Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/HFn_EDY_hlPJFPQgp-3TCTlQeh4.roa
File: HFn_EDY_hlPJFPQgp-3TCTlQeh4.roa (raw, json)
Hash identifier: weMQy1+xh3Q0a9zK/f9VTM+uOOaUGDDCjTvGVRrylTE=
Subject key identifier: 1C:59:FF:10:36:3F:86:53:C9:14:F4:20:A7:ED:D3:09:39:50:7A:1E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019FC684BCB808BFD5C456DE4723FD25E289
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/HFn_EDY_hlPJFPQgp-3TCTlQeh4.roa
Signing time: Mon 03 Aug 2026 07:26:55 +0000
ROA not before: Mon 03 Aug 2026 07:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215059
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:84:bc:b8:08:bf:d5:c4:56:de:47:23:fd:25:e2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 3 07:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c59ff10363f8653c914f420a7edd30939507a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:66:1e:e1:c3:83:0e:ee:6a:cb:07:c0:3c:
24:05:1a:9b:d6:cc:3e:3d:10:58:a3:8e:16:12:f5:
62:3a:74:25:b9:e9:c1:49:86:41:b1:f0:38:70:73:
c8:ab:e7:c6:50:e2:5a:4e:c9:6d:c5:ca:7e:f5:1b:
e4:01:6a:1a:e9:2b:d4:bd:1c:ac:6a:aa:3c:52:4e:
68:39:4b:cf:a5:a4:b5:7d:93:c2:99:17:ab:51:e5:
99:83:78:49:be:68:fa:35:57:c3:97:fa:0a:95:49:
45:71:2b:f5:09:c2:f8:0b:19:53:75:28:75:a6:8f:
ff:1e:81:d1:13:b7:f6:f5:49:29:7c:82:9f:df:cd:
c8:5a:1d:03:13:20:6d:68:6b:cf:54:d8:80:d7:8a:
37:2b:30:57:da:6a:3b:d8:64:d3:03:b7:2e:d0:34:
87:24:9a:e9:f0:d0:2a:fa:9b:cf:f8:5b:16:cd:df:
aa:29:99:18:36:a7:b0:c3:3b:1f:70:63:60:66:7b:
51:cc:be:54:ce:b5:8f:ef:b9:bb:1f:81:50:62:b5:
20:7c:ee:3b:b2:66:c7:c6:7b:58:8f:a8:05:00:35:
ac:6d:e0:a9:fd:e6:58:c0:74:50:6c:e5:a1:6e:78:
43:2e:f2:e9:db:4e:b0:53:5f:5a:75:1c:10:b3:84:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:59:FF:10:36:3F:86:53:C9:14:F4:20:A7:ED:D3:09:39:50:7A:1E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/HFn_EDY_hlPJFPQgp-3TCTlQeh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.194.0/24
85.133.201.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0f:28:0d:72:7a:f0:ae:4b:02:ef:f6:a9:d6:d9:4d:9d:92:
16:9b:9f:dd:42:d5:2a:14:cc:73:fc:1c:e6:10:c1:32:7a:25:
95:2f:0a:3a:84:b9:2d:cc:b3:9f:c0:bd:a8:66:90:be:1b:b3:
68:89:53:b1:2a:a9:bc:12:b8:f9:22:43:86:33:b2:b9:4d:09:
c2:5e:9a:74:97:5b:08:73:87:eb:8a:26:89:d9:e6:f9:53:f5:
bf:94:76:55:c8:9f:40:f9:c3:71:66:d3:70:84:da:c8:59:0e:
1f:bf:72:dd:8f:4a:d7:1d:0e:43:aa:c2:f1:35:c8:09:c1:99:
fd:be:22:e7:b4:f1:be:dc:3e:20:98:99:d4:cf:fc:e1:6d:a2:
a2:43:24:be:0a:fc:0f:94:5d:cc:e3:1f:6a:7a:2f:77:3e:41:
ec:67:16:4b:c3:d1:ca:9b:a3:8a:aa:13:de:10:97:62:a1:59:
fd:6e:ed:1b:c8:2a:cc:4f:95:b3:53:cc:49:3c:6a:98:4e:f5:
45:f6:be:57:41:23:c3:4e:59:1f:6a:44:0e:b4:11:ad:3c:c4:
3f:10:da:0d:28:a0:c2:96:4c:ed:fc:bc:7a:56:a4:23:51:55:
4d:0d:df:47:d1:43:48:27:9f:02:e9:f7:bb:51:52:10:b3:f9:
58:1a:9b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:31:05 2026 by rpki-client