Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1DEY2MhWiVYKy3UrfKc-S8LBVwg.roa
File: 1DEY2MhWiVYKy3UrfKc-S8LBVwg.roa (raw, json)
Hash identifier: rDfa0UnfWvaw/u26D87Y7/9PFONL67aavbL9G/vSMYE=
Subject key identifier: D4:31:18:D8:C8:56:89:56:0A:CB:75:2B:7C:A7:3E:4B:C2:C1:57:08
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A018EAFB18C68BCFF15EA0A5B30FCD568A
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1DEY2MhWiVYKy3UrfKc-S8LBVwg.roa
Signing time: Wed 19 Aug 2026 07:27:27 +0000
ROA not before: Wed 19 Aug 2026 07:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212077
IP address blocks: 85.133.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:ea:fb:18:c6:8b:cf:f1:5e:a0:a5:b3:0f:cd:56:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 19 07:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d43118d8c85689560acb752b7ca73e4bc2c15708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:74:9a:73:c1:bd:b6:c8:be:62:92:ea:59:
67:f7:9e:c0:26:8c:30:94:34:15:5e:a4:97:8d:93:
08:2e:3d:24:66:d6:9a:09:4f:37:3f:e4:36:cd:6f:
ca:54:ba:96:23:ff:82:6c:f6:6c:47:66:1a:62:be:
aa:ae:d2:cf:9d:c4:4b:e5:f3:02:a0:de:f6:0a:84:
1d:e6:23:64:c0:19:b7:e9:5d:1c:b1:19:1f:98:39:
17:b4:60:46:4b:48:1f:bb:6f:94:1d:e8:d4:f3:9d:
ca:bd:33:57:7a:88:c2:ad:15:fa:2a:ba:37:52:5c:
73:2b:14:98:fe:9f:74:8d:d3:5c:20:72:8c:84:4a:
2c:0d:46:37:97:fb:18:f8:b5:79:b5:00:53:96:ae:
44:a0:cf:86:a4:1c:f8:dc:e5:e4:93:6c:9d:7f:a4:
07:67:a0:6b:e9:b7:8c:18:b7:66:38:dd:df:1e:fc:
67:35:ee:33:85:7e:29:01:be:d7:da:54:1a:be:93:
15:99:76:82:5a:81:f9:ca:4b:be:1c:f4:a9:5d:b6:
c1:5b:0d:50:11:bf:7a:99:4e:df:bc:f1:89:44:59:
f5:ec:ee:fa:2a:54:af:71:45:78:c5:a3:69:72:c0:
84:5c:02:f3:0e:fa:f4:25:46:0d:1e:60:ff:6a:68:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:18:D8:C8:56:89:56:0A:CB:75:2B:7C:A7:3E:4B:C2:C1:57:08
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1DEY2MhWiVYKy3UrfKc-S8LBVwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.226.0/24
Signature Algorithm: sha256WithRSAEncryption
68:06:24:23:e7:41:dd:93:95:78:57:40:cb:30:5e:03:90:5a:
69:2e:63:59:0d:53:37:47:23:50:2d:af:a3:4b:62:b9:14:64:
5f:bd:33:e1:29:f1:19:71:b2:9e:da:e7:2b:0f:e2:7c:1f:5f:
bf:a6:c6:fc:c1:c4:30:88:ac:0c:dd:95:58:cd:43:c2:5e:f5:
4c:c9:52:7d:46:13:32:60:c2:98:0b:68:f2:27:74:e0:c7:c4:
f4:11:8d:9e:65:79:64:f0:73:f3:af:3b:64:dc:88:a3:33:46:
de:a2:a8:6b:dd:7e:7d:26:fa:07:dc:6e:70:aa:05:6f:7b:39:
72:14:2a:63:a7:28:57:6b:bb:01:b8:e5:e2:6f:a3:02:8d:ba:
b3:1d:99:4d:9b:02:d2:db:29:7c:0c:ed:0d:35:63:fb:f1:60:
fa:e9:cb:14:55:c3:94:45:67:c5:b6:ba:58:d8:23:14:a6:fb:
3a:aa:f4:a9:bc:50:55:d2:57:4a:4f:04:cd:7e:91:a0:b1:26:
ca:60:6a:d1:7d:91:bd:e9:5c:05:0b:f3:be:50:09:48:e0:4e:
cc:a0:c8:59:80:e8:57:45:59:b3:31:e6:df:19:4a:4e:b8:31:
96:01:79:0b:91:5b:53:63:e9:68:4b:2b:df:b6:a3:6f:18:37:
bf:39:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:11:20 2026 by rpki-client