Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/bs63AqlU5D-GCU72vha7ypDhurE.roa
File: bs63AqlU5D-GCU72vha7ypDhurE.roa (raw, json)
Hash identifier: RjRSZFAduAT0Z75zwCsE2XziRS51jLEugipeFkuq+7o=
Subject key identifier: 6E:CE:B7:02:A9:54:E4:3F:86:09:4E:F6:BE:16:BB:CA:90:E1:BA:B1
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A077760CF12DB109238815DE9F5BDC5E73
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/bs63AqlU5D-GCU72vha7ypDhurE.roa
Signing time: Sun 06 Sep 2026 16:03:40 +0000
ROA not before: Sun 06 Sep 2026 16:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 85.133.199.0/24 maxlen: 24
85.133.202.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
2a04:87c0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:76:0c:f1:2d:b1:09:23:88:15:de:9f:5b:dc:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 6 16:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eceb702a954e43f86094ef6be16bbca90e1bab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:4a:10:f8:c2:14:dc:49:93:fa:ed:9a:cd:
55:75:9a:3a:0f:67:d3:fa:c4:16:c1:a6:19:be:07:
d5:c0:42:76:2f:07:af:2d:5c:e6:d5:7e:70:cc:41:
90:04:93:c5:7b:9a:62:35:61:7e:81:68:d8:b0:ec:
ec:70:d0:0b:74:f9:c0:4f:b0:b7:7e:bd:f7:1c:d6:
93:ae:96:0b:23:25:54:eb:c5:72:17:9d:cc:6b:a7:
66:ef:a9:0a:46:53:73:64:6b:f3:c3:49:ba:cf:d5:
68:d5:fb:af:a3:f8:3f:9a:ea:3b:e8:4a:3f:80:64:
c6:88:5e:c7:a2:6e:ac:42:fe:de:44:a5:65:76:89:
a4:2e:7e:aa:8a:b9:cb:5f:91:c8:9d:45:96:d7:86:
61:77:c3:71:fc:6a:7d:28:4a:93:02:31:e1:e8:6d:
6a:1c:3a:86:9b:1e:71:f0:1f:3b:64:3f:e1:ea:5d:
f2:f2:90:91:b4:f4:19:50:7f:9a:58:31:51:7a:79:
30:0a:2c:98:c3:0a:bd:84:6d:fe:d6:ae:e8:ad:e2:
e7:46:92:07:85:35:f0:5f:e8:ad:67:fe:27:04:27:
d2:90:39:c7:77:b8:12:4b:fc:ff:59:4e:d0:4a:87:
77:a6:d2:81:42:87:6e:a0:8b:b3:02:db:ed:8e:a5:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CE:B7:02:A9:54:E4:3F:86:09:4E:F6:BE:16:BB:CA:90:E1:BA:B1
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/bs63AqlU5D-GCU72vha7ypDhurE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
85.133.202.0/23
85.133.214.0/24
85.133.219.0/24
85.133.227.0-85.133.228.255
85.133.233.0-85.133.234.255
85.133.236.0-85.133.238.255
85.133.240.0/24
85.133.249.0/24
IPv6:
2a04:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:1b:b3:2e:b0:37:a1:46:4e:2e:aa:d8:f6:82:66:45:33:f9:
c3:04:35:6f:c2:4c:56:40:3d:71:07:a9:ef:d3:52:6f:31:87:
fc:84:7f:26:3b:c7:95:a1:1c:25:38:67:5d:f5:81:bc:83:07:
0b:6d:96:fe:68:50:3b:5c:92:32:4d:ab:62:60:63:a2:f3:a0:
e2:9a:16:2e:3a:59:ba:af:03:3f:fd:9b:10:8d:e3:83:fe:e3:
e9:22:39:7b:a9:e4:44:36:be:a0:22:3b:b1:f8:4f:50:ea:13:
ff:64:83:c2:33:7c:2d:6c:a0:7c:70:c4:be:a3:21:2b:57:d9:
90:85:cd:aa:10:d9:61:7f:a8:24:8e:85:4d:cb:2f:a6:4b:1a:
7a:35:1e:2e:1c:ed:45:e2:b6:0b:f8:64:55:fc:d2:e5:7b:0b:
d3:37:2c:81:8e:4e:23:7c:4e:45:a3:a9:77:76:44:4f:73:dc:
18:e0:fb:48:e3:38:e2:92:ae:fe:c0:a8:e2:b3:a9:6f:33:68:
a2:13:33:98:64:d6:80:c4:84:04:5e:cf:34:31:25:d9:7f:4b:
1c:cc:47:e8:b8:c1:d6:64:02:7d:dd:41:b1:66:b3:22:48:9e:
93:1e:71:35:1c:39:11:3f:cf:fc:f5:d3:37:91:d0:11:36:78:
b9:15:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:33 2026 by rpki-client