b:ca:7c:fe:4c:83:c8:08:35:9d:7a:28:
58:3f:ae:43:9b:e1:16:f9:72:6d:02:66:5d:f5:a3:
12:68:93:74:4a:4f:c8:1e:0e:ea:7d:7b:9a:25:31:
42:a7:83:9d:0d:bd:1a:2d:28:04:a8:5d:39:17:a0:
5e:f1:e9:4a:b3:92:9d:1e:3d:06:b4:34:ec:8a:e5:
8d:2f:d7:c1:5b:b2:2c:44:17:fe:94:e4:ad:26:e9:
df:62:2d:58:ac:d5:93:74:0c:03:d7:69:49:7e:2d:
dd:29:fb:69:54:dc:18:e5:5f:0d:76:8b:42:f5:83:
b3:ed:18:d8:ab:89:dd:25:63:d4:99:d6:4b:55:a0:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3B:AD:A3:A7:A8:B3:3B:95:C0:31:5B:05:AA:C0:47:9C:AF:D0:7B
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/aDuto6eoszuVwDFbBarAR5yv0Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f6:fb:29:9c:0f:62:3e:67:d5:e8:7d:02:ca:be:1d:67:bc:
42:1e:b3:09:47:11:b5:d1:15:15:18:48:9f:6d:13:3f:ca:83:
06:ac:30:54:05:54:3e:e7:fa:2e:3c:cf:25:bc:3f:76:4e:b3:
3a:33:55:6d:7f:36:93:9e:ae:99:5c:ee:c3:7f:eb:71:0a:dc:
d6:c3:bb:1d:d1:1a:35:02:c9:55:f2:6d:b0:9a:65:9c:b7:00:
00:b1:32:aa:3e:8e:e8:50:a4:37:ad:73:61:4b:12:72:d1:e2:
83:68:7c:76:a7:1d:30:1a:2f:38:7a:f3:6f:fc:17:ba:29:52:
d5:74:ba:86:6c:6a:ac:af:0f:56:70:b0:45:af:4b:45:2a:6d:
03:2c:bc:30:87:8a:0b:58:04:f7:ea:9b:69:06:90:a4:83:31:
c1:50:48:71:3e:d5:17:10:b1:42:3c:d6:ff:bc:3a:d7:2f:ff:
a7:9a:6f:ec:ff:66:af:b8:7f:a7:e6:19:03:7a:58:77:d1:5f:
4d:e0:f0:52:69:d6:9d:f0:d2:50:7c:96:3f:ab:30:de:16:aa:
e2:db:6f:fd:02:2c:70:f7:e4:4d:13:05:6d:ad:ed:a7:3b:9e:
ff:0d:c1:d2:f0:05:b7:ce:df:61:ac:0d:1a:f8:2a:4c:19:df:
ea:71:aa:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDZCMwz5Vxwl8JGrSdpUoxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh
ZWYyNTQwHhcNMjYwOTI1MTQ0NzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODNiYWRhM2E3YThiMzNiOTVjMDMxNWIwNWFhYzA0NzljYWZkMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslNYVm/166G6o4ajBpg4LLVsqzZZ
h3zRmsFMhkjwdQjcg3VdwGhKz5Ouq6qhWvbBwHu+WtGwEcUDr5UZbqSEBAqWusHj
CE4XxfZP+IJeWBt9gUfTknLDVpURRvI2+dj5iNU2JYFBC3oAF0e/4z9b0pkOX3Nz
glxCGfdLynz+TIPICDWdeihYP65Dm+EW+XJtAmZd9aMSaJN0Sk/IHg7qfXuaJTFC
p4OdDb0aLSgEqF05F6Be8elKs5KdHj0GtDTsiuWNL9fBW7IsRBf+lOStJunfYi1Y
rNWTdAwD12lJfi3dKftpVNwY5V8NdotC9YOz7RjYq4ndJWPUmdZLVaDjWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGg7raOnqLM7lcAxWwWqwEecr9B7MB8GA1UdIwQY
MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt
MmNjNjc1NzI2OTc1LzEvYUR1dG82ZW9zenVWd0RGYkJhckFSNXl2MEhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1
LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQu7MA0G
CSqGSIb3DQEBCwUAA4IBAQAW9vspnA9iPmfV6H0Cyr4dZ7xCHrMJRxG10RUVGEif
bRM/yoMGrDBUBVQ+5/ouPM8lvD92TrM6M1VtfzaTnq6ZXO7Df+txCtzWw7sd0Ro1
AslV8m2wmmWctwAAsTKqPo7oUKQ3rXNhSxJy0eKDaHx2px0wGi84evNv/Be6KVLV
dLqGbGqsrw9WcLBFr0tFKm0DLLwwh4oLWAT36ptpBpCkgzHBUEhxPtUXELFCPNb/
vDrXL/+nmm/s/2avuH+n5hkDelh30V9N4PBSadad8NJQfJY/qzDeFqri22/9Aixw
9+RNEwVtre2nO57/DcHS8AW3zt9hrA0a+CpMGd/qcap1
-----END CERTIFICATE-----
Generated at Sat Oct 24 09:57:50 2026 by rpki-client