Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/47CsFOJriBbo1mq0-ajVp1jYEUI.roa
File: 47CsFOJriBbo1mq0-ajVp1jYEUI.roa (raw, json)
Hash identifier: aGrtYJNVgjYu/HsVE+4iU/oLDMmucqYc8rXRFsYsUHc=
Subject key identifier: E3:B0:AC:14:E2:6B:88:16:E8:D6:6A:B4:F9:A8:D5:A7:58:D8:11:42
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F5022C4CED1ECFF80BBADB282F9DC4739
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/47CsFOJriBbo1mq0-ajVp1jYEUI.roa
Signing time: Sat 11 Jul 2026 07:44:43 +0000
ROA not before: Sat 11 Jul 2026 07:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201194
IP address blocks: 85.133.200.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:22:c4:ce:d1:ec:ff:80:bb:ad:b2:82:f9:dc:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 11 07:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3b0ac14e26b8816e8d66ab4f9a8d5a758d81142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:94:82:42:2d:61:fe:7c:cb:19:04:c2:e1:
da:c2:05:bc:af:de:6b:7b:6b:63:92:64:b2:b2:64:
f4:1e:31:71:44:b7:d5:49:a4:9e:e2:ea:c3:1d:7c:
9c:cc:1d:fb:76:28:67:84:02:f1:4f:3e:fa:98:dd:
a0:5a:6b:e2:6e:d7:8f:85:b8:52:e7:54:d3:7e:88:
dc:eb:11:9e:71:d4:35:8c:5b:9f:6b:c8:d5:8a:60:
47:b6:bb:47:cf:d0:5f:e3:b8:2e:04:2f:ea:2e:13:
1c:f5:39:59:a8:17:88:e3:3c:6b:c1:86:79:61:91:
f4:14:7e:d3:18:56:cd:a6:83:11:77:e9:33:69:a0:
b0:e6:5d:f5:68:0b:90:89:ff:2e:a4:66:9d:f9:e6:
d1:10:08:0f:17:3a:2e:9a:cf:88:43:31:3e:3e:53:
23:f9:c1:6f:3f:d4:40:09:b7:c7:35:3f:47:48:3c:
4a:d2:2b:41:01:5d:09:b0:a8:3a:ea:f6:59:0b:7a:
6a:9e:a7:cb:bc:b1:4e:ca:9c:79:5c:74:a1:4f:d9:
26:c4:cc:66:f5:c8:53:15:0f:10:dc:07:46:0f:a8:
68:66:15:ad:f2:7b:ea:54:1a:a7:62:50:2f:be:c9:
69:ed:a7:ae:f3:d9:53:6b:da:8b:65:ab:3d:e9:6a:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B0:AC:14:E2:6B:88:16:E8:D6:6A:B4:F9:A8:D5:A7:58:D8:11:42
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/47CsFOJriBbo1mq0-ajVp1jYEUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.200.0/24
85.133.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:63:58:a3:15:7d:0c:d4:dd:e3:55:a9:75:9a:ec:fa:0d:34:
ed:f2:27:17:65:be:9a:2a:6c:fb:56:e8:3c:80:5c:0a:65:c2:
54:e5:64:f6:ae:22:99:02:0a:db:65:70:82:0f:3e:ff:4f:82:
f7:f1:ad:ae:74:e2:43:10:47:c4:3d:44:57:d7:c1:f5:01:6b:
55:f5:36:cf:39:9a:5e:42:1a:04:28:3f:09:47:80:6d:b9:3b:
18:f9:b8:90:91:8c:2d:e7:71:8b:5e:6d:f5:ff:72:cd:74:bc:
f7:15:2b:16:67:ab:da:7d:0f:0c:67:1e:cd:22:45:12:e4:91:
ae:3f:64:fa:0e:93:2d:76:25:dd:51:dd:62:3e:7d:9d:f6:1e:
45:51:86:3e:46:f5:60:76:a4:56:22:8d:91:d6:54:15:d5:82:
9a:5e:97:6c:92:fb:9b:e9:8d:75:c0:23:be:56:84:b0:8d:b7:
ed:ca:2e:33:9c:6a:10:d2:de:7e:b2:cc:9f:2b:90:29:81:4b:
85:7d:d7:6b:d1:0a:99:d7:97:3c:9d:89:f0:89:da:bf:cf:b1:
53:02:35:2a:34:33:80:bc:8c:bb:a2:56:b8:cf:79:36:3e:da:
d5:c3:ec:be:5d:ad:39:ea:8f:d9:00:60:9d:67:dc:f8:f5:49:
d3:7e:da:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9QIsTO0ez/gLutsoL53Ec5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYwNzExMDc0NDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2IwYWMxNGUyNmI4ODE2ZThkNjZhYjRmOWE4ZDVhNzU4ZDgxMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKSUgkItYf58yxkEwuHawgW8r95r
e2tjkmSysmT0HjFxRLfVSaSe4urDHXyczB37dihnhALxTz76mN2gWmvibtePhbhS
51TTfojc6xGecdQ1jFufa8jVimBHtrtHz9Bf47guBC/qLhMc9TlZqBeI4zxrwYZ5
YZH0FH7TGFbNpoMRd+kzaaCw5l31aAuQif8upGad+ebREAgPFzoums+IQzE+PlMj
+cFvP9RACbfHNT9HSDxK0itBAV0JsKg66vZZC3pqnqfLvLFOypx5XHShT9kmxMxm
9chTFQ8Q3AdGD6hoZhWt8nvqVBqnYlAvvslp7aeu89lTa9qLZas96Wo36QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOOwrBTia4gW6NZqtPmo1adY2BFCMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvNDdDc0ZPSnJpQmJvMW1xMC1halZwMWpZRVVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYXIAwQA
VYX1MA0GCSqGSIb3DQEBCwUAA4IBAQC4Y1ijFX0M1N3jVal1muz6DTTt8icXZb6a
Kmz7Vug8gFwKZcJU5WT2riKZAgrbZXCCDz7/T4L38a2udOJDEEfEPURX18H1AWtV
9TbPOZpeQhoEKD8JR4BtuTsY+biQkYwt53GLXm31/3LNdLz3FSsWZ6vafQ8MZx7N
IkUS5JGuP2T6DpMtdiXdUd1iPn2d9h5FUYY+RvVgdqRWIo2R1lQV1YKaXpdskvub
6Y11wCO+VoSwjbftyi4znGoQ0t5+ssyfK5ApgUuFfddr0QqZ15c8nYnwidq/z7FT
AjUqNDOAvIy7ola4z3k2PtrVw+y+Xa056o/ZAGCdZ9z49UnTftrv
-----END CERTIFICATE-----
Generated at Sat Jul 18 10:23:32 2026 by rpki-client