Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/cXz5TwrzLVsAbrVeSpFIHUNUgZ4.roa
File: cXz5TwrzLVsAbrVeSpFIHUNUgZ4.roa (raw, json)
Hash identifier: alJj+Q5AtvNooxQrq8VF3So06EJ9wHV68e3KHpVrQ9g=
Subject key identifier: 71:7C:F9:4F:0A:F3:2D:5B:00:6E:B5:5E:4A:91:48:1D:43:54:81:9E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A101ABAD92F84C59C4E221EA977844E6B2
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/cXz5TwrzLVsAbrVeSpFIHUNUgZ4.roa
Signing time: Sat 03 Oct 2026 12:09:50 +0000
ROA not before: Sat 03 Oct 2026 12:09:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 85.133.199.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
2a04:87c0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:ab:ad:92:f8:4c:59:c4:e2:21:ea:97:78:44:e6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 3 12:09:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=717cf94f0af32d5b006eb55e4a91481d4354819e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:9c:fd:ab:02:94:1d:e7:f0:55:f2:35:db:
73:16:5d:f6:d8:2f:05:c2:e9:61:28:87:a6:ee:12:
9b:9c:ac:0b:2b:7b:47:57:2a:af:b1:09:0b:17:00:
fe:83:e5:fe:9e:dc:18:1c:66:26:ea:a4:f2:88:5a:
06:8b:1d:8c:d8:02:48:cc:ad:30:b7:05:e1:84:75:
e3:ec:eb:57:f4:63:39:6f:2c:cb:81:5d:23:ba:a9:
de:70:a9:9d:2a:40:dc:4e:87:3b:d8:f4:15:1b:02:
a8:bd:38:8c:22:46:4e:60:ca:43:06:2c:17:27:2e:
45:79:f9:68:6a:eb:2b:09:4b:56:fd:a3:65:78:4e:
ca:79:0d:f2:25:99:0a:74:9a:4d:15:14:1f:ba:d8:
9a:90:c5:2f:05:1c:23:f9:b8:0d:dc:4d:f0:04:c9:
0e:af:3d:1b:a1:44:ad:f6:dc:2a:07:82:a2:c9:7c:
e6:76:13:89:94:2e:ee:35:cb:05:c4:9c:04:73:10:
53:bc:13:ad:c8:82:68:36:1e:54:34:90:4d:b7:24:
0c:a7:c8:47:0d:7f:7b:fd:82:20:7b:b7:fc:51:d7:
c4:c4:24:45:63:4d:d6:92:ea:f3:c2:4b:f6:d7:72:
1a:02:72:7a:93:24:8c:8d:b5:02:b2:2a:e9:33:be:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7C:F9:4F:0A:F3:2D:5B:00:6E:B5:5E:4A:91:48:1D:43:54:81:9E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/cXz5TwrzLVsAbrVeSpFIHUNUgZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
85.133.203.0/24
85.133.214.0/24
85.133.216.0/24
85.133.219.0/24
85.133.227.0-85.133.228.255
85.133.234.0/24
85.133.237.0-85.133.238.255
85.133.240.0/24
85.133.247.0/24
IPv6:
2a04:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:22:d7:08:5c:a8:7b:72:2b:ba:76:a8:66:d4:d6:44:88:2d:
e7:55:63:cf:ca:f6:6d:3c:49:b1:5c:f2:ff:3f:44:71:08:56:
60:bd:34:6e:cb:dd:23:a1:08:c6:69:1b:a5:37:33:44:92:86:
43:01:db:09:bb:39:1b:62:bf:3d:3f:a3:1a:50:3e:33:ea:73:
74:a8:af:e1:02:69:b5:36:17:4d:04:8c:ea:dd:9a:cf:67:3d:
6b:ef:e1:19:e9:dc:6e:8a:c1:90:f2:3c:e4:7c:41:8c:24:d5:
e1:82:fa:12:a4:7f:c0:c6:d6:b2:93:79:db:2d:88:68:55:2a:
8e:16:55:97:69:ba:0d:3b:8a:a5:32:7d:69:6b:ef:00:ea:90:
fe:50:53:2d:50:03:38:42:89:f1:2a:0b:3d:f0:b3:06:3f:d3:
72:2d:6e:22:66:69:70:44:a3:b0:30:e4:49:02:86:13:83:7d:
17:8c:d5:32:f1:ca:21:58:65:9a:61:ee:52:76:57:05:62:4e:
cb:d8:42:c9:5d:2e:52:15:82:85:ae:56:a1:32:83:10:87:bf:
94:70:ec:7e:a9:e2:51:e8:ff:19:9c:66:c3:da:a2:20:57:8c:
2c:28:70:61:71:1e:cf:0d:91:41:8d:ea:cd:98:1f:9f:f9:55:
f5:31:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:51:14 2026 by rpki-client