Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/lIdtUehaGCJPCuTw8q6Ms9KSHtA.roa
File: lIdtUehaGCJPCuTw8q6Ms9KSHtA.roa (raw, json)
Hash identifier: G3jTm9EGu0sPhX18qNKUm9+l3y1AFX35FfUBguFPA5Q=
Subject key identifier: 94:87:6D:51:E8:5A:18:22:4F:0A:E4:F0:F2:AE:8C:B3:D2:92:1E:D0
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019E4EBE564820C64542FC9084D5F0D57A33
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/lIdtUehaGCJPCuTw8q6Ms9KSHtA.roa
Signing time: Fri 22 May 2026 08:12:37 +0000
ROA not before: Fri 22 May 2026 08:12:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209630
IP address blocks: 85.11.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:be:56:48:20:c6:45:42:fc:90:84:d5:f0:d5:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: May 22 08:12:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94876d51e85a18224f0ae4f0f2ae8cb3d2921ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:74:0d:80:57:da:c5:40:8b:d4:6b:e6:a5:
eb:a3:6c:4a:f7:48:c8:63:70:e6:f1:f5:73:f3:24:
e8:d6:3b:e0:a9:1d:fa:22:e9:73:6f:f8:6b:db:dd:
64:7b:4b:a6:c0:66:de:57:e2:55:58:1d:45:78:a3:
b4:34:30:85:7e:cb:fc:3c:91:95:2c:d2:cc:4f:c3:
13:2e:23:f2:4e:6b:d5:89:9a:c8:40:aa:3b:b4:4e:
af:07:92:6e:2b:2a:01:83:0c:ba:9f:63:f1:a5:19:
d1:46:1e:74:58:d0:4b:3d:9b:3b:17:ca:b5:67:6c:
07:f6:ff:94:e1:81:42:b3:04:86:6c:b7:42:37:0f:
86:f0:f6:97:66:8f:00:87:4e:14:68:e6:d9:f1:61:
76:4c:ad:db:c8:e8:32:42:70:02:f4:84:42:4d:d2:
f9:bf:fa:e0:c5:47:10:76:b4:91:ef:21:b2:51:54:
84:29:37:a2:9e:a0:44:84:f8:a4:14:66:16:fa:12:
24:ff:c5:a8:9f:19:b3:cf:d1:35:05:5e:ef:30:82:
c8:b2:0d:6e:d9:19:6f:d3:9c:7b:19:10:07:68:8f:
14:45:06:e8:11:23:df:de:81:39:e7:7b:d0:4d:29:
1a:64:0d:da:1f:bf:d4:69:13:e7:b1:8b:23:bc:9c:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:6D:51:E8:5A:18:22:4F:0A:E4:F0:F2:AE:8C:B3:D2:92:1E:D0
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/lIdtUehaGCJPCuTw8q6Ms9KSHtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
55:68:b5:36:dd:6c:ea:7c:d9:73:39:61:34:ca:67:ff:b6:0b:
63:5d:73:0a:84:8a:27:b7:c6:98:1f:1b:26:db:8c:7b:a4:28:
09:dd:fc:31:dd:bc:23:c8:8b:a3:5b:f4:bd:eb:c7:a1:06:fc:
d6:f0:b6:95:06:7b:47:5b:07:d4:d6:6b:2b:6b:fc:8d:d0:56:
eb:71:9b:d9:3f:6d:36:d0:59:f7:31:6c:4d:da:92:9b:ad:2c:
01:0c:20:09:97:71:47:2d:a2:f9:84:c5:49:f6:2c:00:11:44:
6c:c6:e5:c3:67:a3:6b:44:60:bc:b7:bf:94:7d:2b:08:ad:de:
82:5c:da:c6:fc:0a:d0:24:d0:ad:e1:25:c0:d5:c8:bf:0a:65:
cb:fb:1d:58:92:d4:4b:b5:33:cf:7e:2f:47:c1:4b:5c:a2:d9:
33:20:2e:0f:0b:19:d9:4b:17:f3:e2:c3:79:b9:0f:64:47:4b:
93:12:e1:8d:31:8f:dd:ef:4d:34:6f:d0:f7:d6:ac:d9:61:d4:
c9:ef:4b:36:fb:ba:d8:d0:3e:96:52:e2:fb:d7:7c:41:ee:aa:
f7:da:6e:b4:e5:ef:80:46:db:69:1f:15:55:ce:38:04:a5:8c:
fb:f1:b9:73:be:7e:f6:be:74:88:72:df:9a:a0:8c:bf:42:30:
42:15:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:41:01 2026 by rpki-client