Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VuzSmICNJhd2EX1TRH11PX-LCIE.roa
File: VuzSmICNJhd2EX1TRH11PX-LCIE.roa (raw, json)
Hash identifier: hwHXDoC4DtDqcHL0CSghdhYaWgAQOhTsLZ2xGiRqDz8=
Subject key identifier: 56:EC:D2:98:80:8D:26:17:76:11:7D:53:44:7D:75:3D:7F:8B:08:81
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F0E08F8300D1E7823A134F2AF357D012D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VuzSmICNJhd2EX1TRH11PX-LCIE.roa
Signing time: Sun 28 Jun 2026 11:41:36 +0000
ROA not before: Sun 28 Jun 2026 11:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:08:f8:30:0d:1e:78:23:a1:34:f2:af:35:7d:01:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 28 11:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56ecd298808d261776117d53447d753d7f8b0881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c4:89:b3:11:61:5a:db:24:2d:56:f8:ac:9e:
ff:93:3b:c3:db:3a:83:c1:0e:e6:87:ba:23:e5:c4:
3b:c2:fe:22:4b:e0:90:c3:96:6f:00:e9:21:40:31:
8f:8b:e2:ba:e1:7e:06:f7:b2:19:5f:2e:90:18:e0:
e9:48:05:e8:9b:ff:da:7e:0c:60:bc:75:97:d5:18:
ae:2d:a8:9c:52:74:ab:48:50:97:88:3e:a3:d0:c6:
0e:09:1a:5a:96:06:33:4b:cd:c6:c5:92:eb:32:c7:
9d:b3:3a:44:c1:87:0d:f9:1a:e1:c0:8a:a5:74:c1:
b2:5a:17:c0:37:d9:5c:25:dd:41:16:44:f9:94:f1:
b0:5d:90:37:83:34:35:2c:0f:4a:f6:0b:47:28:50:
7a:5b:bb:68:12:f6:56:64:81:e8:36:1b:8b:3a:01:
96:5e:cf:ad:27:cd:29:ca:c0:a5:56:7e:67:79:25:
17:ee:b1:1a:ba:cd:e9:df:34:c3:67:4c:95:1f:1b:
2f:c5:39:53:44:35:8b:fe:9f:dd:b6:1e:a5:75:0e:
55:f9:c1:61:1c:87:e9:84:43:6d:bb:9b:5a:35:4f:
cb:14:a6:5a:b8:bd:fa:f2:55:21:0f:05:a6:86:fa:
bc:7a:67:bc:d9:9a:ba:5d:fc:80:83:46:2a:60:84:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:D2:98:80:8D:26:17:76:11:7D:53:44:7D:75:3D:7F:8B:08:81
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VuzSmICNJhd2EX1TRH11PX-LCIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.139.255
85.133.141.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.204.0/24
85.133.207.0/24
85.133.209.0-85.133.213.255
85.133.215.0/24
85.133.218.0/24
85.133.222.0/23
85.133.226.0/24
85.133.228.0/24
85.133.231.0-85.133.232.255
85.133.235.0/24
85.133.244.0/23
85.133.247.0/24
85.133.251.0/24
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
25:12:ab:ed:5f:8b:45:7c:16:ba:a3:74:75:97:94:09:58:21:
61:85:c1:a6:a3:3d:c8:e2:2a:ba:69:d7:c4:fc:47:02:f0:8a:
16:32:98:86:28:2b:8d:b9:8d:2e:09:5a:e7:54:5e:70:da:98:
10:6e:d3:e3:6e:d7:72:ce:c4:47:d2:9d:cb:85:1b:fb:ef:bc:
34:75:a5:2f:12:ed:71:0c:17:e5:d1:f8:2d:79:02:94:d3:ba:
a5:81:1f:9c:b1:72:51:3f:97:46:27:a9:7a:4c:30:7b:a9:2f:
d3:e1:8a:01:76:0e:c4:cf:6f:79:6a:af:6a:3f:b1:b5:dc:84:
51:f3:15:f4:68:30:ce:e8:c9:f8:cd:23:24:ec:cc:14:05:cb:
fc:70:e6:3d:18:c9:2f:11:1b:8f:4f:60:3c:3b:23:b7:b9:11:
88:27:87:49:ab:ba:3b:9a:a6:e8:24:3b:de:4a:c1:47:4c:22:
18:fd:9d:be:9a:0a:16:53:fd:d1:84:51:69:f4:50:1e:30:96:
ae:2c:da:e4:e3:81:b3:b4:c9:35:c9:42:e7:3f:e2:5f:2f:e2:
93:6c:fd:15:d8:f9:a0:d2:b9:dd:60:29:2d:50:d2:5b:74:72:
b5:ed:b7:f6:e8:99:26:bc:14:80:87:7f:6b:0d:7a:50:ff:67:
db:d5:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:37 2026 by rpki-client