Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/2MknCTAqPrL-JBVm-a7dCcSPR7A.roa
File: 2MknCTAqPrL-JBVm-a7dCcSPR7A.roa (raw, json)
Hash identifier: QgeWbSBTUKGBsvwbQgC/fRYVcUxNWpLiMOHrMsaO2LA=
Subject key identifier: D8:C9:27:09:30:2A:3E:B2:FE:24:15:66:F9:AE:DD:09:C4:8F:47:B0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01980D7B1CA2F47FEA23C923824B0B55D553
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/2MknCTAqPrL-JBVm-a7dCcSPR7A.roa
Signing time: Tue 15 Jul 2025 09:47:08 +0000
ROA not before: Tue 15 Jul 2025 09:47:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212077
IP address blocks: 85.133.200.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:7b:1c:a2:f4:7f:ea:23:c9:23:82:4b:0b:55:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 15 09:47:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8c92709302a3eb2fe241566f9aedd09c48f47b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:67:c4:88:a1:e1:9e:f0:e3:17:5c:43:14:
90:61:e4:67:46:92:2d:9d:22:c3:d4:8e:89:39:25:
94:d6:c7:2e:0e:26:3f:88:70:9a:c4:d9:27:6b:2a:
70:95:ac:d0:46:65:72:01:f9:04:97:68:07:a6:b7:
8e:56:47:51:8e:0e:0c:d8:91:24:82:2d:67:b3:f0:
c1:6f:52:f8:54:5f:56:9c:db:00:5e:86:33:a4:8c:
f8:f1:af:2e:fa:3c:df:6f:9e:50:bc:d2:e4:8a:d3:
59:61:09:98:f5:91:00:ca:21:95:7a:82:20:16:30:
41:81:08:ae:f0:3e:8b:aa:66:df:96:8e:8a:76:50:
78:5f:20:68:33:2e:75:a9:ba:ec:94:9a:68:f5:5c:
6a:cd:76:e6:41:9e:4a:52:98:49:d9:aa:11:ef:dd:
24:fd:a4:eb:6d:08:8e:d8:21:f2:64:56:df:e9:27:
14:f1:1f:c0:5a:ac:83:e1:14:5e:d6:4a:fd:74:07:
87:f8:2c:37:e6:d3:6a:a2:f1:e9:3d:b9:17:8d:af:
c1:12:af:bd:fa:67:5c:ec:3b:ef:35:47:ee:7c:73:
1b:35:f6:7d:68:7f:4f:66:be:ce:ef:70:8a:79:35:
3a:ac:d0:3d:f5:94:38:0c:6f:4b:fa:e0:2a:8c:2d:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C9:27:09:30:2A:3E:B2:FE:24:15:66:F9:AE:DD:09:C4:8F:47:B0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/2MknCTAqPrL-JBVm-a7dCcSPR7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.200.0/24
85.133.243.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b4:88:1b:15:6d:7a:3f:96:2f:bb:ef:54:de:c8:97:f2:b3:
c3:ad:86:b3:78:39:7d:e3:67:02:2c:a6:36:e8:3a:4a:12:47:
a7:86:5f:18:cf:4e:15:75:05:ed:d6:05:45:93:3f:74:6e:a1:
5a:d0:e9:1f:0e:77:09:39:0e:73:c1:d6:20:66:cd:03:ab:0c:
6f:51:c4:5b:3d:d4:ac:a0:d8:df:4e:a8:60:b8:d5:2a:e0:1e:
cb:96:7c:47:03:85:79:e1:06:2f:7b:e7:a2:f8:87:17:d3:11:
55:e3:9d:29:7f:bb:1a:df:74:b5:37:23:47:01:88:cb:8e:ea:
e7:86:35:f6:99:60:64:6c:5d:60:4f:c1:0d:50:5b:bc:8d:d0:
12:a2:b3:e9:b0:07:43:6c:db:78:00:04:87:64:f1:d7:4b:51:
0d:20:f3:02:83:a6:7a:f5:e9:1b:a1:28:38:90:c1:44:b9:35:
d8:91:d2:c0:9a:46:b3:d9:f4:a7:74:94:07:3c:52:bd:6b:c7:
64:d2:c7:71:28:9a:5a:00:24:d2:ef:90:01:4b:71:d6:f0:42:
ce:99:51:06:ae:42:92:30:4c:c1:c7:79:e7:88:db:b3:3a:c8:
9f:a3:eb:da:b6:08:91:06:6b:92:bb:53:c1:b9:c2:2a:40:f6:
84:5b:c5:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZgNexyi9H/qI8kjgksLVdVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwNzE1MDk0NzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGM5MjcwOTMwMmEzZWIyZmUyNDE1NjZmOWFlZGQwOWM0OGY0N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3hnxIih4Z7w4xdcQxSQYeRnRpIt
nSLD1I6JOSWU1scuDiY/iHCaxNknaypwlazQRmVyAfkEl2gHpreOVkdRjg4M2JEk
gi1ns/DBb1L4VF9WnNsAXoYzpIz48a8u+jzfb55QvNLkitNZYQmY9ZEAyiGVeoIg
FjBBgQiu8D6Lqmbflo6KdlB4XyBoMy51qbrslJpo9VxqzXbmQZ5KUphJ2aoR790k
/aTrbQiO2CHyZFbf6ScU8R/AWqyD4RRe1kr9dAeH+Cw35tNqovHpPbkXja/BEq+9
+mdc7DvvNUfufHMbNfZ9aH9PZr7O73CKeTU6rNA99ZQ4DG9L+uAqjC1npwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNjJJwkwKj6y/iQVZvmu3QnEj0ewMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvMk1rbkNUQXFQckwtSkJWbS1hN2RDY1NQUjdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYXIAwQA
VYXzMA0GCSqGSIb3DQEBCwUAA4IBAQAytIgbFW16P5Yvu+9U3siX8rPDrYazeDl9
42cCLKY26DpKEkenhl8Yz04VdQXt1gVFkz90bqFa0OkfDncJOQ5zwdYgZs0Dqwxv
UcRbPdSsoNjfTqhguNUq4B7LlnxHA4V54QYve+ei+IcX0xFV450pf7sa33S1NyNH
AYjLjurnhjX2mWBkbF1gT8ENUFu8jdASorPpsAdDbNt4AASHZPHXS1ENIPMCg6Z6
9ekboSg4kMFEuTXYkdLAmkaz2fSndJQHPFK9a8dk0sdxKJpaACTS75ABS3HW8ELO
mVEGrkKSMEzBx3nniNuzOsifo+vatgiRBmuSu1PBucIqQPaEW8Ux
-----END CERTIFICATE-----
Generated at Wed Jul 23 22:39:09 2025 by rpki-client