Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/mXHFh-ebHPX9x5bzfuMwZ7-rpH8.roa
File: mXHFh-ebHPX9x5bzfuMwZ7-rpH8.roa (raw, json)
Hash identifier: Z2WL4zHjQCEC6HRSGXQoO+lycAn013LlgjAlCDXu1nI=
Subject key identifier: 99:71:C5:87:E7:9B:1C:F5:FD:C7:96:F3:7E:E3:30:67:BF:AB:A4:7F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019808B88AF2AE87DEA21D47DD4654BA811D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/mXHFh-ebHPX9x5bzfuMwZ7-rpH8.roa
Signing time: Mon 14 Jul 2025 11:36:08 +0000
ROA not before: Mon 14 Jul 2025 11:36:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35372
IP address blocks: 85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:b8:8a:f2:ae:87:de:a2:1d:47:dd:46:54:ba:81:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 14 11:36:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9971c587e79b1cf5fdc796f37ee33067bfaba47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:61:7e:d3:cf:c1:26:ab:73:4d:07:98:3f:
4d:0f:68:36:23:a1:03:a3:16:2d:d4:b9:c6:23:28:
2b:27:b7:dd:94:28:a5:86:d4:bf:02:7a:02:8d:cc:
87:a1:9d:a3:e8:be:cd:8b:01:fb:46:41:d4:63:d3:
9b:11:20:07:eb:4c:0f:02:d6:96:1e:86:90:6e:20:
92:ac:26:27:05:8f:89:20:c8:a6:fb:c4:7e:e9:57:
77:e6:ea:20:ca:17:c1:d1:94:95:87:fd:5d:25:66:
21:f0:ab:4c:fe:39:97:bd:8f:f3:79:52:e4:bd:20:
66:ed:01:db:b2:1d:53:e0:18:c4:f9:ce:b1:50:b3:
62:13:c0:1d:9b:11:fb:2e:ce:3d:93:bf:ec:0e:3b:
b9:a6:b4:30:c0:2a:5e:e8:bb:94:f2:8a:30:66:89:
48:02:9f:e1:90:ab:73:6b:d3:34:15:ab:39:67:64:
5e:b2:d6:e7:ce:e2:48:de:dc:f9:63:cc:18:54:e9:
03:2b:d5:99:0f:fa:9f:3a:6c:8b:ca:c1:da:a6:73:
93:ba:2e:13:ae:e1:5f:1e:87:3e:77:f3:ab:5d:a5:
20:3c:14:65:5a:4c:2e:40:5b:22:61:e1:c1:04:f9:
2c:c6:5b:a1:37:ca:18:27:e1:f4:98:26:62:f5:07:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:C5:87:E7:9B:1C:F5:FD:C7:96:F3:7E:E3:30:67:BF:AB:A4:7F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/mXHFh-ebHPX9x5bzfuMwZ7-rpH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.218.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:d7:90:da:1a:db:4d:e2:b7:ea:fa:45:3b:19:76:3b:8b:ab:
9d:da:9b:dd:ca:97:43:1d:5c:9b:cd:61:76:69:ab:fc:de:d4:
48:b4:bb:27:d2:01:3e:5b:f0:99:2f:f7:75:e9:7d:03:4d:24:
28:e0:ab:2f:0d:03:b5:89:1e:f4:a5:77:6e:c1:94:9d:ec:70:
de:35:1a:e3:62:5d:22:fe:fa:58:35:76:99:c7:01:c7:c3:0e:
e5:67:0b:99:37:71:69:96:be:fc:c6:3e:a7:a7:f4:7b:b4:30:
f0:46:eb:25:60:c1:fa:9c:ad:45:1d:2d:a5:e5:94:cc:d1:82:
59:12:ad:9b:fd:da:26:c3:30:df:80:35:be:8e:ae:60:39:c5:
c7:f0:d3:99:70:b7:23:29:76:6e:0c:4f:85:45:d4:05:7b:45:
08:e0:98:25:5e:7b:e7:79:56:c1:61:a5:46:ef:76:f3:4e:ba:
d0:9a:ac:0c:b4:c3:13:49:89:b2:f4:f0:e9:71:df:15:c5:a9:
65:c2:b2:68:c8:ad:d3:78:30:34:13:ce:48:b2:de:a8:36:fd:
ab:bd:33:9e:95:07:82:c1:79:0a:9a:b2:a8:fe:b9:fa:eb:8f:
db:77:88:ed:f8:68:ae:5c:59:48:16:de:4e:55:c0:e2:5a:ae:
2c:22:4f:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgIuIryrofeoh1H3UZUuoEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwNzE0MTEzNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTcxYzU4N2U3OWIxY2Y1ZmRjNzk2ZjM3ZWUzMzA2N2JmYWJhNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN5hftPPwSarc00HmD9ND2g2I6ED
oxYt1LnGIygrJ7fdlCilhtS/AnoCjcyHoZ2j6L7NiwH7RkHUY9ObESAH60wPAtaW
HoaQbiCSrCYnBY+JIMim+8R+6Vd35uogyhfB0ZSVh/1dJWYh8KtM/jmXvY/zeVLk
vSBm7QHbsh1T4BjE+c6xULNiE8AdmxH7Ls49k7/sDju5prQwwCpe6LuU8oowZolI
Ap/hkKtza9M0Fas5Z2RestbnzuJI3tz5Y8wYVOkDK9WZD/qfOmyLysHapnOTui4T
ruFfHoc+d/OrXaUgPBRlWkwuQFsiYeHBBPksxluhN8oYJ+H0mCZi9QceEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlxxYfnmxz1/ceW837jMGe/q6R/MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvbVhIRmgtZWJIUFg5eDViemZ1TXdaNy1ycEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVYXaMA0G
CSqGSIb3DQEBCwUAA4IBAQC315DaGttN4rfq+kU7GXY7i6ud2pvdypdDHVybzWF2
aav83tRItLsn0gE+W/CZL/d16X0DTSQo4KsvDQO1iR70pXduwZSd7HDeNRrjYl0i
/vpYNXaZxwHHww7lZwuZN3Fplr78xj6np/R7tDDwRuslYMH6nK1FHS2l5ZTM0YJZ
Eq2b/domwzDfgDW+jq5gOcXH8NOZcLcjKXZuDE+FRdQFe0UI4JglXnvneVbBYaVG
73bzTrrQmqwMtMMTSYmy9PDpcd8VxallwrJoyK3TeDA0E85Ist6oNv2rvTOelQeC
wXkKmrKo/rn664/bd4jt+GiuXFlIFt5OVcDiWq4sIk+5
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:54 2025 by rpki-client