Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jgUxlJkGPwcsxNxWSeiIxmkXs4k.roa
File: jgUxlJkGPwcsxNxWSeiIxmkXs4k.roa (raw, json)
Hash identifier: T7OMDx4n354hPK728lnwxNPKv0p6Ko452S13iYgLVrw=
Subject key identifier: 8E:05:31:94:99:06:3F:07:2C:C4:DC:56:49:E8:88:C6:69:17:B3:89
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A101ABADEA2E1A8ED53B6F91F5AE2DD78B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jgUxlJkGPwcsxNxWSeiIxmkXs4k.roa
Signing time: Sat 03 Oct 2026 12:09:50 +0000
ROA not before: Sat 03 Oct 2026 12:09:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43754
IP address blocks: 85.133.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:ab:ad:ea:2e:1a:8e:d5:3b:6f:91:f5:ae:2d:d7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 3 12:09:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e05319499063f072cc4dc5649e888c66917b389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:48:e6:c5:49:2a:74:58:f0:39:d6:ed:e3:
3e:55:24:44:0a:98:45:1d:d1:8a:70:d1:be:be:67:
40:52:56:f1:28:85:ee:f7:ca:ff:7c:38:7b:e8:57:
ab:f4:57:e9:c8:86:45:2f:f8:16:e9:d6:61:aa:3b:
bf:1a:ce:74:7b:17:58:e2:10:62:58:e2:2d:5e:22:
3c:ce:34:4b:2b:52:cb:8c:1e:66:6d:4b:25:20:2e:
04:d0:63:6c:7b:c8:30:e9:ca:f9:12:b2:62:c4:89:
f4:c6:d4:40:49:fd:eb:60:fe:21:14:12:18:c3:3a:
0d:b0:c6:a1:6b:49:4d:56:21:32:ed:b7:be:a6:d6:
0c:e2:a6:c6:04:34:61:d7:60:18:b9:41:a1:e9:28:
a5:a0:df:1d:b7:3d:57:15:db:f7:64:9a:cc:cc:98:
11:fb:0e:62:af:9a:63:9e:35:57:b5:7d:f1:bb:67:
fc:3c:52:21:b5:e0:44:a9:b0:c7:aa:13:bc:77:06:
a2:49:48:41:10:d6:8a:89:53:f0:70:6a:72:2f:e5:
d5:2d:60:ec:b4:8f:46:fa:fb:47:3a:6e:fb:e3:0e:
26:62:bb:27:ec:5b:51:ba:24:53:7e:91:19:a4:fd:
25:d9:ee:c6:62:8d:01:a7:27:82:00:4a:ec:02:17:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:31:94:99:06:3F:07:2C:C4:DC:56:49:E8:88:C6:69:17:B3:89
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jgUxlJkGPwcsxNxWSeiIxmkXs4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.233.0/24
Signature Algorithm: sha256WithRSAEncryption
41:40:4a:86:8d:97:c2:73:7c:36:5d:2f:af:77:57:e6:bd:fb:
44:54:ae:8d:5a:38:2b:c8:0d:fc:fd:1c:7a:51:a4:dd:32:a5:
e2:85:a3:17:53:f5:65:b6:14:6e:14:82:be:cf:6b:72:76:c8:
60:86:4f:6e:cd:db:3a:bd:ff:ab:bf:22:da:b3:b6:60:84:f6:
53:83:46:0d:b1:0f:5d:e6:1f:b4:ae:15:5b:1a:39:0f:7a:f3:
cc:50:21:f1:a4:d0:a3:ea:cd:48:3f:d4:fe:ef:5e:c7:49:3b:
24:4f:0a:f7:dc:f8:50:12:89:7f:f9:7c:5e:71:f3:66:65:a4:
1d:1d:15:83:ff:9a:ab:fa:6b:04:e8:f7:f4:ef:c6:a7:a7:3e:
37:5e:cf:53:9e:ac:3a:94:2c:ae:a7:7b:42:14:be:29:95:2a:
cb:27:e8:dc:09:6b:89:5f:fb:33:5d:da:1e:a0:fb:ca:0f:af:
e1:4f:58:e0:bb:b2:e4:d5:2d:99:6c:60:b1:42:46:f0:24:a1:
75:7a:7f:da:46:0f:db:57:ce:c6:38:ea:18:dd:04:ce:74:d6:
6a:30:86:83:88:9c:97:ba:5e:c5:0d:62:71:56:03:34:33:f2:
45:11:7e:d4:fd:07:ca:a5:76:d6:23:d1:2d:11:f3:10:32:26:
94:a6:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:29 2026 by rpki-client