Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ezjxRfeJRjpnrRCKWbvwR5vJRKU.roa
File: ezjxRfeJRjpnrRCKWbvwR5vJRKU.roa (raw, json)
Hash identifier: EXExMi7BOHWcVWkWrbvXgL84WwGEkcmRdKjry0zUqRk=
Subject key identifier: 7B:38:F1:45:F7:89:46:3A:67:AD:10:8A:59:BB:F0:47:9B:C9:44:A5
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A178DD8242EC40047A8773A987457B08DB
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ezjxRfeJRjpnrRCKWbvwR5vJRKU.roa
Signing time: Mon 26 Oct 2026 15:39:05 +0000
ROA not before: Mon 26 Oct 2026 15:39:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44650
IP address blocks: 85.133.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:dd:82:42:ec:40:04:7a:87:73:a9:87:45:7b:08:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 26 15:39:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b38f145f789463a67ad108a59bbf0479bc944a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:a6:46:28:96:93:aa:d5:cd:50:29:bb:59:
83:a5:3f:3a:d4:c4:4e:80:4a:f7:2b:0c:48:4c:2d:
0d:5f:d6:98:c1:65:19:5f:03:89:24:d1:88:84:d0:
39:e8:22:31:e5:dc:a5:9f:e2:54:25:f0:be:cf:06:
ce:ec:58:18:98:a6:49:17:c7:e6:59:88:b7:8a:a1:
a4:e8:e4:b7:af:cc:76:99:63:92:8a:1b:80:cc:02:
ac:99:69:44:8a:b4:b4:46:28:c6:4d:c1:e4:3d:f0:
20:2f:a7:c9:9f:72:fb:8a:e7:2a:7f:7a:fc:48:47:
1c:f1:6f:02:62:03:e5:1b:eb:1f:a7:73:e0:81:14:
fe:f9:ec:a1:13:0d:19:e5:e7:2a:8a:83:dd:a1:2a:
4f:b1:b8:a5:45:7a:44:5e:3f:4a:0a:cf:0a:50:84:
1e:5f:c2:ac:45:47:87:2e:a1:b5:08:de:e7:48:08:
87:07:e8:79:f2:f7:6a:6a:21:e9:81:e7:a8:50:ee:
05:3e:49:91:a1:20:66:57:48:d6:d2:bc:f8:35:6b:
5c:91:7c:61:16:c2:da:b2:48:52:1f:d2:74:36:5d:
26:c3:4c:1e:38:ed:50:eb:2e:97:55:70:38:6b:df:
e0:3c:36:f6:54:00:a4:ab:f6:cb:74:8d:fc:66:23:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:F1:45:F7:89:46:3A:67:AD:10:8A:59:BB:F0:47:9B:C9:44:A5
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ezjxRfeJRjpnrRCKWbvwR5vJRKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.238.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e6:e5:7d:77:0c:11:f4:64:38:a0:3e:95:f9:1e:72:27:ee:
d8:60:a9:a9:c0:ed:f0:f7:50:4b:4f:64:ff:5a:29:a5:15:9b:
97:5c:2d:c8:29:aa:bd:1e:80:c8:41:23:68:98:32:44:54:c3:
e0:04:92:59:4c:13:0f:b5:60:fa:22:a6:73:78:2b:77:ab:21:
37:c4:ee:98:c5:55:47:7c:80:dd:fc:61:93:68:c6:ac:0a:89:
9d:20:07:d1:c4:6b:0b:97:69:b0:69:fe:06:df:da:57:79:58:
31:98:59:62:1f:33:75:b9:ca:83:6a:45:b8:57:a0:bc:98:68:
c0:62:c6:28:b6:90:5f:95:40:bc:e2:d4:30:ff:75:3a:57:15:
9e:59:db:9f:a5:9d:58:45:b1:97:77:aa:96:ef:81:ee:05:5f:
e8:20:9e:3d:20:db:a2:00:b9:40:51:cd:3a:5e:4a:23:cd:9d:
45:0d:bf:ce:04:62:db:9b:ce:ca:77:c0:2d:2a:f6:a2:96:9d:
51:fb:1c:60:29:5d:12:05:1b:dc:6e:b1:d0:28:e8:a3:1e:d1:
a3:10:52:9e:06:fa:51:fc:cc:55:d6:00:93:c3:29:f7:05:fa:
26:be:8e:9c:78:2e:c4:f0:15:25:49:23:b6:d5:0b:f9:af:65:
dd:5f:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:16:52 2026 by rpki-client