Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa
File: vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa (raw, json)
Hash identifier: zCBUM9PNE9L017aRi2l6ubnhCBO8JS5nhLKiRqWwM3Q=
Subject key identifier: BE:C0:99:D9:30:64:6A:83:61:BE:50:B4:6A:B2:99:14:CF:0F:E6:66
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019CC36D9F8FD504B2C54AD2F201064BFBEE
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa
Signing time: Fri 06 Mar 2026 13:54:27 +0000
ROA not before: Fri 06 Mar 2026 13:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211486
IP address blocks: 85.11.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:6d:9f:8f:d5:04:b2:c5:4a:d2:f2:01:06:4b:fb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Mar 6 13:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bec099d930646a8361be50b46ab29914cf0fe666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:c7:29:62:db:65:14:67:6c:ec:25:a0:7d:
8f:55:91:55:85:bb:43:65:b5:7e:78:5b:be:ed:28:
a9:96:8d:27:0c:70:81:f7:fd:ec:98:fd:61:0d:67:
d3:5f:bd:39:0e:e9:b2:0d:0a:6c:d4:b3:59:43:36:
ca:41:1b:df:f1:88:fe:df:e2:a0:60:1a:13:c1:33:
76:dc:5c:56:e7:96:a4:e7:9c:c5:6d:31:2e:65:31:
d9:24:2d:50:04:96:fa:a6:12:52:19:3d:15:1e:44:
dc:34:b9:84:25:5d:6b:ab:a8:d1:e2:18:d7:46:ba:
6e:b8:f0:b6:1f:a7:d0:2c:29:2d:f2:30:51:ed:05:
43:7e:46:c7:19:b3:ea:54:78:65:08:07:b1:00:30:
99:5d:2e:bb:14:ad:0e:56:e2:b3:60:35:b8:a4:7c:
c1:33:d0:68:17:f1:90:94:08:b8:30:8a:ca:73:a4:
d6:15:e5:34:52:52:c0:fb:a8:41:bc:da:9b:4c:af:
54:bf:f4:19:5e:16:e3:88:01:7d:a6:5f:06:3b:af:
91:c9:4d:7e:1c:0a:4f:d2:22:99:bb:38:db:0e:b9:
16:1c:07:70:71:97:61:f9:a9:7c:34:35:98:9c:f3:
d5:a2:52:a6:d8:66:25:ac:8a:35:27:49:dd:41:ac:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C0:99:D9:30:64:6A:83:61:BE:50:B4:6A:B2:99:14:CF:0F:E6:66
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6e:99:e8:68:c7:a7:39:3c:f4:a8:c3:f4:08:28:93:7a:4e:
c8:ea:63:c7:60:94:5b:ee:9d:5e:79:ab:19:21:a1:66:a6:92:
58:9b:30:ad:c5:f2:59:db:2a:b7:94:f4:ef:2e:c5:c7:5c:d0:
3e:44:38:35:f3:f7:a5:d6:2c:99:f9:35:1a:2e:d1:73:8c:60:
bd:d3:fe:46:64:78:69:84:0a:1d:e4:f6:46:43:76:bc:d4:cb:
6c:ec:e7:33:f9:82:3f:d8:d5:dc:40:04:50:a8:5d:43:f2:11:
77:70:de:e5:ac:9e:a1:77:d4:9a:1e:f6:d6:ed:50:a1:e0:65:
98:2b:fc:1d:0e:e4:9b:30:60:71:5e:ca:f9:26:66:b0:dc:ea:
aa:3c:03:33:0b:a6:e8:e6:a9:3a:8c:77:96:aa:77:74:36:b3:
a6:dc:61:4c:e8:d4:4b:11:f4:20:79:21:c4:e6:77:73:54:99:
f3:6e:94:fc:10:01:86:0c:51:f2:59:ac:51:6e:01:a8:62:af:
03:63:64:1c:5d:87:bd:c5:a4:a6:16:c1:2d:b1:68:07:8d:83:
0a:ab:fa:60:c0:4f:e4:f5:87:40:34:9c:a6:5d:b8:fb:7a:f7:
f4:7b:8c:5f:bf:d2:e3:da:d4:63:62:b3:b4:99:ce:86:6c:1f:
00:91:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:18:28 2026 by rpki-client