Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/YbFebSl--3J76oaBlTOec6IbHfE.roa
File: YbFebSl--3J76oaBlTOec6IbHfE.roa (raw, json)
Hash identifier: err0DUND/w4jDu2qRwOGdetaJcJ0qm0JNMHMF6v2Z2E=
Subject key identifier: 61:B1:5E:6D:29:7E:FB:72:7B:EA:86:81:95:33:9E:73:A2:1B:1D:F1
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A077065BEB5CE70BEBD4F3DF0EAAB9B1AF
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/YbFebSl--3J76oaBlTOec6IbHfE.roa
Signing time: Sun 06 Sep 2026 14:01:40 +0000
ROA not before: Sun 06 Sep 2026 14:01:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
2a04:87c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:06:5b:eb:5c:e7:0b:eb:d4:f3:df:0e:aa:b9:b1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 6 14:01:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61b15e6d297efb727bea868195339e73a21b1df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:62:f9:14:47:cb:1b:59:fe:6a:b6:04:2d:
c9:1e:cf:76:82:ec:de:f3:90:f7:3d:73:79:0d:47:
69:1d:20:c8:7d:44:32:e8:66:1a:12:2f:08:d1:6d:
69:54:18:d5:68:f3:13:99:cc:65:8c:78:8e:36:d7:
40:cf:1c:5c:e7:4d:6d:8c:0a:62:35:ef:8d:7b:58:
41:86:be:09:de:37:28:eb:ae:d6:09:43:d6:93:aa:
60:95:6e:f8:23:ec:af:31:17:e3:1a:9e:03:21:fb:
1c:3e:ae:be:2a:d3:9b:4a:52:1e:ba:28:1b:0d:d1:
9b:42:f3:e0:a2:3c:f5:76:76:d0:6f:31:06:3c:b8:
08:13:4c:0c:8f:03:9a:9e:9c:bc:3b:27:73:c4:73:
64:92:a3:7c:bc:27:0b:a2:7a:49:39:94:92:cb:89:
82:3c:f6:4d:19:23:d0:80:76:96:a3:13:58:8d:a6:
67:eb:e3:58:4a:9e:35:98:6c:61:11:0c:57:7a:00:
e7:d6:55:92:97:1c:21:3c:25:ee:93:90:2c:da:01:
5d:8a:8e:33:ba:71:b1:67:5c:69:ca:2d:98:77:fe:
ff:be:f8:25:58:eb:28:39:08:44:f0:46:98:ca:8b:
bd:b4:04:da:bf:6a:73:f4:5f:7f:a3:df:e0:f9:ae:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:5E:6D:29:7E:FB:72:7B:EA:86:81:95:33:9E:73:A2:1B:1D:F1
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/YbFebSl--3J76oaBlTOec6IbHfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.139.255
85.133.141.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.207.0/24
85.133.209.0-85.133.213.255
85.133.215.0/24
85.133.218.0/24
85.133.222.0/23
85.133.231.0-85.133.232.255
85.133.235.0/24
85.133.247.0/24
85.133.251.0/24
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:5e:0f:be:62:07:b4:1c:6e:bc:39:aa:df:82:74:8d:c2:03:
ea:6b:86:e9:c9:52:86:e0:1d:e5:f4:d0:7e:ef:88:96:d6:19:
1a:39:16:7a:83:bd:7f:a8:f2:03:d9:ac:1d:d8:35:f3:44:76:
a2:cf:3d:86:b3:16:e1:92:53:17:34:2d:75:98:34:6e:5d:67:
ab:36:98:dd:61:5e:fc:59:2c:10:e0:28:58:60:d9:24:58:eb:
20:38:b7:07:52:2e:02:44:47:26:88:b5:73:ce:24:75:ff:3c:
26:33:28:b7:16:fd:02:27:7b:f1:c3:a2:88:b7:dc:bf:e2:db:
42:8f:b6:e4:ec:9a:66:28:55:aa:25:03:ba:8e:9e:5a:de:9f:
67:58:a1:4e:39:a8:fc:9a:f7:e3:89:e7:cd:64:b9:7d:6e:06:
00:60:08:aa:7a:e1:b2:7e:88:d2:69:c4:4f:bd:52:e2:88:68:
66:77:11:5f:9a:7e:ba:e2:67:62:ec:31:cd:eb:35:b2:2c:d1:
dc:d2:07:12:13:da:1c:d4:fb:f3:fe:5c:f2:eb:48:02:5d:22:
bd:09:b6:25:29:6a:bf:dc:20:97:6b:5b:1e:77:a7:f1:5a:b8:
16:cc:fe:4b:47:1b:a7:99:d9:89:ed:78:31:48:48:64:43:1c:
8a:23:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:31 2026 by rpki-client