Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/RAdaDsAL6uT6QOjQ8Sv22EVFnsE.roa
File: RAdaDsAL6uT6QOjQ8Sv22EVFnsE.roa (raw, json)
Hash identifier: ZNDdDY/LbCEeHweol2m/OdT3bO0M0+NtKGLn9lmBaqk=
Subject key identifier: 44:07:5A:0E:C0:0B:EA:E4:FA:40:E8:D0:F1:2B:F6:D8:45:45:9E:C1
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F08FCEDBFBCB5F0910340B14AA048A24D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/RAdaDsAL6uT6QOjQ8Sv22EVFnsE.roa
Signing time: Sat 27 Jun 2026 12:10:21 +0000
ROA not before: Sat 27 Jun 2026 12:10:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 85.133.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:fc:ed:bf:bc:b5:f0:91:03:40:b1:4a:a0:48:a2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 27 12:10:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44075a0ec00beae4fa40e8d0f12bf6d845459ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:c5:48:3a:8f:73:a3:6c:8b:92:9f:fc:02:
0a:84:81:ff:e2:36:73:88:8f:c6:2b:2e:93:67:b6:
03:ff:6b:27:fb:0a:56:39:77:59:79:d4:2f:06:ca:
fa:82:6c:ce:c0:20:a6:dd:79:a2:f5:b8:fb:9b:c6:
a1:12:bb:a1:72:3f:5f:34:71:7d:c7:81:01:9b:fd:
ae:43:a7:d8:26:ca:4a:9d:98:72:4f:1f:f9:b8:a5:
bb:45:5b:66:c1:d7:1d:5c:27:f4:82:b8:f4:c3:07:
87:91:ce:e3:88:a9:34:63:e2:9e:06:1d:e9:fe:a3:
ce:57:ac:19:a9:82:ed:9e:c5:d9:50:fa:70:58:9c:
90:4e:04:a8:2c:0d:f8:3f:47:44:5a:30:0f:f4:15:
55:a9:8f:0b:46:97:79:e8:1e:4f:75:1f:21:cc:e9:
c8:e3:86:ab:b3:35:b3:a2:e7:c7:98:50:a7:ae:35:
05:0a:b4:0f:2f:d6:9f:68:64:79:c9:66:48:2a:f2:
31:84:ae:ae:f5:67:52:b8:1a:c9:12:ca:36:d8:dd:
b7:c7:8c:58:b7:0c:72:1f:06:fb:91:d3:3e:b1:25:
3e:20:2f:ae:3d:f6:52:61:f7:67:fc:ac:74:0a:51:
1e:34:4b:d7:7d:db:6c:8a:c2:4f:e2:fc:a6:1e:de:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:5A:0E:C0:0B:EA:E4:FA:40:E8:D0:F1:2B:F6:D8:45:45:9E:C1
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/RAdaDsAL6uT6QOjQ8Sv22EVFnsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:52:85:ec:d7:9c:23:7d:14:76:a1:60:b5:6d:13:19:b8:a9:
f0:93:fe:4d:cb:d9:b1:a6:c2:b3:1b:0d:f7:35:9e:81:c9:b8:
3e:bf:6b:58:a9:c8:f2:cd:4f:52:c5:f7:25:05:e1:ed:86:a4:
e1:50:39:a9:1e:75:7a:40:e1:ad:68:50:7c:e7:c2:0f:82:09:
d4:8d:92:c7:9c:d2:e7:f9:ec:b1:78:fc:12:e2:1e:da:e6:af:
b3:09:ac:69:e1:8b:57:22:8f:88:e3:a1:1a:11:07:01:d1:70:
24:58:ea:ba:3c:d3:70:cb:18:c1:15:31:3d:2b:f3:d8:07:3f:
60:0c:2d:3a:62:f6:e4:b3:48:23:1d:b2:68:0f:a2:c9:27:db:
b0:48:d8:8e:9a:1f:5b:29:ba:87:0f:ac:e4:77:57:7c:39:bd:
68:94:23:88:89:95:8d:f0:c7:2f:e6:52:12:87:19:2c:2e:d7:
85:0b:fa:8b:17:1c:e5:a7:4b:3a:93:25:af:09:a7:9e:7d:f7:
00:3a:68:60:45:6c:57:ea:76:ce:df:0e:95:3a:70:73:1e:25:
ce:be:92:de:f2:36:1b:55:cb:9f:11:08:7c:6a:b6:25:6b:33:
47:17:71:27:28:bc:cd:cb:84:8f:6a:56:80:8a:be:e8:bc:3e:
58:b9:2c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:35:59 2026 by rpki-client