Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/MBJ1TmxMlUADfhppw87AtlF4BAw.roa
File: MBJ1TmxMlUADfhppw87AtlF4BAw.roa (raw, json)
Hash identifier: WEd1zzNA+pNvlt4cAOAWiu/zRr1ny+nFIdymaQ/OK8Y=
Subject key identifier: 30:12:75:4E:6C:4C:95:40:03:7E:1A:69:C3:CE:C0:B6:51:78:04:0C
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A061D986A899F41A95B22B75E0AF7B9745
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/MBJ1TmxMlUADfhppw87AtlF4BAw.roa
Signing time: Wed 02 Sep 2026 11:20:40 +0000
ROA not before: Wed 02 Sep 2026 11:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218949
IP address blocks: 85.133.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:d9:86:a8:99:f4:1a:95:b2:2b:75:e0:af:7b:97:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 2 11:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3012754e6c4c9540037e1a69c3cec0b65178040c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:a7:72:4d:0d:73:c1:2e:63:50:1d:db:dc:
66:f3:73:03:e5:76:66:ed:5b:9a:99:1d:db:97:cd:
22:a4:96:2b:8f:3d:42:0a:41:d1:0e:e5:d4:e4:a8:
37:ed:1b:55:0b:5a:05:f6:69:c6:5a:a3:66:c8:f5:
e9:61:d3:f7:6b:35:e3:ec:d0:13:d4:5c:31:f1:b4:
da:ac:4b:b3:20:5b:99:39:e3:3b:57:6f:54:1b:4b:
9b:79:89:f9:7a:bd:3a:75:54:7a:f9:36:1e:1d:45:
ec:67:86:61:aa:5b:88:9e:30:59:f7:7b:4a:34:66:
c6:6d:1d:b9:00:2d:3e:94:4d:44:19:30:56:c1:50:
68:d7:7b:da:d0:26:91:05:0e:e7:9d:93:4b:0c:28:
b0:ce:a2:02:65:4a:3f:41:5d:70:3b:39:f6:48:86:
2c:b6:5e:b8:5e:c7:9f:fc:d0:14:7c:68:d2:66:53:
e4:c4:77:c4:9e:74:71:04:1d:43:0c:24:27:38:66:
00:55:13:8d:6e:6e:2d:53:e6:31:1b:cb:45:e3:6a:
b3:8f:3f:d3:2a:a9:bb:35:34:41:a3:49:ed:68:ac:
15:de:9a:b8:11:ed:5b:4a:98:a7:cd:0e:22:f4:31:
5d:ab:4f:5e:89:95:4b:23:7a:d4:ed:42:85:11:10:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:75:4E:6C:4C:95:40:03:7E:1A:69:C3:CE:C0:B6:51:78:04:0C
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/MBJ1TmxMlUADfhppw87AtlF4BAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:6a:ce:62:b8:bd:71:e9:b8:ce:0c:4b:ec:74:9a:e4:e9:45:
fc:31:1d:eb:c5:8b:be:4b:4e:a7:52:5a:91:c4:13:b1:c1:ef:
d7:39:4c:93:b2:6c:89:bc:12:52:34:8e:21:2f:4c:87:ff:a4:
51:75:24:6f:c5:5a:b5:46:d9:43:03:68:b4:df:8e:a3:96:c5:
b9:77:fb:2b:ef:63:28:3f:03:22:57:99:80:ed:cb:b3:9f:a1:
e9:ce:8f:e6:d8:2e:0b:3c:4c:bd:88:ef:40:70:75:16:fc:a2:
c8:45:a9:28:3f:64:2b:fd:05:a0:63:86:f6:d8:1c:4b:0b:b1:
2c:e3:43:7c:9d:4a:03:6a:88:69:63:97:77:13:36:aa:a8:19:
fe:01:3b:2a:e0:ff:b5:aa:c7:91:6c:8d:e2:72:30:bd:b4:b4:
db:4d:37:37:9f:b7:7d:aa:d7:66:45:b0:09:4c:61:c8:6d:af:
e7:dd:a4:f3:f1:f5:46:f2:bb:df:cf:88:ea:6d:3b:85:b2:8c:
48:51:a4:b9:2e:5d:db:cc:54:f5:af:c3:86:f6:ef:60:7a:c0:
38:7f:84:0d:75:f3:1b:27:4f:45:08:90:d8:3e:1d:3f:86:2d:
80:e5:73:48:5d:61:d6:00:db:25:9b:a9:9a:5f:64:03:20:e9:
da:95:8b:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBh2YaomfQalbIrdeCve5dFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYwOTAyMTEyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDEyNzU0ZTZjNGM5NTQwMDM3ZTFhNjljM2NlYzBiNjUxNzgwNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0+nck0Nc8EuY1Ad29xm83MD5XZm
7VuamR3bl80ipJYrjz1CCkHRDuXU5Kg37RtVC1oF9mnGWqNmyPXpYdP3azXj7NAT
1Fwx8bTarEuzIFuZOeM7V29UG0ubeYn5er06dVR6+TYeHUXsZ4ZhqluInjBZ93tK
NGbGbR25AC0+lE1EGTBWwVBo13va0CaRBQ7nnZNLDCiwzqICZUo/QV1wOzn2SIYs
tl64Xsef/NAUfGjSZlPkxHfEnnRxBB1DDCQnOGYAVRONbm4tU+YxG8tF42qzjz/T
Kqm7NTRBo0ntaKwV3pq4Ee1bSpinzQ4i9DFdq09eiZVLI3rU7UKFERC/YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDASdU5sTJVAA34aacPOwLZReAQMMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvTUJKMVRteE1sVUFEZmhwcHc4N0F0bEY0QkF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXEMA0G
CSqGSIb3DQEBCwUAA4IBAQA+as5iuL1x6bjODEvsdJrk6UX8MR3rxYu+S06nUlqR
xBOxwe/XOUyTsmyJvBJSNI4hL0yH/6RRdSRvxVq1RtlDA2i0346jlsW5d/sr72Mo
PwMiV5mA7cuzn6Hpzo/m2C4LPEy9iO9AcHUW/KLIRakoP2Qr/QWgY4b22BxLC7Es
40N8nUoDaohpY5d3EzaqqBn+ATsq4P+1qseRbI3icjC9tLTbTTc3n7d9qtdmRbAJ
TGHIba/n3aTz8fVG8rvfz4jqbTuFsoxIUaS5Ll3bzFT1r8OG9u9gesA4f4QNdfMb
J09FCJDYPh0/hi2A5XNIXWHWANslm6maX2QDIOnalYto
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:32 2026 by rpki-client