Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/GA1XHzWcpcUGoUmLR47BUH5ZcZc.roa
File: GA1XHzWcpcUGoUmLR47BUH5ZcZc.roa (raw, json)
Hash identifier: iAqD74qcYTcBb5sTTSkiYu2s1IkOFMHBUPbsfUe4F2c=
Subject key identifier: 18:0D:57:1F:35:9C:A5:C5:06:A1:49:8B:47:8E:C1:50:7E:59:71:97
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A070FEC69648C91ED9892D40F33892D5D7
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/GA1XHzWcpcUGoUmLR47BUH5ZcZc.roa
Signing time: Sat 05 Sep 2026 09:55:40 +0000
ROA not before: Sat 05 Sep 2026 09:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:fe:c6:96:48:c9:1e:d9:89:2d:40:f3:38:92:d5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 5 09:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=180d571f359ca5c506a1498b478ec1507e597197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:34:a4:cf:1e:d2:ae:1c:f2:e6:a0:bd:11:7b:
87:28:f2:5c:27:d7:64:b2:5c:25:07:a2:65:e8:63:
6b:6d:34:86:0b:c5:0c:e0:b9:4e:e0:73:63:18:27:
79:0e:65:c0:2c:6a:46:b3:0c:e4:e5:81:53:b5:15:
39:28:15:f2:fb:fd:db:4b:5a:c0:ac:d5:25:7e:1a:
20:49:56:0f:23:47:fd:90:79:61:1d:0b:65:c4:9c:
c1:46:91:36:a1:55:11:bf:3c:dd:ff:37:d2:54:62:
f9:81:b2:21:d2:ad:0e:af:f6:55:b1:a7:8b:0f:8d:
24:f1:89:39:ed:32:cc:dd:c0:eb:58:00:87:68:96:
c0:ec:bb:93:fb:fd:1e:e1:d4:ae:e4:25:f9:0d:c3:
be:f5:02:c9:2c:e4:84:00:c3:df:29:13:65:fe:9d:
e9:20:d1:ae:2e:60:fb:c8:15:0a:38:dc:83:ed:30:
66:38:b2:23:e0:fe:d0:29:c3:73:ea:71:f0:29:3d:
1c:6d:1f:6a:00:d0:4e:f7:54:b4:9c:ba:38:7e:73:
c6:22:4e:d8:f3:67:49:99:b6:39:56:c1:43:b9:1e:
e5:51:04:79:6f:dd:81:b1:37:cc:f8:cd:e9:61:45:
5a:4c:97:fa:23:55:2e:97:68:04:d7:31:52:ea:15:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:57:1F:35:9C:A5:C5:06:A1:49:8B:47:8E:C1:50:7E:59:71:97
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/GA1XHzWcpcUGoUmLR47BUH5ZcZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.194.0/24
85.133.201.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0c:2c:bf:a0:b4:5c:59:69:67:9b:0a:55:74:f5:fe:96:7e:
c9:90:75:18:1d:35:d2:07:e5:b7:69:d5:5b:60:1e:fd:a5:f2:
ca:ee:1b:a1:37:9e:7f:ca:e1:93:c5:4a:f6:f4:08:f1:38:69:
1c:e2:39:6c:08:0c:56:32:73:36:7f:40:09:56:6e:b4:eb:d1:
72:d8:bf:91:7f:9c:72:77:04:e5:7e:a7:d2:3d:a3:ec:a5:7e:
a0:55:d5:63:82:2b:df:ff:84:e4:80:23:44:68:ab:c5:59:10:
76:73:44:a4:dc:fe:cb:b7:47:36:ab:a3:73:f1:a0:68:bf:d4:
ff:7e:ee:b3:fb:b5:d9:79:28:d2:87:ae:83:c8:ab:71:ec:2f:
29:24:9b:0f:c0:f7:6b:db:f7:15:12:c1:3c:32:36:60:e8:cb:
6e:7c:2b:08:88:48:ae:21:dc:ac:16:69:d6:d0:5c:2f:ed:4b:
09:d3:58:18:6b:df:4d:7c:b8:b3:e9:9c:b6:f5:7b:10:e3:ef:
76:2a:e5:ba:67:f0:ee:5c:4d:19:82:33:39:a3:b1:ac:0f:16:
75:ff:7d:7b:ec:0f:ae:3c:63:56:87:e1:a3:68:37:d9:f6:54:
62:95:c7:b0:33:a7:73:87:d7:f3:90:44:65:5e:b9:30:3a:fc:
99:e3:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:29 2026 by rpki-client