Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/ymWVOHnFwPNMW_S5oeDKQGMzw9U.roa
File: ymWVOHnFwPNMW_S5oeDKQGMzw9U.roa (raw, json)
Hash identifier: FZumat6xUga+T6l1YL5PAYgikdkbXVT6ADcushDrJaM=
Subject key identifier: CA:65:95:38:79:C5:C0:F3:4C:5B:F4:B9:A1:E0:CA:40:63:33:C3:D5
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019A265DA76D89CDA82E9CA3CE6B04D0211C
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/ymWVOHnFwPNMW_S5oeDKQGMzw9U.roa
Signing time: Mon 27 Oct 2025 15:51:03 +0000
ROA not before: Mon 27 Oct 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133398
IP address blocks: 85.11.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:5d:a7:6d:89:cd:a8:2e:9c:a3:ce:6b:04:d0:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Oct 27 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca65953879c5c0f34c5bf4b9a1e0ca406333c3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:bc:60:d7:03:80:78:cc:cb:c4:6a:d0:61:
c7:9b:99:c3:7f:77:22:4a:c1:31:00:c5:6e:49:a3:
32:a4:65:c4:e0:46:aa:94:cb:50:51:e5:9c:e2:33:
39:c0:01:46:8f:5a:69:d7:42:54:99:24:b0:4e:c7:
70:2d:3d:b4:df:9e:9a:a1:33:d8:fd:f9:ef:44:2c:
65:b3:50:cc:5b:f1:2c:f4:24:c8:fc:d5:64:c4:6a:
74:26:88:a3:64:4a:1f:33:aa:c4:8c:34:cf:05:34:
f3:b1:97:43:7a:cd:cf:cf:da:73:30:72:db:1e:f1:
ea:4e:58:db:ab:93:8b:a8:cb:4a:8d:14:84:14:99:
62:06:de:49:2a:63:90:be:6e:c5:8a:41:eb:83:11:
f2:4b:30:fa:bc:59:2c:71:ba:47:b8:65:8c:a7:38:
8b:a4:3a:dd:23:ed:c7:be:9f:92:c3:76:24:e5:da:
ab:39:da:e6:6a:dd:b2:33:d4:0e:ec:ef:54:3c:82:
6e:ac:3d:df:a2:3e:82:36:da:8c:ca:2a:cd:39:a0:
b6:fa:5b:01:9f:5e:71:64:38:f5:c0:b5:74:7f:51:
e4:a9:a8:57:85:23:95:08:73:d5:52:d0:a9:42:47:
7e:7b:69:26:58:df:c4:9d:cb:00:6c:5c:e4:49:65:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:65:95:38:79:C5:C0:F3:4C:5B:F4:B9:A1:E0:CA:40:63:33:C3:D5
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/ymWVOHnFwPNMW_S5oeDKQGMzw9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.161.0/24
Signature Algorithm: sha256WithRSAEncryption
11:37:a6:f8:59:fe:70:cd:08:b9:d5:a4:1a:6b:87:3f:3c:e4:
a5:bc:6a:47:cb:c6:f7:c9:18:c9:ab:f3:fb:45:06:40:2a:d4:
d9:1b:80:59:38:b2:78:6e:f6:3d:1a:a1:e7:62:99:7e:14:94:
0f:60:a7:99:ef:a9:ea:a7:62:c6:6b:94:64:98:cd:4b:68:de:
90:06:64:44:5f:0f:1b:b9:95:57:c8:7b:50:c5:87:04:d7:a8:
f9:80:b1:71:93:b5:ce:68:b2:0d:9e:ba:c0:23:78:d2:1c:8d:
f5:07:8e:11:cc:3d:2d:f5:3e:18:28:2f:7c:04:6e:bf:d1:cc:
77:2f:38:9e:a5:82:3e:e1:5f:b4:10:39:fb:3d:45:14:90:a8:
57:45:10:31:7a:94:67:9f:e8:79:35:b9:ae:d5:e9:8a:45:3a:
74:33:ae:e3:50:05:d2:7d:a8:de:60:f8:8f:ee:f4:b1:1a:d1:
d5:70:33:25:c7:38:29:84:5e:ad:7b:a0:2d:7c:ff:42:3f:e3:
03:72:c5:3d:4d:87:e3:d6:33:d8:ed:e3:29:50:d0:61:34:93:
a0:4a:ef:f4:ca:46:66:4b:02:19:b3:03:0d:cb:3f:8d:98:a3:
43:ff:c4:5f:3d:54:ad:7f:76:7d:a7:f1:50:9c:3d:7b:d0:2d:
e7:83:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:12:23 2025 by rpki-client