Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XKYROkzGwTyyDG91-58FmJfM3wQ.roa
File: XKYROkzGwTyyDG91-58FmJfM3wQ.roa (raw, json)
Hash identifier: QKZm9Lorw22YkJQK/FA7wF+bUvpk7hqUaQ0ETpIoCsg=
Subject key identifier: 5C:A6:11:3A:4C:C6:C1:3C:B2:0C:6F:75:FB:9F:05:98:97:CC:DF:04
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F37113834497352F598BBBAD030C58B80
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XKYROkzGwTyyDG91-58FmJfM3wQ.roa
Signing time: Mon 06 Jul 2026 10:55:03 +0000
ROA not before: Mon 06 Jul 2026 10:55:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59447
IP address blocks: 85.133.196.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:11:38:34:49:73:52:f5:98:bb:ba:d0:30:c5:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 6 10:55:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ca6113a4cc6c13cb20c6f75fb9f059897ccdf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:07:3f:73:c0:42:96:b4:43:c3:f0:63:64:
ab:fc:82:c3:0a:94:1a:0e:51:05:ff:72:b3:3c:51:
7e:4e:96:35:eb:cc:07:36:44:c3:b4:fd:db:c4:d5:
33:9b:a2:ac:06:0f:e5:86:01:42:45:da:a5:7e:d7:
3d:6f:50:48:2c:21:25:f7:4c:ba:b1:f0:25:ec:a7:
97:f3:68:38:f9:6c:2b:dc:39:1b:f2:c6:dc:ae:9b:
2f:cb:a3:23:65:0f:7e:61:7e:90:54:5f:1a:90:5f:
49:8b:74:a6:a7:23:9f:c8:ac:87:62:bd:43:13:ec:
13:22:04:e0:2d:cf:44:e9:f7:81:9f:2d:d3:a4:dc:
48:2e:65:ca:5e:f7:b0:6e:ae:b6:8f:59:ee:b3:1f:
22:14:fe:be:55:4f:5d:1c:1d:8b:53:e9:66:66:1e:
96:4d:c3:55:4a:dc:c9:33:61:ac:c4:b4:db:bb:2f:
7e:cb:f4:fe:ac:16:6e:16:87:f2:09:bd:87:dc:2f:
b2:bc:65:45:36:56:f8:7a:aa:e0:d2:b2:ab:15:9f:
4e:3f:02:78:f9:6d:c5:fb:ee:fc:6b:4e:6c:9e:43:
69:bf:0c:53:40:ba:11:c9:18:1b:d4:28:ac:4f:bc:
2a:e1:1a:3f:5b:0c:b3:31:84:1e:a1:aa:cc:17:73:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:11:3A:4C:C6:C1:3C:B2:0C:6F:75:FB:9F:05:98:97:CC:DF:04
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XKYROkzGwTyyDG91-58FmJfM3wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.196.0/24
85.133.199.0/24
85.133.203.0/24
85.133.214.0/24
85.133.219.0/24
85.133.237.0/24
Signature Algorithm: sha256WithRSAEncryption
59:02:58:ab:cd:7d:29:63:3b:60:bd:20:f5:b8:8a:7f:e5:fb:
e8:0a:07:9a:24:68:0d:41:16:f6:54:0e:44:ca:fc:f5:e5:16:
97:eb:10:9d:47:d8:07:75:1d:5a:5f:c6:10:bf:a3:c7:fb:10:
6f:1a:9a:72:9b:51:fc:f2:18:31:57:9d:91:63:3c:f4:09:d6:
e3:03:b3:43:57:ef:c8:2b:f9:73:d6:3a:ce:ab:2d:2e:0f:47:
e2:42:c8:ee:a9:c3:0d:97:a2:c7:d6:4c:da:c4:0e:ea:d8:e9:
07:0f:34:ac:94:58:82:ce:44:05:45:d3:de:b3:1f:fd:3b:0a:
a1:1b:e7:9e:a0:f7:19:aa:fc:0b:30:ac:b7:65:a2:c6:be:3d:
0a:0b:e3:39:9e:76:5f:f0:87:dd:5c:8e:86:5e:9f:a6:1c:85:
89:9f:50:b9:d4:f2:49:18:c8:f2:f2:6c:90:98:6a:69:c7:0f:
4a:48:a0:52:6f:fe:62:ba:d1:ca:0a:cb:0a:91:5b:ee:93:7b:
72:63:10:f4:06:f6:4b:d5:cf:8b:f9:f2:30:28:ca:dc:b3:91:
67:27:fe:3a:bf:4c:07:1a:14:ca:42:77:e5:49:06:f7:fa:5e:
b9:23:0b:7f:9f:e2:c5:f5:60:87:f9:33:76:1c:07:4a:e3:ba:
da:f8:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:30 2026 by rpki-client