Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EjKOdraDTaKieYdiprxZOcIHpvY.roa
File: EjKOdraDTaKieYdiprxZOcIHpvY.roa (raw, json)
Hash identifier: il1k0rGWMHWOFXc/R11WutK2lh6Rn9uzQPsS6zbqXDM=
Subject key identifier: 12:32:8E:76:B6:83:4D:A2:A2:79:87:62:A6:BC:59:39:C2:07:A6:F6
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019EB09E196C772274D6BFDE00408780F76B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EjKOdraDTaKieYdiprxZOcIHpvY.roa
Signing time: Wed 10 Jun 2026 08:20:11 +0000
ROA not before: Wed 10 Jun 2026 08:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.196.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:9e:19:6c:77:22:74:d6:bf:de:00:40:87:80:f7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 10 08:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12328e76b6834da2a2798762a6bc5939c207a6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:86:35:80:bf:c6:24:f4:0c:ab:26:9e:de:
87:8d:13:7b:79:3e:f2:df:da:74:95:33:7f:3a:07:
ca:3d:bf:12:a7:56:56:91:73:20:69:44:60:7d:90:
9c:c6:b1:44:2a:ef:a6:35:ea:05:90:f3:de:b2:8a:
90:cf:ee:82:ff:4d:27:60:0a:4b:02:51:00:1f:86:
d5:1f:a0:10:fd:d4:23:66:90:d8:92:93:cf:2d:70:
8b:ad:2b:a8:c7:9e:c3:e5:c4:12:65:38:21:2d:77:
49:8f:b0:ae:54:c7:80:f1:2b:ee:5d:a7:3e:90:7c:
47:27:9e:cb:4d:92:28:37:f7:93:f9:31:9d:aa:b6:
d5:8c:de:db:a9:93:14:aa:bc:99:b5:be:06:45:58:
58:a8:f5:38:c7:df:68:1f:4c:29:48:b0:2a:c3:71:
ff:ad:ba:e1:32:7a:16:82:5a:5e:f2:f7:fd:d4:e2:
16:b6:0d:cb:16:d0:2e:63:36:33:98:54:22:90:61:
56:58:6e:2f:c9:79:0e:14:64:dc:36:72:ba:43:16:
b4:12:8b:55:21:8c:6c:1f:b6:63:02:96:75:94:8c:
37:d1:2f:56:90:9a:e8:cd:33:13:a6:c7:95:57:34:
29:06:57:24:1d:35:d6:ea:bf:c3:2a:ac:05:28:4b:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:32:8E:76:B6:83:4D:A2:A2:79:87:62:A6:BC:59:39:C2:07:A6:F6
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EjKOdraDTaKieYdiprxZOcIHpvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.194.0/24
85.133.196.0/24
85.133.199.0/24
85.133.201.0/24
85.133.203.0/24
85.133.214.0/24
85.133.219.0/24
85.133.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b4:92:75:22:ea:b7:7e:c3:98:68:54:1a:f0:c2:dd:8f:0a:
ca:24:f9:17:a2:e8:16:9d:66:62:49:aa:fb:56:ab:9f:98:ef:
cb:f7:68:e4:78:fd:e4:3d:25:7f:f7:f6:2b:51:33:d8:ad:9c:
2a:17:3f:53:b5:9f:9a:ed:20:90:c3:a7:8b:85:84:d8:5b:52:
b4:e3:9a:57:8a:41:c3:ae:2e:f6:74:f6:89:50:94:9d:de:b8:
17:16:b3:60:4e:59:45:e8:2b:d7:f1:b5:bb:62:9e:52:7e:be:
5c:64:20:49:ec:59:bf:df:27:af:67:61:b1:5e:3a:55:99:09:
24:c9:f5:e7:f5:a2:a3:c2:c8:60:8d:41:41:3e:56:34:a1:b3:
b3:ce:d7:ab:68:bb:3f:03:58:4c:8f:1a:9c:09:29:4c:45:94:
23:33:fb:62:06:c9:c5:a2:0d:d3:e9:cf:0e:31:32:63:af:b1:
1f:2f:a0:83:74:f1:13:a9:c5:58:b7:ae:db:bb:86:3d:b6:9f:
3a:5b:15:9b:89:c6:0e:1d:1a:43:57:ff:62:13:5a:47:23:a1:
6d:80:02:94:98:54:32:0e:35:f7:c6:0a:f0:a2:49:4e:ed:c1:
da:18:51:c6:97:e3:eb:63:ca:51:c2:ec:af:cc:b0:67:ed:0a:
ee:ae:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:31:01 2026 by rpki-client