Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/4ylsIMEDIPtWwFh385Ofyk1OHBs.roa
File: 4ylsIMEDIPtWwFh385Ofyk1OHBs.roa (raw, json)
Hash identifier: hDlNtnY/PTFExGDCBEFAqm5Ru+NAscd+2QjC4sfe/s0=
Subject key identifier: E3:29:6C:20:C1:03:20:FB:56:C0:58:77:F3:93:9F:CA:4D:4E:1C:1B
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A124787025B91327322CF027E7F91E8C27
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/4ylsIMEDIPtWwFh385Ofyk1OHBs.roa
Signing time: Sat 10 Oct 2026 06:20:35 +0000
ROA not before: Sat 10 Oct 2026 06:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 85.133.199.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
2a04:87c0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:78:70:25:b9:13:27:32:2c:f0:27:e7:f9:1e:8c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 10 06:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3296c20c10320fb56c05877f3939fca4d4e1c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:47:08:e3:00:ca:aa:34:c2:94:66:b7:ea:
b4:ff:ab:a4:f7:ab:4d:a7:b5:9f:db:a7:1d:9f:dd:
37:3e:73:b2:2d:2b:91:2e:04:c4:57:ad:7f:f2:0a:
d1:d0:44:53:8a:a6:a9:0d:e5:97:a6:53:35:55:d3:
e1:b8:59:5e:ca:9d:84:22:53:c5:44:05:42:20:0d:
d1:cf:b6:85:0e:b1:35:9a:57:bb:37:d6:bf:ed:dc:
e6:c1:c8:b5:24:36:bf:44:ea:6b:2c:bc:14:d0:db:
75:6a:b2:d6:18:5d:b5:4f:e5:3a:3a:5f:c7:d7:d7:
ed:d0:37:01:1e:3d:23:30:ed:97:cb:94:5f:43:34:
ae:65:88:bb:88:08:fc:1a:75:84:d8:6d:5c:ff:25:
8f:88:df:15:b0:17:66:0c:a6:53:0a:e2:dd:6f:f0:
9c:38:6d:37:07:38:a1:00:11:a2:a9:1b:71:f9:de:
d5:eb:cf:76:2a:ce:0e:da:fb:31:0c:ea:80:88:58:
ab:9e:28:c5:c8:87:28:8f:d2:a1:d2:87:46:55:c4:
2f:dc:ae:ac:93:1b:6d:fe:6a:f1:54:66:a6:32:4f:
25:8d:4a:90:b9:62:38:77:7b:5c:67:2d:dd:65:a0:
86:6d:0a:37:55:13:02:77:6b:e6:e4:35:a2:96:51:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:29:6C:20:C1:03:20:FB:56:C0:58:77:F3:93:9F:CA:4D:4E:1C:1B
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/4ylsIMEDIPtWwFh385Ofyk1OHBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
85.133.203.0/24
85.133.214.0/24
85.133.216.0/24
85.133.219.0/24
85.133.227.0-85.133.228.255
85.133.234.0/24
85.133.237.0-85.133.238.255
85.133.240.0/24
85.133.247.0/24
IPv6:
2a04:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:21:4d:f5:a4:4d:e7:0f:0d:e8:12:76:22:38:b0:ce:5f:9a:
4c:f4:7a:03:c0:82:8e:45:7b:80:ae:66:d3:13:5f:9c:8a:e0:
68:ae:d8:7a:6b:d0:84:38:2d:05:4f:37:f4:94:55:48:b2:34:
30:29:9c:09:c6:7f:e6:69:df:bc:b4:f6:9f:85:0f:6d:d6:ff:
57:e4:dc:95:5b:bf:8f:01:f2:c3:0a:03:0d:a8:96:42:5a:ad:
84:f2:58:ff:14:9d:f0:a5:b8:8b:49:f5:36:6c:ac:40:8d:e3:
6f:af:1d:1c:bb:53:35:8f:c6:1c:c8:41:4a:5c:5e:61:40:29:
5c:fc:af:31:18:56:1c:3e:38:9b:97:ad:5c:a2:8b:4a:7f:b7:
30:3e:56:c7:6d:a7:8d:d1:06:0f:e2:26:1a:19:fa:4b:e9:e4:
d1:1e:42:88:7d:8f:ed:3e:e9:af:90:69:cc:fb:04:72:84:32:
8b:7a:a2:74:66:0a:37:89:a6:3d:0a:60:81:fe:6e:6e:2c:05:
eb:12:a8:9c:0d:a2:c1:46:f0:1e:39:79:b5:18:bf:19:36:53:
63:fe:3a:f0:b2:2e:e4:e0:96:d1:cc:cb:b8:63:46:38:e7:1a:
ac:f9:53:76:aa:ec:ea:38:54:18:13:dc:ea:d6:77:61:36:ed:
41:a6:fb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:37 2026 by rpki-client