Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/NoyIt5Ok_IhzMIdU7opeTa1UBMU.roa
File: NoyIt5Ok_IhzMIdU7opeTa1UBMU.roa (raw, json)
Hash identifier: cRjhQ0CHkbmcUtkYDaQikzsK7Ui4wZcCM0HQp7saY2s=
Subject key identifier: 36:8C:88:B7:93:A4:FC:88:73:30:87:54:EE:8A:5E:4D:AD:54:04:C5
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A0145545A8A868BC7B995902CBB00B7995
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/NoyIt5Ok_IhzMIdU7opeTa1UBMU.roa
Signing time: Tue 18 Aug 2026 10:05:27 +0000
ROA not before: Tue 18 Aug 2026 10:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 85.133.196.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:55:45:a8:a8:68:bc:7b:99:59:02:cb:b0:0b:79:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 18 10:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=368c88b793a4fc8873308754ee8a5e4dad5404c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:20:bb:87:45:ee:dc:aa:9f:90:e8:6b:e2:
91:13:a1:aa:0f:32:73:50:be:0f:1e:04:ce:b0:cc:
a5:b2:08:d9:eb:ca:bf:1b:3c:81:11:53:7a:75:c7:
98:b6:5c:20:e8:61:6f:40:85:3f:14:df:ac:16:39:
97:76:8b:8c:9d:07:7d:72:71:3a:ea:5f:96:c5:3a:
b1:19:20:f9:73:2b:41:cf:d3:3f:1e:73:cd:14:70:
c8:6c:a3:da:12:5c:2e:84:7a:c6:5f:39:9e:6d:28:
c8:6e:31:1c:bd:e5:bd:03:3e:13:96:6f:6b:a9:f9:
70:e3:65:99:d2:4d:53:b9:e8:78:14:d2:0d:b7:b1:
b7:86:dc:cf:0b:c1:ed:75:31:06:5a:cd:8c:d0:09:
4c:00:35:a0:ce:4a:1f:1d:2d:f0:20:7f:a3:c2:16:
a3:35:74:68:f9:0d:29:ba:41:31:96:cf:8a:82:d5:
0c:05:54:d5:3b:c3:40:f8:b7:a4:df:55:f0:a7:04:
13:ff:f0:fd:77:fa:3b:32:fd:18:44:5b:2b:00:8e:
35:12:09:4d:dd:a1:8d:cd:2f:b5:59:ac:e8:73:00:
cb:2f:22:b7:80:09:7c:42:f3:ff:c9:fa:57:a1:38:
c7:d5:72:d9:86:2b:13:87:e4:ea:aa:ea:6f:30:10:
5f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8C:88:B7:93:A4:FC:88:73:30:87:54:EE:8A:5E:4D:AD:54:04:C5
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/NoyIt5Ok_IhzMIdU7opeTa1UBMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.196.0/24
85.133.199.0/24
85.133.203.0/24
85.133.214.0/24
85.133.217.0/24
85.133.219.0/24
85.133.228.0/24
85.133.234.0/24
85.133.236.0-85.133.238.255
Signature Algorithm: sha256WithRSAEncryption
41:ad:f2:bc:f6:f2:39:b3:57:a0:84:cb:89:ce:a4:41:51:bb:
67:eb:da:13:8b:22:9c:ab:69:d5:38:86:74:a7:95:e3:3a:b9:
1f:a9:d8:04:c3:60:33:d4:a5:08:54:36:2d:31:83:be:90:4d:
7d:9d:4d:3f:f0:91:93:fa:65:ff:fd:48:96:82:b4:e3:ea:f9:
2a:29:5a:8d:be:3a:e8:50:20:b1:d8:1a:2a:19:b4:34:24:d0:
15:15:ef:fc:64:a2:11:53:10:12:33:ae:fa:cb:24:6b:03:f7:
bf:57:71:b4:f4:d1:43:36:f1:bf:1a:50:69:70:5b:bf:ff:f6:
c2:a8:53:3a:47:72:d7:28:6d:7d:60:a6:0d:d9:e6:8b:2e:8d:
a7:8b:42:3c:81:f6:3d:b6:42:03:0b:d6:96:6a:e3:ee:94:69:
e6:5f:8f:96:5e:7f:1d:f7:8c:f4:6d:82:eb:44:8f:41:6a:55:
60:29:51:d2:18:66:54:11:6f:0d:eb:49:4f:46:bb:31:30:5b:
23:df:aa:99:c9:98:c6:38:d7:cc:06:24:2c:65:af:cc:d8:41:
5e:f9:2e:2a:5c:8a:2a:d3:a6:86:02:ee:74:e2:92:63:3f:f3:
9f:9c:0d:cc:25:a9:a1:d0:ed:95:8b:75:14:f2:da:1f:52:2b:
ed:5d:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:56 2026 by rpki-client