Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/I5sUW94nv-LxzV80hMGX3qTQCs4.roa
File: I5sUW94nv-LxzV80hMGX3qTQCs4.roa (raw, json)
Hash identifier: uL5F8RVKhWM570kSM8rrD/tTcGTu5/K9W9VpY2ciAEQ=
Subject key identifier: 23:9B:14:5B:DE:27:BF:E2:F1:CD:5F:34:84:C1:97:DE:A4:D0:0A:CE
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01991E9C0056212D7267C6F012EC75A351D4
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/I5sUW94nv-LxzV80hMGX3qTQCs4.roa
Signing time: Sat 06 Sep 2025 10:39:24 +0000
ROA not before: Sat 06 Sep 2025 10:39:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215938
IP address blocks: 85.133.146.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:9c:00:56:21:2d:72:67:c6:f0:12:ec:75:a3:51:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 6 10:39:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239b145bde27bfe2f1cd5f3484c197dea4d00ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:dc:55:f2:9f:eb:f1:df:07:15:ac:84:c6:
7d:8c:aa:0a:3c:d9:9a:36:93:67:ae:be:0b:f9:b2:
e9:4d:5d:91:71:ec:9c:51:a7:6e:db:c1:7c:8a:15:
d7:02:ff:1b:45:f7:f1:c1:60:f8:8a:a7:93:b0:17:
63:2e:55:9c:65:ce:67:a8:ff:96:a5:65:2b:e2:78:
0c:2c:de:cd:cc:39:f0:b2:d9:b8:79:c1:62:30:4c:
6d:4d:17:8b:53:a4:ed:4b:83:59:6e:85:91:96:48:
c0:a9:34:fd:15:ba:64:f5:87:bb:d3:e4:7d:f4:3a:
9a:04:db:46:ef:e9:35:ba:4e:27:88:a0:51:8b:d3:
bd:09:5e:ed:5e:c9:5a:a6:97:64:56:29:9b:56:24:
3e:86:14:84:df:40:59:5e:9e:a4:b4:48:61:d6:77:
65:0a:60:bc:f8:4b:49:60:da:ea:35:4a:ad:6b:ef:
74:3c:3f:b6:d4:65:57:c6:88:c2:eb:98:90:eb:f5:
94:56:c8:c9:6d:1f:a1:5b:74:71:93:ef:de:a4:e9:
85:8e:8f:fa:cf:be:1d:3b:5e:e7:8c:d7:db:48:07:
b7:6b:95:7f:c0:2f:1e:10:7e:2e:96:05:cd:da:a6:
0a:15:8d:51:03:67:1c:d9:92:d9:04:b1:4c:b8:4e:
2f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9B:14:5B:DE:27:BF:E2:F1:CD:5F:34:84:C1:97:DE:A4:D0:0A:CE
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/I5sUW94nv-LxzV80hMGX3qTQCs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.146.0/24
85.133.153.0/24
85.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0e:69:2e:19:68:d8:90:0c:97:b0:d3:5f:04:e6:d2:0a:30:
26:b4:a9:53:02:38:a3:46:bb:3c:ce:b2:25:9d:be:a9:cc:98:
0b:d5:81:6a:f8:99:95:cc:9a:e2:49:ff:89:5f:d2:a7:27:f2:
ee:34:1c:28:38:4a:61:a1:dc:68:1a:4e:e6:75:d9:3d:24:3c:
2f:6e:09:7a:b4:5b:b2:b2:5a:b7:f3:54:6d:38:71:47:13:c6:
b8:99:af:b9:82:bf:e7:fc:12:7b:17:f5:a5:c0:b8:7d:16:18:
cc:90:5e:cb:72:ed:4f:65:77:a2:37:88:68:ef:c0:71:6c:b5:
bf:0c:6e:0e:4a:38:be:4a:e9:01:60:b3:55:77:63:2c:08:81:
a7:5e:1b:30:f5:b5:ba:37:88:89:00:ec:e6:8d:60:7f:68:48:
c3:83:43:42:64:05:7b:2e:5b:b1:c1:a2:f0:22:0b:98:b3:45:
86:f5:3f:da:15:9c:3f:91:b1:0e:2d:b5:ea:5c:de:60:86:ed:
9b:62:cc:65:35:e3:cf:1d:90:f8:10:db:82:88:dc:3e:8c:1b:
e7:68:69:8a:40:e3:c3:65:f7:73:15:e6:26:53:c5:79:b5:84:
ef:93:da:98:bf:ed:7c:66:cc:57:3a:95:84:49:2f:7e:42:e9:
77:3c:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:17:02 2025 by rpki-client