Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/V-mmCMfH0ewPaLirmRRX0lynxtg.roa
File: V-mmCMfH0ewPaLirmRRX0lynxtg.roa (raw, json)
Hash identifier: +J3VnkcAf47JsIizHu++4KN/uSIVT2PuurhD+o/0Z7U=
Subject key identifier: 57:E9:A6:08:C7:C7:D1:EC:0F:68:B8:AB:99:14:57:D2:5C:A7:C6:D8
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019F818880226E0C9B164E90A921F5EE4C43
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/V-mmCMfH0ewPaLirmRRX0lynxtg.roa
Signing time: Mon 20 Jul 2026 21:57:14 +0000
ROA not before: Mon 20 Jul 2026 21:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146892
IP address blocks: 85.115.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:88:80:22:6e:0c:9b:16:4e:90:a9:21:f5:ee:4c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 20 21:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57e9a608c7c7d1ec0f68b8ab991457d25ca7c6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:f1:6d:61:a3:a0:81:7b:31:f7:54:a2:ed:
30:11:d3:43:86:30:9f:e6:36:ea:2f:1f:4b:37:9e:
3c:b0:01:f3:d2:b7:9a:fe:29:e0:8b:41:7a:3b:fe:
8a:a9:5d:af:48:ec:63:d3:e3:e9:32:31:1f:20:c9:
84:16:fe:af:d8:81:32:ac:93:ec:4d:b9:0c:c4:aa:
a4:67:15:4f:41:8d:bb:3f:35:88:61:af:50:f8:90:
ff:91:57:f5:95:13:2c:ae:b0:57:89:7e:be:68:e0:
d4:44:02:8d:75:f6:61:65:aa:e7:81:3b:9e:b5:5a:
4a:f1:a3:48:ce:91:3a:ce:da:ed:d2:2e:be:0f:b2:
97:35:8c:a0:3d:7f:4d:ad:1f:19:4e:46:7f:9b:3b:
9c:3b:c3:b9:c2:10:80:2f:9c:ba:bf:7a:df:ea:7a:
1a:3b:f6:9d:40:df:e1:4b:74:b6:a9:11:99:66:ac:
6a:b3:71:bc:aa:0b:8b:2a:d8:50:27:6d:b1:e7:ba:
37:8f:54:76:b3:40:ac:fb:8a:36:7c:78:13:41:c1:
ae:9a:f3:ed:54:e6:a8:eb:e5:27:41:10:31:46:bf:
36:33:5d:1d:7e:ef:b2:73:1e:33:41:0b:86:79:8c:
52:31:fb:c5:8e:d7:f0:3c:b1:da:96:42:8c:c2:68:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E9:A6:08:C7:C7:D1:EC:0F:68:B8:AB:99:14:57:D2:5C:A7:C6:D8
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/V-mmCMfH0ewPaLirmRRX0lynxtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.211.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8c:83:9a:c6:07:8a:45:14:b4:f4:c7:f4:b0:3d:eb:d8:f4:
14:e4:fc:bf:e6:cd:4f:5e:93:4d:b3:26:17:21:05:50:6e:d9:
f6:9a:35:94:c4:5b:d2:5e:ad:8b:4d:4e:15:7f:19:f0:b5:cc:
ac:cd:46:67:1e:1a:04:b3:c8:e3:ef:48:c8:49:a3:ef:56:3b:
a5:22:a4:37:0b:59:38:04:18:be:48:94:bb:79:be:9f:46:0f:
70:42:08:8b:0b:d6:53:89:24:47:a8:80:1f:48:50:95:60:d0:
58:70:c1:4d:58:8b:f0:58:e5:9d:06:dc:60:62:09:bb:37:b0:
e9:82:06:f6:a9:e2:0e:55:b6:1b:02:3a:b9:90:a3:9c:db:24:
5d:55:b1:62:f0:e0:8b:a7:cd:8b:e4:f5:b9:7e:74:7e:f4:b3:
d7:52:65:d4:20:23:2c:f1:46:1b:24:d1:1c:fb:de:a3:2d:ec:
ee:5b:29:3c:95:8a:58:39:c3:a1:8a:19:92:3c:59:2c:f9:3e:
fc:0f:55:3a:28:e1:86:96:e4:f1:0f:ab:0d:e6:78:81:ed:38:
a7:18:87:bb:10:8f:27:2a:f0:36:df:b3:38:82:14:75:4a:1e:
c0:8e:59:00:93:58:2c:01:87:60:64:82:6c:fe:3a:1f:58:81:
25:8b:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:01:27 2026 by rpki-client