Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1NVBkiK8MN4W_PnXz3aeA8aFAkM.roa
File: 1NVBkiK8MN4W_PnXz3aeA8aFAkM.roa (raw, json)
Hash identifier: 6zxdJskkxsqRpb8fRppryCGKLMHxOLaG/zgapohPrIY=
Subject key identifier: D4:D5:41:92:22:BC:30:DE:16:FC:F9:D7:CF:76:9E:03:C6:85:02:43
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019EABE943F51EDB4377E5367BC027F9F319
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1NVBkiK8MN4W_PnXz3aeA8aFAkM.roa
Signing time: Tue 09 Jun 2026 10:24:11 +0000
ROA not before: Tue 09 Jun 2026 10:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47216
IP address blocks: 85.133.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:e9:43:f5:1e:db:43:77:e5:36:7b:c0:27:f9:f3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 9 10:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4d5419222bc30de16fcf9d7cf769e03c6850243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:eb:26:5c:a0:ca:0c:14:c8:d9:c4:17:11:
23:cb:51:4a:9a:e6:6c:5b:97:13:5a:3c:d8:87:68:
52:01:2c:06:60:6d:7f:39:6f:1a:0f:36:bf:c7:f1:
e0:91:eb:01:aa:1e:ff:d3:64:5e:7b:9c:de:6a:18:
1d:30:ac:5d:cc:3a:6b:11:9d:98:e3:b5:61:35:43:
31:36:1c:96:fb:a8:7c:05:cf:25:49:05:f3:c5:bb:
f2:f6:f4:3c:d5:57:01:41:10:84:15:6c:dc:02:a9:
74:66:61:d8:0a:ea:6d:8c:99:01:7e:c8:b9:55:16:
82:23:57:06:4e:64:2a:eb:b1:d7:17:41:96:88:20:
fc:33:5c:bf:89:3b:71:48:90:a5:75:da:b0:66:88:
66:20:99:db:d5:69:7f:36:9d:48:38:f1:99:ea:88:
3f:c9:e1:df:10:39:17:cb:a6:87:77:15:54:ef:a0:
b0:c9:33:bc:74:48:2e:d4:77:e5:09:aa:e6:21:0e:
35:23:b7:9e:2e:28:fc:b6:29:ef:c4:7e:8d:58:14:
50:0c:33:fb:87:c9:bd:44:bc:de:9d:10:0c:26:4d:
15:20:c4:62:4a:b2:5f:08:e2:11:fe:d7:48:e4:df:
10:8f:2e:67:13:a3:8f:a6:34:ab:c9:1c:95:20:1e:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:41:92:22:BC:30:DE:16:FC:F9:D7:CF:76:9E:03:C6:85:02:43
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1NVBkiK8MN4W_PnXz3aeA8aFAkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.208.0/24
Signature Algorithm: sha256WithRSAEncryption
10:47:d1:86:11:f3:19:6f:be:95:24:c4:8d:66:99:7b:60:c9:
91:97:f7:58:c5:92:a6:33:f0:52:83:4e:61:4e:dd:05:7c:d0:
9d:49:f5:15:0b:e5:e6:c4:f6:5b:3e:61:02:a1:f8:5f:44:f9:
da:33:65:c5:16:b6:1f:37:90:7c:4a:3c:0c:b5:9f:4f:f9:5a:
0f:c2:00:d7:a1:78:95:81:09:9d:0f:30:3a:c4:96:89:c1:9e:
8a:aa:73:d7:a4:aa:a2:2e:2f:d6:0e:bb:15:ad:26:d9:57:76:
04:d4:22:67:16:39:63:4d:1e:d0:c6:9e:4f:16:4a:a4:6b:bb:
9e:09:4c:26:69:82:e9:33:d1:23:a1:42:3e:7e:8e:d7:69:08:
f0:7a:b6:06:fe:9c:28:81:bd:57:d8:f5:fe:c8:5a:b7:d6:65:
cb:0e:94:3b:85:6c:e6:d2:80:f7:f3:88:54:25:e3:0a:79:0d:
39:6f:2f:19:ce:85:a8:d0:16:40:d6:78:7b:c2:75:63:52:ab:
06:13:e2:09:88:fb:b1:39:15:a9:a6:27:41:93:b4:11:db:71:
91:1c:df:f6:1c:02:1d:22:68:e0:80:ae:b3:94:40:c8:7c:a8:
26:75:dc:d1:05:da:fc:5e:6f:93:1d:f8:d3:27:3f:40:9a:97:
bc:cc:53:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:31:02 2026 by rpki-client