Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/39hNxNp-nuCqNksdTxKZgMGVxJE.roa
File: 39hNxNp-nuCqNksdTxKZgMGVxJE.roa (raw, json)
Hash identifier: zujIoYkl4Zo8pHqy7FDX7Ubdipm6/EZB9d5Au9zY7xk=
Subject key identifier: DF:D8:4D:C4:DA:7E:9E:E0:AA:36:4B:1D:4F:12:99:80:C1:95:C4:91
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A013B9A25F9907A3B77BFFD123B839FB48
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/39hNxNp-nuCqNksdTxKZgMGVxJE.roa
Signing time: Tue 18 Aug 2026 07:15:27 +0000
ROA not before: Tue 18 Aug 2026 07:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215938
IP address blocks: 85.133.153.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:b9:a2:5f:99:07:a3:b7:7b:ff:d1:23:b8:39:fb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 18 07:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfd84dc4da7e9ee0aa364b1d4f129980c195c491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:f5:63:72:1a:58:b6:94:ce:85:e6:21:19:
9d:7b:6d:b2:bd:4b:87:5c:7b:16:72:77:ef:8e:9b:
bc:1e:f3:44:ff:17:02:b1:92:d6:7d:1a:45:89:9a:
1a:cf:f4:7f:55:72:97:a2:fc:61:e4:f6:8b:f4:62:
5d:2e:04:1f:31:95:73:07:a3:3b:b2:ac:ff:24:f6:
03:dd:43:49:b9:e5:8f:92:f6:b3:49:07:bb:70:b8:
2f:b7:cf:3c:76:ab:1f:10:c6:e9:39:ca:85:10:62:
39:66:59:c0:3e:20:98:11:9e:5b:a8:4b:42:57:67:
89:bc:14:69:be:56:79:fc:76:9c:f5:07:9f:83:35:
05:6d:46:51:16:b7:2f:81:7f:2b:54:c6:df:03:e5:
47:06:31:6f:ac:b4:75:a0:1e:76:af:f4:44:8b:5f:
51:93:08:1a:c1:f4:08:e8:83:21:3e:1d:f9:3f:ca:
17:6b:03:3e:32:4a:a4:23:44:ee:64:f7:cf:13:d1:
63:0b:16:2f:db:05:28:44:3d:cb:11:e9:7b:dd:74:
9c:57:80:62:25:6a:11:e7:05:0c:d4:31:a7:a0:21:
42:a3:a8:98:00:cb:b3:0b:d9:3b:e7:f3:a4:ee:05:
4e:a9:8a:7c:cf:34:e4:37:97:38:90:c6:15:8d:0b:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D8:4D:C4:DA:7E:9E:E0:AA:36:4B:1D:4F:12:99:80:C1:95:C4:91
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/39hNxNp-nuCqNksdTxKZgMGVxJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.153.0/24
85.133.204.0/24
85.133.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fa:2f:1f:c0:b9:1c:28:0c:79:c5:ff:6e:ef:36:bd:60:42:
2d:6c:8e:02:ca:f8:8d:c2:54:71:a4:37:55:71:6d:bf:84:eb:
2c:52:ba:42:c3:9c:77:ff:da:b9:39:0c:45:7c:5d:76:49:8b:
c3:77:a6:66:08:cc:32:2d:cc:58:64:e9:5b:16:4f:97:ce:c0:
e2:2d:9e:d8:d6:8b:1b:6f:65:39:d8:ab:86:88:5b:2d:41:f8:
b2:9c:af:25:26:84:c3:61:86:a6:6f:76:e8:f8:35:a0:45:69:
8e:b0:5b:1f:40:c1:a1:ca:37:21:ea:04:c9:e9:88:fc:f8:40:
3a:5c:6c:d5:0d:e6:48:4e:52:17:ef:15:a5:1b:dd:72:02:a1:
ea:e5:55:42:29:37:94:2e:c1:fc:3c:57:2e:84:18:70:98:f4:
ba:2e:ea:62:e3:62:9a:67:65:9c:cf:86:69:64:4e:8d:88:32:
66:f2:3b:fb:fd:10:e8:4b:9b:23:cc:c1:ac:fa:38:28:43:e4:
bb:3c:cc:d5:aa:1d:f2:11:c3:ef:a8:bd:a6:5d:55:d9:85:f5:
a8:ff:18:2e:0b:d6:26:ed:d2:65:e0:53:d7:ef:93:b1:5b:ab:
15:35:bc:e2:e7:97:33:ef:12:2a:86:21:d0:14:28:64:9e:7b:
3b:06:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:51 2026 by rpki-client