Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/zUC_7Af-GXUjpA008C80pKzZqGA.roa
File: zUC_7Af-GXUjpA008C80pKzZqGA.roa (raw, json)
Hash identifier: HN6NzZaG9xL31VHgI1gci+l/kg6TB3q0lXSO5TNQLiw=
Subject key identifier: CD:40:BF:EC:07:FE:19:75:23:A4:0D:34:F0:2F:34:A4:AC:D9:A8:60
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019FFBE66309E1216AED54C5DFC8C02CE7BB
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/zUC_7Af-GXUjpA008C80pKzZqGA.roa
Signing time: Thu 13 Aug 2026 16:13:27 +0000
ROA not before: Thu 13 Aug 2026 16:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211443
IP address blocks: 85.11.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:e6:63:09:e1:21:6a:ed:54:c5:df:c8:c0:2c:e7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Aug 13 16:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd40bfec07fe197523a40d34f02f34a4acd9a860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:87:1b:a2:38:28:a6:56:e4:ff:87:67:1b:
dd:0a:b0:64:46:a3:df:57:5a:c0:54:0b:ce:a5:dc:
0a:ba:03:62:95:01:31:ba:6d:83:3d:b6:47:92:50:
58:39:92:5f:f1:47:2a:c8:9d:e9:e4:99:1d:2b:33:
b5:64:ed:f7:01:a4:6f:4b:a6:04:aa:d1:dd:84:d8:
df:ea:0a:f6:6f:6d:6c:0b:ec:32:b4:5c:d1:b9:00:
4f:65:d5:55:f7:b0:c1:48:e1:ca:ba:d1:95:ec:6f:
27:c2:7a:ba:bd:78:f0:68:ab:d6:b4:aa:d1:4d:03:
ff:46:eb:e3:b1:0a:d1:79:a8:2b:7e:81:ce:b0:a9:
36:f2:41:a5:20:cc:b3:c5:c4:b1:1e:10:1e:59:87:
67:ac:50:65:8d:a6:75:c7:8d:5e:f3:e1:23:cb:d0:
01:c3:34:10:c4:5f:d4:35:3e:6e:9e:43:d2:95:99:
a6:a1:2a:4b:96:c2:2a:d8:d6:6d:e5:cb:c3:23:a9:
6d:60:d3:4e:ee:1e:24:02:c5:5c:bd:2d:df:51:12:
ee:46:71:7d:f5:15:ed:a7:3f:d2:a4:45:72:57:c3:
35:68:52:25:b0:d2:11:99:f1:18:76:82:ed:41:70:
01:93:7a:06:50:8f:cc:bd:b2:96:18:ee:47:84:4a:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:40:BF:EC:07:FE:19:75:23:A4:0D:34:F0:2F:34:A4:AC:D9:A8:60
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/zUC_7Af-GXUjpA008C80pKzZqGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d5:58:00:01:b4:da:8c:61:d6:3b:70:ab:5a:4b:02:27:9a:
44:2e:a5:6d:a1:76:3c:36:d8:61:75:f9:17:93:c1:83:4e:0e:
9b:1f:14:dc:d3:c8:4a:d3:cc:ad:e3:54:5e:ee:50:3e:96:38:
64:1f:2f:1d:39:4f:db:cd:53:0e:46:25:73:34:5c:2e:08:e4:
5e:d8:f0:52:c9:65:54:e4:ca:15:48:03:32:a8:59:75:0f:2d:
5b:5b:d0:60:82:85:27:fe:47:11:d7:ec:bd:3a:a4:05:78:49:
bd:33:01:e4:da:b1:85:35:27:9f:c0:fd:4b:12:05:97:9b:de:
a4:91:ab:c9:1c:c4:1e:95:fe:41:a8:dc:d7:17:91:3b:81:43:
68:20:14:d5:86:d3:a2:5e:d2:34:a6:45:3b:4f:9f:bf:35:a9:
4b:e4:cd:b4:4e:fd:69:98:f0:69:49:c8:f8:f7:01:0f:6f:5e:
26:8c:f9:58:7e:89:35:ce:77:46:4e:90:0c:c2:35:c7:8f:c2:
60:b6:22:d5:a4:e0:22:89:56:6c:e4:25:a6:e7:f0:30:b5:f4:
44:70:22:79:5c:03:c2:50:69:22:7a:83:5c:c0:f8:2e:d6:dc:
fa:f8:49:46:77:a0:e1:30:e9:22:99:4e:7e:84:01:a9:aa:30:
2c:45:39:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/75mMJ4SFq7VTF38jALOe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh
ZWYyNTQwHhcNMjYwODEzMTYxMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDQwYmZlYzA3ZmUxOTc1MjNhNDBkMzRmMDJmMzRhNGFjZDlhODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozmHG6I4KKZW5P+HZxvdCrBkRqPf
V1rAVAvOpdwKugNilQExum2DPbZHklBYOZJf8UcqyJ3p5JkdKzO1ZO33AaRvS6YE
qtHdhNjf6gr2b21sC+wytFzRuQBPZdVV97DBSOHKutGV7G8nwnq6vXjwaKvWtKrR
TQP/RuvjsQrReagrfoHOsKk28kGlIMyzxcSxHhAeWYdnrFBljaZ1x41e8+Ejy9AB
wzQQxF/UNT5unkPSlZmmoSpLlsIq2NZt5cvDI6ltYNNO7h4kAsVcvS3fURLuRnF9
9RXtpz/SpEVyV8M1aFIlsNIRmfEYdoLtQXABk3oGUI/MvbKWGO5HhEpjaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1Av+wH/hl1I6QNNPAvNKSs2ahgMB8GA1UdIwQY
MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt
MmNjNjc1NzI2OTc1LzEvelVDXzdBZi1HWFVqcEEwMDhDODBwS3pacUdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1
LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQu7MA0G
CSqGSIb3DQEBCwUAA4IBAQAM1VgAAbTajGHWO3CrWksCJ5pELqVtoXY8NthhdfkX
k8GDTg6bHxTc08hK08yt41Re7lA+ljhkHy8dOU/bzVMORiVzNFwuCORe2PBSyWVU
5MoVSAMyqFl1Dy1bW9BggoUn/kcR1+y9OqQFeEm9MwHk2rGFNSefwP1LEgWXm96k
kavJHMQelf5BqNzXF5E7gUNoIBTVhtOiXtI0pkU7T5+/NalL5M20Tv1pmPBpScj4
9wEPb14mjPlYfok1zndGTpAMwjXHj8JgtiLVpOAiiVZs5CWm5/AwtfREcCJ5XAPC
UGkieoNcwPgu1tz6+ElGd6DhMOkimU5+hAGpqjAsRTly
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:23 2026 by rpki-client