Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/xpt0HIVNnP6wwzCkcZxkEEiEL1E.roa
File: xpt0HIVNnP6wwzCkcZxkEEiEL1E.roa (raw, json)
Hash identifier: tAiBXx46rm8ar35MpM6gRUaZTr8igFfjS9OcQ5DIxV8=
Subject key identifier: C6:9B:74:1C:85:4D:9C:FE:B0:C3:30:A4:71:9C:64:10:48:84:2F:51
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019FA8D2ECF3B88D9DD1941562C2A774B1B8
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/xpt0HIVNnP6wwzCkcZxkEEiEL1E.roa
Signing time: Tue 28 Jul 2026 13:03:43 +0000
ROA not before: Tue 28 Jul 2026 13:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 85.11.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d2:ec:f3:b8:8d:9d:d1:94:15:62:c2:a7:74:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Jul 28 13:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c69b741c854d9cfeb0c330a4719c641048842f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:83:3b:b2:ce:64:4a:47:07:b1:bd:78:4b:
14:b0:a0:58:5a:a2:59:16:2a:93:4b:b9:02:3d:bf:
de:a7:44:51:8a:29:19:cb:b6:f8:a4:c9:96:ca:0f:
41:7d:4d:5a:95:87:04:cf:26:99:da:fc:45:4d:d0:
69:8d:c0:72:83:a8:10:de:29:60:b6:8b:82:fc:dc:
c1:95:fa:3d:53:2c:cc:ca:a8:6c:6f:61:f9:74:fc:
02:76:b7:24:c4:6e:78:53:e7:42:b0:0a:56:02:49:
ce:1f:09:93:df:43:13:30:a0:5e:ad:fe:2b:f8:5a:
ca:40:ef:4e:b2:2f:2f:f4:7f:00:a4:b4:ec:b9:58:
50:42:21:28:14:99:6d:f6:43:6d:94:01:b9:00:88:
88:3a:75:37:5d:b7:e4:6f:ad:b2:89:b0:bf:2d:c3:
94:c3:9f:2e:16:15:88:1d:c4:11:03:08:85:98:cf:
77:23:c0:7d:5c:40:86:38:b1:06:94:0f:57:96:76:
c5:31:74:26:63:a1:89:9c:54:96:2b:48:e2:27:e3:
03:8a:01:fa:bf:17:19:75:1a:3b:67:32:fa:fc:aa:
3d:0d:3b:da:da:24:00:e3:cb:a2:18:3f:51:34:f9:
d2:df:20:82:c5:2b:9e:3a:0a:2b:a0:b1:20:e1:bb:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9B:74:1C:85:4D:9C:FE:B0:C3:30:A4:71:9C:64:10:48:84:2F:51
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/xpt0HIVNnP6wwzCkcZxkEEiEL1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.182.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e4:0b:9f:6b:58:92:6e:87:e0:eb:ab:ae:b0:aa:54:1f:fa:
9c:47:a0:45:5f:da:33:e3:3f:74:cb:69:d8:aa:04:b8:7d:fd:
4c:72:06:83:94:9d:be:82:55:49:7f:19:23:74:f1:1a:7d:4d:
77:69:e9:6d:f3:75:23:d6:8b:1f:0e:c8:2b:39:ce:69:1c:d2:
70:9a:2f:75:22:37:1c:32:d2:50:59:f9:e7:c4:82:5f:0c:93:
31:0b:25:64:dc:62:06:20:48:be:b5:8f:75:ba:19:3e:03:2e:
93:77:ca:98:f2:32:ba:52:f8:51:c2:7d:d5:8f:b0:21:48:04:
bc:6c:c2:b8:48:bc:b7:08:8e:4e:ac:80:a0:91:56:56:8a:23:
1c:2c:fe:d2:51:72:35:f9:8d:30:2c:6b:7f:f7:fb:c8:d0:98:
84:5a:95:99:df:47:bd:17:7e:9a:d9:ab:a8:f4:4a:33:89:92:
b1:d0:70:98:51:29:1b:7f:1f:90:2d:5c:6a:4e:e7:25:eb:10:
08:20:78:7e:b0:11:ab:bb:7e:cf:a5:ca:78:4b:42:d9:ca:98:
4d:2e:e2:2c:86:87:4c:90:0e:b4:83:d9:dc:2e:b3:75:42:0d:
e7:8f:ef:ca:33:fc:61:c6:20:41:d9:39:8b:91:1f:88:0d:e9:
fb:f4:a6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 14:17:28 2026 by rpki-client