Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/55eIFFqzRSZ0Ed0V0C_-_6jQXsg.roa
File: 55eIFFqzRSZ0Ed0V0C_-_6jQXsg.roa (raw, json)
Hash identifier: ViIQrtNN0920kOEd8f18k1JuVb5CLpsQkSnuVh4z8UQ=
Subject key identifier: E7:97:88:14:5A:B3:45:26:74:11:DD:15:D0:2F:FE:FF:A8:D0:5E:C8
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A177CF6E3648B0158AD2231E331F87EAE2
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/55eIFFqzRSZ0Ed0V0C_-_6jQXsg.roa
Signing time: Mon 26 Oct 2026 10:44:05 +0000
ROA not before: Mon 26 Oct 2026 10:44:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
2a04:87c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:cf:6e:36:48:b0:15:8a:d2:23:1e:33:1f:87:ea:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 26 10:44:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e79788145ab345267411dd15d02ffeffa8d05ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:66:dc:32:fc:56:65:f9:19:69:61:2f:50:
73:8c:b4:21:d9:89:0f:10:85:87:ed:21:bb:7f:c3:
94:c8:41:b0:30:b3:ad:2d:48:1d:83:f1:dc:93:c5:
d2:54:48:f8:9e:f4:fb:b5:4d:35:c5:0e:b0:e2:de:
2c:f3:3f:ab:2c:9d:d4:cb:62:30:3e:ba:c1:27:b8:
a6:75:6d:e4:d5:53:42:79:71:9c:d0:03:f7:5c:d0:
c1:0d:98:ca:d2:0a:8c:77:82:0c:ba:21:ae:68:c0:
74:30:75:13:10:83:9a:81:72:be:7a:89:15:ac:2b:
3b:fa:62:f1:49:11:98:47:4e:10:5e:5c:d5:4f:e2:
78:a9:b8:21:27:93:6c:b6:69:e1:56:88:29:60:5b:
34:59:6c:99:33:83:7c:e0:af:5c:16:24:f4:dc:75:
ab:2c:a5:d0:f4:aa:89:62:cb:bf:3e:30:b6:44:39:
1c:37:d7:c2:88:85:a7:e6:51:fc:ec:a7:04:c5:24:
e3:58:21:fc:bf:90:f1:6c:b9:64:c5:93:68:01:5e:
79:9b:c7:43:bd:44:97:ac:48:3a:40:07:1a:d3:7a:
e4:da:1d:5d:2f:f7:c6:39:e8:2e:ab:71:f2:e9:4f:
ec:cb:29:b9:0f:00:20:73:5c:1c:3c:33:32:0b:c4:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:97:88:14:5A:B3:45:26:74:11:DD:15:D0:2F:FE:FF:A8:D0:5E:C8
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/55eIFFqzRSZ0Ed0V0C_-_6jQXsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.139.255
85.133.141.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.207.0/24
85.133.209.0-85.133.213.255
85.133.215.0/24
85.133.218.0/24
85.133.222.0/23
85.133.231.0-85.133.232.255
85.133.235.0/24
85.133.251.0-85.133.252.255
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:f3:44:41:f1:a1:5c:38:ed:9d:f6:68:43:df:44:de:9a:a7:
d9:9c:59:42:4b:27:86:62:3e:f0:a5:3e:2a:4d:59:09:1e:03:
e4:b0:49:55:4f:b1:e3:6a:2e:5f:db:f0:95:af:97:37:34:f3:
7a:88:4b:d1:af:b6:6c:16:17:89:72:1f:2d:9f:bb:c5:27:5b:
8c:b9:60:75:d1:f2:95:55:e2:7e:11:08:25:c6:46:11:79:38:
ed:fa:e5:fd:33:f1:20:b2:b0:58:45:f3:d9:4e:08:e0:e9:0a:
f5:71:4d:20:65:63:41:4c:a2:d8:f4:6d:b5:84:a0:93:93:95:
69:c0:dd:f1:ef:a9:23:c0:19:cc:1d:8d:b1:41:27:92:b7:c0:
44:c8:d2:ad:1e:17:bc:a1:55:45:ca:48:69:3b:6b:9c:4d:76:
c8:b6:6c:de:19:cb:20:4f:9e:00:53:e7:3f:e3:44:ad:78:0f:
b2:6b:8e:73:2b:64:03:2c:05:64:60:1b:19:00:d7:fe:88:1f:
03:10:37:90:71:23:07:75:b1:1a:36:9f:80:af:8b:91:f5:82:
a9:b5:1b:48:43:27:98:cb:96:59:a9:ce:15:c5:18:25:36:bf:
f6:cc:47:61:84:15:45:f3:1c:d3:cd:b6:e3:57:e4:87:c6:12:
d3:dd:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:19:45 2026 by rpki-client