Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ipicEKKJgPtsPiyIWc0LpWZA3I4.roa
File: ipicEKKJgPtsPiyIWc0LpWZA3I4.roa (raw, json)
Hash identifier: MyrZx+inJ1AhUdvfmrhTMeyIbjM3/INq/N7FC9H2X1A=
Subject key identifier: 8A:98:9C:10:A2:89:80:FB:6C:3E:2C:88:59:CD:0B:A5:66:40:DC:8E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019ECA8DD8108C5662B1FCD13F8FA64D746C
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ipicEKKJgPtsPiyIWc0LpWZA3I4.roa
Signing time: Mon 15 Jun 2026 09:12:33 +0000
ROA not before: Mon 15 Jun 2026 09:12:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215938
IP address blocks: 85.133.153.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:8d:d8:10:8c:56:62:b1:fc:d1:3f:8f:a6:4d:74:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 15 09:12:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a989c10a28980fb6c3e2c8859cd0ba56640dc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:4b:9c:4d:70:4f:08:b6:e6:4a:00:e7:d8:
c5:cc:87:32:a5:67:67:b5:79:18:b5:3b:fc:39:1b:
c3:31:a6:b0:75:a7:17:20:39:9d:45:61:7d:8e:c1:
37:66:3e:43:92:b1:22:d5:17:5e:f3:34:76:5c:06:
5a:b3:fe:fb:c0:7c:26:0d:af:6e:3a:f7:db:1b:7b:
89:35:e7:de:00:ff:2f:3d:1d:75:d4:13:b2:b8:13:
15:66:f4:6a:f2:a9:70:4b:94:29:8b:06:4e:a7:a2:
44:0d:98:e1:46:c2:14:cb:6c:f8:4d:6c:ca:3f:fd:
1a:06:52:e1:7c:a8:41:d3:e5:ee:bf:18:b0:b1:b0:
b5:27:08:71:1b:c2:45:89:ae:1a:46:5f:24:3f:50:
5d:61:98:5e:0e:84:16:a7:e5:77:80:d1:34:a6:ee:
0a:d6:36:16:0d:5b:9d:7f:61:5e:ef:5b:00:b7:4c:
00:16:67:48:5d:14:ba:d5:13:d7:9a:05:9f:ff:c6:
44:34:09:4c:48:74:19:fa:e2:a0:60:a6:eb:26:22:
eb:58:65:a4:e5:dd:7b:93:85:15:52:b0:a3:47:61:
14:78:32:e2:60:d8:27:fd:91:32:ad:b6:95:60:21:
31:6e:65:9b:b8:97:c5:1a:65:47:ee:a8:e7:dc:c4:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:9C:10:A2:89:80:FB:6C:3E:2C:88:59:CD:0B:A5:66:40:DC:8E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ipicEKKJgPtsPiyIWc0LpWZA3I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.153.0/24
85.133.217.0/24
85.133.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:03:49:78:db:5a:d0:12:ac:93:e3:34:90:bd:8f:84:cc:50:
13:e2:9d:56:fe:52:56:0c:c8:9d:2f:43:e1:fb:d7:d3:86:39:
ce:a7:6d:0c:d9:af:d2:13:ab:a4:5f:23:7f:74:44:19:80:e8:
25:5e:f5:c5:82:ab:f3:33:29:89:21:bf:87:b5:28:ce:d3:44:
8b:47:ca:25:33:49:2f:b0:44:70:2e:8a:f6:ed:99:c9:7c:f2:
45:af:fa:c3:a8:84:e6:33:b8:5a:90:f5:08:77:c3:92:7f:93:
cf:c6:77:af:5b:d5:31:df:f6:73:e2:1f:f2:d7:21:5d:68:3d:
e4:93:9c:b5:98:4c:48:10:b1:be:e8:54:12:3a:ef:5b:58:d7:
08:bc:07:6a:b1:30:a6:37:44:c8:1d:a4:90:56:83:44:ba:12:
0f:b9:8a:09:b8:d7:bc:9b:bf:f6:bd:89:b2:d0:0c:0d:80:43:
0b:20:3e:59:5c:6e:6f:a3:ab:58:ce:6c:d1:ac:64:e0:09:d3:
99:ef:35:1b:4a:0a:69:9a:60:83:4b:64:67:52:36:dd:bb:43:
f2:e1:e7:c3:f4:ab:ac:7c:0c:3f:e6:2b:cc:de:24:90:88:47:
cf:52:d3:5d:a1:38:b0:a6:b3:80:68:98:68:ee:53:09:2a:de:
20:b4:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 13:37:47 2026 by rpki-client