Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/bA4b87f91ryc3jb4SiaTzw70uLA.roa
File: bA4b87f91ryc3jb4SiaTzw70uLA.roa (raw, json)
Hash identifier: M9DMYWjQrriYvfIMkTPt89s2T8jCvpnvOvBPbxf8EDE=
Subject key identifier: 6C:0E:1B:F3:B7:FD:D6:BC:9C:DE:36:F8:4A:26:93:CF:0E:F4:B8:B0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A014554667D8EA8639C45299F7C7D6A4B8
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/bA4b87f91ryc3jb4SiaTzw70uLA.roa
Signing time: Tue 18 Aug 2026 10:05:27 +0000
ROA not before: Tue 18 Aug 2026 10:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197328
IP address blocks: 85.133.197.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:55:46:67:d8:ea:86:39:c4:52:99:f7:c7:d6:a4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 18 10:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c0e1bf3b7fdd6bc9cde36f84a2693cf0ef4b8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:88:30:ed:52:51:9c:ef:2a:00:99:ae:bd:
c8:03:d8:e8:c5:dd:42:7d:57:a4:88:12:34:73:b7:
15:6d:98:e3:ae:c2:58:20:46:a4:a8:8b:b8:0d:06:
fc:34:27:02:3e:d2:d5:f4:6d:eb:a8:64:03:45:12:
96:d3:fa:cb:e7:22:e6:02:fc:75:90:f0:89:fd:3c:
7f:d8:6e:b2:42:28:ca:44:f4:c8:b1:30:11:ba:87:
fe:2e:33:fc:3e:d5:39:fa:5a:4c:05:d3:45:b1:9d:
b7:3b:9c:96:c0:eb:30:6b:38:18:f3:84:61:0a:a0:
ff:6c:58:95:77:88:da:1b:98:a3:1b:11:c7:47:c5:
86:58:f5:97:d6:76:24:c1:df:9c:05:b7:27:de:05:
36:18:58:46:c7:0a:32:7a:42:43:e6:b4:e8:77:16:
c4:fe:a3:d2:aa:93:f4:3b:2e:1d:a8:cd:74:3d:d8:
25:35:45:e0:ee:29:fc:40:cc:35:c4:74:6b:99:62:
a6:1b:71:f4:59:b1:05:6d:98:3c:4f:44:fb:9b:08:
dd:d4:58:bb:3b:d4:f2:f8:28:8e:19:5a:9c:f1:a1:
ec:d0:62:a0:91:c7:07:e8:cb:4e:76:e9:de:54:ad:
c0:1d:81:ac:31:e6:ac:56:0e:dd:94:ab:a6:f2:d1:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0E:1B:F3:B7:FD:D6:BC:9C:DE:36:F8:4A:26:93:CF:0E:F4:B8:B0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/bA4b87f91ryc3jb4SiaTzw70uLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.197.0/24
85.133.241.0/24
85.133.246.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e0:2d:f7:a2:3b:4b:76:60:a1:a5:4b:c6:de:98:88:fd:6a:
e9:c4:29:0f:6f:4d:21:27:2d:b1:b6:ae:31:ae:99:b0:6f:f2:
31:a1:56:f5:6d:bd:84:6e:1e:e1:ef:aa:85:ff:b5:1d:60:3f:
90:1d:92:31:68:5d:f4:4c:02:7c:57:cf:a7:0d:91:07:71:67:
ba:d6:8a:8d:31:5c:73:49:bc:26:17:63:68:46:b8:0f:79:11:
8f:10:3f:1e:bb:2f:48:92:2e:76:f3:82:77:db:f4:4a:9d:ba:
ee:52:b3:b0:f2:b2:a9:81:45:44:62:a0:7f:f9:f3:ad:3f:43:
3d:ad:a2:4d:95:85:97:a6:87:7c:0d:b5:38:68:1a:66:23:0d:
33:a1:4d:7a:3e:d7:a0:b3:32:cf:5c:08:59:e0:18:e1:3c:4f:
8f:2a:14:9f:f0:33:32:76:e1:fd:a2:a8:05:a0:5a:6c:c3:9a:
d5:37:88:37:1f:2d:1c:36:48:fc:11:62:98:d2:b7:fd:c8:19:
cc:0c:4a:97:c9:a4:03:6d:c8:89:9e:d6:af:cf:77:3c:16:f4:
29:87:1c:a8:09:ca:6f:dc:57:98:79:a0:22:5e:cd:61:16:4f:
67:d3:ba:bd:45:62:53:f7:a0:10:cf:5c:9b:8b:6d:3f:fc:87:
dc:36:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:33 2026 by rpki-client