Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/KpxyohCywKCqC59cVbvb-hk2m1Q.roa
File: KpxyohCywKCqC59cVbvb-hk2m1Q.roa (raw, json)
Hash identifier: K6acNuE4Oq4jimpCfQM9xEqDM+cg6n/Y23YyHZF46Co=
Subject key identifier: 2A:9C:72:A2:10:B2:C0:A0:AA:0B:9F:5C:55:BB:DB:FA:19:36:9B:54
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019822A74B9DF1872EE02AD5217EC00E271C
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/KpxyohCywKCqC59cVbvb-hk2m1Q.roa
Signing time: Sat 19 Jul 2025 12:27:25 +0000
ROA not before: Sat 19 Jul 2025 12:27:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.218.0/23 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:22:a7:4b:9d:f1:87:2e:e0:2a:d5:21:7e:c0:0e:27:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 19 12:27:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a9c72a210b2c0a0aa0b9f5c55bbdbfa19369b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:0b:32:1e:3f:03:09:93:ac:aa:c7:db:f1:
bb:2d:06:70:83:3f:68:01:0b:d0:75:18:e3:c0:41:
ab:07:10:14:40:61:a4:ff:3c:21:35:c8:2c:cf:9b:
0d:1a:43:ee:20:15:5f:2c:7b:47:65:64:02:7b:3b:
b7:a3:e0:16:9e:f5:8b:c0:0b:6a:54:cb:61:e6:71:
b5:f2:7e:ea:29:fe:22:18:b1:ff:20:34:e7:b3:5c:
72:0e:1a:6d:76:67:6c:38:e5:63:60:eb:0a:1c:83:
a9:cd:5b:fb:97:f7:a1:1d:31:6a:80:bd:20:39:a1:
71:96:f0:4e:b7:08:cb:fb:14:df:eb:90:6e:16:5e:
3e:62:76:79:b9:62:d8:6b:66:b7:50:0e:26:bf:1f:
c9:a8:3f:54:97:9a:20:47:3b:a5:f3:82:67:e6:f8:
00:32:bb:fd:a0:30:c7:d2:4f:b3:22:ad:fb:3f:2f:
49:de:8d:43:c9:d7:71:81:9d:63:87:9c:60:42:0e:
4b:44:31:02:17:d0:f6:89:d2:4b:7c:37:60:fc:7a:
9f:3b:25:f8:9c:4f:a4:98:2c:09:a8:c3:70:1e:b6:
b8:ea:e7:6a:05:86:6e:80:8d:77:49:f6:b9:da:d0:
43:71:6b:67:41:5d:24:6d:6c:6d:b2:3e:0d:e6:f2:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:72:A2:10:B2:C0:A0:AA:0B:9F:5C:55:BB:DB:FA:19:36:9B:54
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/KpxyohCywKCqC59cVbvb-hk2m1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.207.0/24
85.133.209.0-85.133.213.255
85.133.215.0/24
85.133.218.0-85.133.220.255
85.133.222.0/23
85.133.226.0/24
85.133.229.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0/23
85.133.251.0/24
85.133.254.0/23
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
b0:50:60:d3:26:db:70:d2:c0:c3:1d:22:b4:5f:11:81:73:50:
00:90:6c:80:72:51:b3:f4:29:d2:14:11:c5:ed:fc:f8:30:05:
4b:f7:8b:fb:1e:41:6a:56:a7:b5:53:2a:d7:36:25:a6:fe:b0:
81:e6:f4:76:14:1c:68:a9:50:af:47:2c:6b:09:28:40:83:7b:
e7:0d:8f:11:2f:8e:0f:23:d1:65:90:5b:bc:dd:a1:d6:8d:58:
08:63:a8:b2:15:57:ca:18:25:6a:2f:51:47:13:fb:04:24:2d:
0c:e2:5d:dc:06:66:98:5a:0f:73:d4:2f:82:59:d5:5b:b5:32:
a6:d9:3b:91:17:df:87:00:26:6f:97:ee:a9:95:a0:fd:67:65:
1e:66:68:93:57:ba:39:65:8d:fe:a1:c5:58:9e:ba:07:2f:53:
8b:cf:fb:27:1e:48:f9:62:b5:e0:37:00:9b:67:44:2d:03:d5:
a8:f5:94:8b:ec:ac:e0:d4:4d:11:1d:2c:0d:21:1e:67:7f:d8:
c5:60:ba:c6:e2:f8:51:8d:ef:b9:41:29:b9:73:ff:ae:91:df:
ef:92:00:40:63:05:5b:2f:11:53:fc:f3:a6:de:47:4a:20:27:
cf:1f:0f:f6:36:e7:2a:2c:a0:c0:91:03:f7:7f:33:53:76:ef:
ab:88:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:37:06 2025 by rpki-client