Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VBWBCsXJU7oPkU-x2fU7gsAVD8E.roa
File: VBWBCsXJU7oPkU-x2fU7gsAVD8E.roa (raw, json)
Hash identifier: 9ciW7V6q401ESHMMgyHdo+xNbpDGKCLEqNll9PJLnT8=
Subject key identifier: 54:15:81:0A:C5:C9:53:BA:0F:91:4F:B1:D9:F5:3B:82:C0:15:0F:C1
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A077760D67A8BDC2DDECEFE49B5724E59C
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VBWBCsXJU7oPkU-x2fU7gsAVD8E.roa
Signing time: Sun 06 Sep 2026 16:03:40 +0000
ROA not before: Sun 06 Sep 2026 16:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 85.133.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:76:0d:67:a8:bd:c2:dd:ec:ef:e4:9b:57:24:e5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 6 16:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5415810ac5c953ba0f914fb1d9f53b82c0150fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5f:f6:96:62:ec:f6:5d:06:27:cf:d3:ac:dd:
ca:a7:2b:bb:a0:e6:b4:3b:39:cd:9b:1d:b4:12:9d:
98:f4:53:30:ff:c9:62:5f:8d:ac:3c:fd:8d:f1:9b:
15:a5:cc:24:24:48:ab:06:41:51:e0:90:14:bd:b1:
13:47:28:37:c8:de:03:5c:72:6f:7b:1b:80:d9:f9:
5c:5f:a1:46:b5:0c:8a:79:6c:26:95:3d:b8:67:8b:
c9:37:11:9f:ba:f9:fe:6e:e3:fa:14:33:a9:86:51:
38:e6:16:21:19:de:c6:76:21:f1:55:76:35:59:21:
b6:d1:e4:83:25:5f:3b:53:81:1d:b6:94:a6:c1:7b:
d6:0c:0d:6e:44:43:c5:ed:50:b5:e8:f3:b6:af:be:
6c:b9:d4:5b:20:f9:fe:eb:74:82:e2:5b:99:83:46:
b0:04:d6:d4:92:a7:ec:82:7e:7e:e9:ed:5e:42:ce:
98:f5:33:bb:6f:cb:30:f9:e1:d9:15:fe:0d:21:f8:
b6:cd:31:9a:11:59:ec:d5:9a:51:00:88:ca:b4:43:
68:c9:6a:d4:8b:09:3a:62:83:a8:62:b3:ea:5a:12:
02:c7:d7:3a:09:f1:8d:62:ba:36:24:3c:25:9b:04:
6f:f0:4c:ad:1e:83:13:55:60:22:20:49:92:68:ea:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:15:81:0A:C5:C9:53:BA:0F:91:4F:B1:D9:F5:3B:82:C0:15:0F:C1
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VBWBCsXJU7oPkU-x2fU7gsAVD8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.193.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b9:96:7c:a6:45:ad:fe:2b:3f:b7:e3:08:30:92:2b:ef:21:
68:6c:7c:5a:29:63:16:39:8e:3d:88:2b:11:67:de:5d:ae:28:
00:f6:e0:aa:8f:49:70:b2:9f:06:ff:bf:13:67:60:c9:ed:68:
0d:45:f0:52:7e:31:8b:cc:f8:55:7c:17:37:c3:c2:dd:f3:92:
be:87:3d:43:b9:60:1c:90:d6:f7:a0:60:3b:cd:d2:e2:1b:46:
4a:e1:27:34:99:e9:39:5b:30:7e:66:10:3c:1c:55:69:1a:25:
48:9b:d8:f5:90:b6:e4:1a:93:3b:c3:f5:b4:d6:d3:92:4f:82:
de:23:99:b4:51:51:15:eb:2c:c2:ce:f9:27:b9:9e:7d:79:5d:
15:e3:8e:bd:a0:27:26:fd:0e:18:43:d9:af:a5:0f:d9:e2:1d:
2b:16:e5:53:75:28:f8:06:a6:8f:f6:41:11:ca:1e:b9:60:2c:
c4:ef:13:51:e6:82:64:eb:99:60:d1:b9:0f:17:41:34:b5:01:
6c:f6:44:85:02:70:4a:45:86:35:a1:33:59:58:d8:25:78:68:
bb:70:29:9f:7e:49:93:a3:db:e8:cf:a2:7a:28:e1:06:ea:b6:
7f:05:36:2b:fb:c2:16:eb:16:68:3e:37:8e:3a:e8:1f:58:4a:
78:d0:4a:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB3dg1nqL3C3ezv5JtXJOWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYwOTA2MTYwMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDE1ODEwYWM1Yzk1M2JhMGY5MTRmYjFkOWY1M2I4MmMwMTUwZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF/2lmLs9l0GJ8/TrN3Kpyu7oOa0
OznNmx20Ep2Y9FMw/8liX42sPP2N8ZsVpcwkJEirBkFR4JAUvbETRyg3yN4DXHJv
exuA2flcX6FGtQyKeWwmlT24Z4vJNxGfuvn+buP6FDOphlE45hYhGd7GdiHxVXY1
WSG20eSDJV87U4EdtpSmwXvWDA1uREPF7VC16PO2r75sudRbIPn+63SC4luZg0aw
BNbUkqfsgn5+6e1eQs6Y9TO7b8sw+eHZFf4NIfi2zTGaEVns1ZpRAIjKtENoyWrU
iwk6YoOoYrPqWhICx9c6CfGNYro2JDwlmwRv8EytHoMTVWAiIEmSaOqNlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQVgQrFyVO6D5FPsdn1O4LAFQ/BMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvVkJXQkNzWEpVN29Qa1UteDJmVTdnc0FWRDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXBMA0G
CSqGSIb3DQEBCwUAA4IBAQBUuZZ8pkWt/is/t+MIMJIr7yFobHxaKWMWOY49iCsR
Z95drigA9uCqj0lwsp8G/78TZ2DJ7WgNRfBSfjGLzPhVfBc3w8Ld85K+hz1DuWAc
kNb3oGA7zdLiG0ZK4Sc0mek5WzB+ZhA8HFVpGiVIm9j1kLbkGpM7w/W01tOST4Le
I5m0UVEV6yzCzvknuZ59eV0V4469oCcm/Q4YQ9mvpQ/Z4h0rFuVTdSj4BqaP9kER
yh65YCzE7xNR5oJk65lg0bkPF0E0tQFs9kSFAnBKRYY1oTNZWNgleGi7cCmffkmT
o9voz6J6KOEG6rZ/BTYr+8IW6xZoPjeOOugfWEp40Eqm
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:41:10 2026 by rpki-client