Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kjRidx0D39Ao0112FfgdK6_4QsQ.roa
File: kjRidx0D39Ao0112FfgdK6_4QsQ.roa (raw, json)
Hash identifier: 1c4wEZ+8x5KA1HUnAkNWdzJa0JfekRogYEyNw7TG30w=
Subject key identifier: 92:34:62:77:1D:03:DF:D0:28:D3:5D:76:15:F8:1D:2B:AF:F8:42:C4
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A033D368903FA87FE66B56D9B2EDF96BD7
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kjRidx0D39Ao0112FfgdK6_4QsQ.roa
Signing time: Mon 24 Aug 2026 12:51:27 +0000
ROA not before: Mon 24 Aug 2026 12:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47216
IP address blocks: 85.133.208.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:d3:68:90:3f:a8:7f:e6:6b:56:d9:b2:ed:f9:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 24 12:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=923462771d03dfd028d35d7615f81d2baff842c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:b5:d3:e6:68:5d:4e:c3:9c:eb:6f:bc:42:
ed:85:24:2a:28:68:0d:e5:a0:22:27:23:c5:c6:ea:
be:52:91:0d:17:40:86:54:b7:4b:1e:b0:2f:60:85:
f8:68:cc:27:7a:e5:9c:e2:c5:dd:f0:2f:8b:b0:38:
77:ce:88:08:59:27:91:41:a0:95:ca:0d:98:b9:b0:
e7:c1:aa:6a:4b:f6:d4:3e:07:43:a3:e4:fd:d9:63:
e5:9e:7a:21:f8:ae:bb:12:e7:fd:6e:a7:0d:54:da:
af:d9:0e:e1:51:a0:5b:d2:5b:82:fc:79:e7:29:ae:
c4:04:d1:16:57:8f:7a:e5:d1:5e:0f:73:6c:d4:92:
52:85:9d:ea:2e:4f:95:ca:40:c8:1f:96:fc:43:b6:
ef:ca:67:42:16:71:d0:c5:56:06:12:9d:30:97:c3:
40:6c:e6:db:64:67:0b:48:00:c0:4a:de:9d:5d:3e:
c5:e0:98:f7:3a:78:db:56:a9:0f:b9:44:b7:66:52:
b4:a2:05:68:7b:12:6e:db:a0:f7:5e:8d:36:85:ef:
ab:77:84:12:e3:cf:8e:ab:9d:a2:2d:48:2b:01:c7:
e4:9d:30:10:9c:60:e7:c9:2e:a2:93:ff:ae:02:aa:
35:ce:6f:22:40:ba:40:ae:69:c3:40:fc:85:aa:6e:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:62:77:1D:03:DF:D0:28:D3:5D:76:15:F8:1D:2B:AF:F8:42:C4
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kjRidx0D39Ao0112FfgdK6_4QsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.208.0/24
85.133.244.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d2:26:5d:cc:f9:be:93:14:8f:23:6b:84:0e:c6:df:a9:c2:
ca:5a:00:87:04:69:0d:bb:a7:b5:3d:00:10:ec:67:82:1b:d6:
22:a2:10:28:95:69:de:b6:03:8c:db:9c:8d:49:b7:82:d0:4e:
e7:21:ed:1e:ae:20:bd:b3:71:76:46:a9:64:38:bd:d3:a8:81:
02:1d:a7:31:5e:e8:66:86:07:22:d8:a7:7d:1c:6f:f7:b8:f0:
8d:e0:97:c9:b2:02:f4:3a:b4:b5:0b:7c:6f:49:8a:35:dd:77:
25:cf:ef:e9:7c:65:57:c9:16:6e:86:9e:e5:eb:00:10:63:c0:
e8:b6:cd:15:27:32:97:dd:1d:9e:9c:f0:08:0f:e2:34:a9:c0:
38:69:2d:24:a4:5c:ce:a9:f4:e5:22:74:76:59:6c:99:40:77:
62:8d:5b:7a:25:8d:16:2c:c8:90:91:44:04:df:ac:83:d5:05:
b8:29:39:34:c7:42:11:78:3e:19:84:44:18:e4:9e:14:ac:f6:
db:eb:91:de:03:ed:88:01:2c:76:9d:4d:19:91:ee:b4:4a:f9:
5b:1f:c5:e1:10:36:46:9c:a9:e1:3d:6c:39:98:7f:c6:6a:6d:
45:85:95:4b:c1:06:90:f1:fd:24:0e:37:d3:b2:32:70:8f:66:
a8:3d:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:42 2026 by rpki-client