Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Trxc4jeny8dNEnGxhN74ZsfhiqY.roa
File: Trxc4jeny8dNEnGxhN74ZsfhiqY.roa (raw, json)
Hash identifier: 3SUuxVeA46pCrInZR/RGR5OP9gwL2bojt7VpxJlK2Tk=
Subject key identifier: 4E:BC:5C:E2:37:A7:CB:C7:4D:12:71:B1:84:DE:F8:66:C7:E1:8A:A6
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A1247785E2D39FC29757A2799F7AED2DAF
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Trxc4jeny8dNEnGxhN74ZsfhiqY.roa
Signing time: Sat 10 Oct 2026 06:19:35 +0000
ROA not before: Sat 10 Oct 2026 06:19:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 85.133.193.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:77:85:e2:d3:9f:c2:97:57:a2:79:9f:7a:ed:2d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 10 06:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ebc5ce237a7cbc74d1271b184def866c7e18aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:15:ea:60:98:85:ae:6a:b1:82:0d:06:d5:
e9:b2:67:c1:0a:68:d8:22:b7:9b:0a:1d:be:05:84:
01:ef:71:22:68:60:a8:43:50:ae:2b:94:b5:7e:d7:
5b:0d:15:dc:b5:5a:87:a4:1b:d6:2f:b3:77:26:37:
76:91:76:ce:82:83:c7:ae:37:e1:69:a8:3e:4f:d6:
0d:f0:5f:51:4b:95:0f:a3:f0:ca:a3:3f:1e:0e:cf:
8d:ee:71:03:7a:92:d0:8f:f8:56:d8:85:f6:55:dd:
5e:ae:ef:82:0f:d9:ad:9f:2b:ef:a8:6f:ea:1c:5c:
b7:19:ed:0e:9e:9d:3a:1e:39:9a:f1:e3:b6:64:bf:
4a:ee:e2:24:f2:aa:4d:6e:04:2d:76:b6:8e:32:23:
05:47:21:70:d3:65:7f:2b:4d:68:51:c7:a4:98:bd:
70:d7:dd:1f:f9:2d:8c:d9:2c:d0:b1:d5:15:b3:e1:
19:ac:b1:a8:ef:1b:be:cd:b0:26:aa:a3:0e:a6:87:
2b:40:3f:54:d7:2d:85:db:bc:47:89:35:eb:64:6d:
8f:0b:3c:37:8c:5d:74:b9:2f:ff:4d:1f:c5:d2:4a:
d7:76:54:3e:84:2e:3c:0a:5e:15:ce:d6:78:2a:63:
82:00:b5:70:62:10:2a:b7:9a:08:47:04:52:a1:da:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:5C:E2:37:A7:CB:C7:4D:12:71:B1:84:DE:F8:66:C7:E1:8A:A6
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Trxc4jeny8dNEnGxhN74ZsfhiqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.193.0/24
85.133.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ad:49:64:b8:5b:b4:bf:48:eb:d0:e5:ff:69:c4:2c:16:2c:
4e:b9:6c:0b:b1:db:3c:02:2d:5f:8c:cc:e9:3f:b1:d7:d3:61:
01:40:cf:bc:3c:20:4d:f1:e4:a6:48:0c:36:99:75:51:54:e9:
2a:a5:ed:56:6c:35:5a:0d:88:de:b6:2d:51:c3:96:c1:40:b7:
fa:75:d8:5e:83:b3:f9:a9:2c:38:7d:5b:82:0c:fc:fe:93:a8:
a4:34:93:64:90:70:5e:2e:58:40:0e:f3:fa:09:a2:24:0f:26:
37:81:13:61:96:a6:1b:c7:9c:1f:ac:e9:c8:a2:10:26:b4:3e:
6f:77:c5:3c:9f:06:0d:e5:bc:f3:39:d1:f9:ca:5e:08:13:dd:
90:d8:20:e1:95:7f:97:5b:e7:31:9a:82:8c:18:e4:24:c3:e5:
e1:a5:2e:67:c0:61:bb:50:bb:a0:30:59:96:02:de:f9:54:20:
24:98:36:e2:f8:3a:71:87:cf:45:bc:b4:28:75:8c:3e:87:ca:
66:ad:33:ca:d5:79:5b:d9:d0:22:76:9b:73:2a:a3:ce:91:67:
9f:d4:76:32:d0:78:98:90:c7:dc:87:79:b3:9e:87:38:b7:f6:
92:ce:62:16:53:34:03:b5:89:90:6e:46:58:ee:9b:95:db:48:
9e:f3:e2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:25 2026 by rpki-client