Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/k8fqwtdh-LqC0pAvtPALHqE5INc.roa
File: k8fqwtdh-LqC0pAvtPALHqE5INc.roa (raw, json)
Hash identifier: rvx1N8KpHxv0A4ACkabIbMcUvyIz9Ia7cTJGcRNlkzw=
Subject key identifier: 93:C7:EA:C2:D7:61:F8:BA:82:D2:90:2F:B4:F0:0B:1E:A1:39:20:D7
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019909194A91C2A1D2151091B5E9C540A931
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/k8fqwtdh-LqC0pAvtPALHqE5INc.roa
Signing time: Tue 02 Sep 2025 06:24:36 +0000
ROA not before: Tue 02 Sep 2025 06:24:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 85.133.201.0/24 maxlen: 24
85.133.202.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:19:4a:91:c2:a1:d2:15:10:91:b5:e9:c5:40:a9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 2 06:24:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93c7eac2d761f8ba82d2902fb4f00b1ea13920d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:17:76:38:51:79:73:41:59:29:0f:d6:a2:
88:1d:3d:08:5d:e6:a6:5c:6a:a8:00:b1:16:11:b5:
6f:5c:44:7c:8e:6d:39:96:21:9b:2b:4f:dc:be:4b:
6f:41:c9:80:fa:2b:78:5b:f8:a7:dc:eb:85:5d:5e:
85:39:04:31:64:a8:03:72:cd:5a:d4:10:12:65:30:
f8:85:17:fd:39:70:a8:72:f7:c8:2a:60:d2:5f:b2:
cb:b1:ee:f5:76:d5:ec:0b:ed:a6:80:dc:a1:f8:e2:
80:aa:8f:63:bc:a8:f2:a8:5b:ff:71:28:aa:7c:95:
ba:ba:cb:74:58:6e:e0:63:73:e4:8b:ec:8d:f9:26:
4b:20:dc:89:0b:99:97:e4:f0:97:05:95:23:2c:be:
a2:8f:9d:69:b8:4d:9b:fe:cf:67:b0:2b:db:40:96:
d2:cc:01:d0:06:9b:e9:11:e7:c5:bd:f8:bc:99:ad:
27:92:03:5a:99:65:b3:2c:66:44:07:49:37:8e:46:
f9:83:48:95:77:7e:c9:cd:7a:1e:6e:2a:a7:72:f9:
4a:17:98:2d:cb:17:c9:b8:82:fe:de:51:02:ab:24:
72:66:90:bd:d1:5e:5e:ab:fb:7d:c4:28:df:ab:7d:
a4:42:1b:9b:39:35:12:3e:e0:8a:76:e1:e2:dd:2c:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C7:EA:C2:D7:61:F8:BA:82:D2:90:2F:B4:F0:0B:1E:A1:39:20:D7
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/k8fqwtdh-LqC0pAvtPALHqE5INc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.201.0-85.133.204.255
85.133.228.0/24
85.133.238.0/24
85.133.241.0/24
85.133.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:72:10:eb:86:ed:04:a4:23:1d:f1:02:ff:c0:41:3a:69:91:
c8:c9:ee:ff:07:68:6b:9e:4e:36:03:8a:7a:1e:7b:dc:a6:d7:
70:fd:19:1d:e7:da:92:91:29:da:00:52:37:79:65:0b:15:33:
6e:0f:aa:28:75:00:fd:f2:80:42:77:87:f8:1c:49:c7:dc:e0:
4d:47:64:a4:98:5e:8c:88:f1:b9:de:95:e3:8d:83:3e:5f:e4:
83:b2:70:f6:60:10:be:b0:cb:bc:3f:ef:cc:e6:2e:7a:14:57:
c7:a6:53:4c:d6:31:82:f8:3e:11:d3:fd:a2:3d:0a:42:c2:bd:
6a:59:01:61:a6:55:7f:85:fd:a0:e7:60:91:df:79:0c:6f:2c:
1a:3e:6f:b3:45:47:61:6c:58:e6:00:66:58:b6:be:3d:53:87:
12:1a:7f:cf:b9:9c:e7:c6:d2:18:60:5b:8b:42:6e:e3:15:e3:
77:b5:16:c2:29:9a:4d:3a:16:9c:4c:6e:0e:18:56:c0:5f:2e:
c6:64:6b:1f:71:82:2a:d5:67:8f:d0:14:52:98:29:f3:38:e7:
ce:59:a8:0d:5e:53:4b:ad:c4:3e:43:0e:9f:30:ee:52:03:01:
76:96:34:07:dc:2f:57:40:97:a9:35:7a:e9:8c:aa:88:ab:d8:
31:6d:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:12:26 2025 by rpki-client