Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/lvx3JlQBpSJG5Ch_iOXwHJJ0DhM.roa
File: lvx3JlQBpSJG5Ch_iOXwHJJ0DhM.roa (raw, json)
Hash identifier: U5Y6ywPu92lwgC0cmwHumYFkvFxD73ZCuJYDjwNJgrg=
Subject key identifier: 96:FC:77:26:54:01:A5:22:46:E4:28:7F:88:E5:F0:1C:92:74:0E:13
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019EB09E1917B2977D5DE22A8D6C97665ACB
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/lvx3JlQBpSJG5Ch_iOXwHJJ0DhM.roa
Signing time: Wed 10 Jun 2026 08:20:11 +0000
ROA not before: Wed 10 Jun 2026 08:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:9e:19:17:b2:97:7d:5d:e2:2a:8d:6c:97:66:5a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 10 08:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96fc77265401a52246e4287f88e5f01c92740e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:ec:f7:00:2e:a9:55:ef:ec:5f:7b:48:c9:
75:68:df:5f:0c:59:8b:d1:13:bb:83:08:a7:96:f3:
c6:22:a8:3a:30:7d:aa:62:2f:c2:01:9a:2a:42:e5:
d7:71:a4:6a:9b:1d:a1:c0:92:d7:f3:5a:94:fd:f3:
b8:49:40:e9:12:58:bf:8b:c9:07:b0:3e:fa:29:14:
22:b2:8d:87:73:11:77:e7:d0:ac:09:e1:c5:4d:08:
aa:b5:4b:8d:4b:42:4b:0c:3a:a8:39:5f:6f:97:6d:
45:61:17:4e:9f:5d:f5:9c:c4:cc:ef:b1:93:db:ab:
ba:d8:98:bc:43:30:3f:36:b4:e6:83:cf:83:79:3d:
ab:16:0b:79:58:1c:db:c6:43:7a:1d:b9:1c:0e:2f:
d4:9d:1d:f3:f5:9c:f9:60:ef:ce:3f:2d:4c:d4:f0:
6c:e6:71:40:e7:e2:60:d0:5b:fb:63:ec:12:1b:ba:
86:3b:f6:e7:96:95:e9:af:11:9d:1d:85:28:bd:71:
2b:2a:90:fe:92:1f:e8:3f:ad:c2:90:9b:56:62:57:
f9:c0:8a:cc:95:51:0d:5a:a5:20:d0:39:60:fa:11:
ca:24:8f:6b:f3:ce:2d:5b:98:e0:cc:09:38:eb:71:
9e:cd:f8:0f:cb:b9:f5:5a:43:f0:78:d3:05:6d:97:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FC:77:26:54:01:A5:22:46:E4:28:7F:88:E5:F0:1C:92:74:0E:13
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/lvx3JlQBpSJG5Ch_iOXwHJJ0DhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.139.255
85.133.141.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.200.0/24
85.133.204.0/24
85.133.207.0/24
85.133.209.0-85.133.213.255
85.133.215.0-85.133.216.255
85.133.218.0/24
85.133.222.0-85.133.224.255
85.133.226.0/24
85.133.228.0/24
85.133.231.0-85.133.232.255
85.133.235.0-85.133.236.255
85.133.238.0/24
85.133.244.0/23
85.133.247.0/24
85.133.251.0/24
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
27:9e:18:ea:52:3d:79:69:53:30:eb:28:e8:67:94:c1:21:dc:
95:b9:d5:6b:a8:e4:bf:fb:0c:b5:c5:27:5c:0f:49:43:84:0a:
08:d0:cc:8e:93:0a:31:ba:19:af:7d:be:af:b7:32:ab:6e:5d:
9c:b6:bc:5b:27:4a:64:ab:38:de:d5:24:f1:f7:d4:7a:d6:85:
f2:e8:ed:f4:08:db:87:58:f8:28:4a:8d:1d:c7:bc:c6:1e:5d:
62:e6:90:31:da:98:90:92:66:94:8a:ca:00:f4:fa:1c:dc:96:
44:b4:c3:e8:22:a5:12:0d:f1:56:e2:a8:87:63:5a:c8:bd:1e:
dd:61:73:69:7b:af:1b:3e:97:a2:be:ca:b1:17:e4:11:46:c7:
50:1c:11:c8:22:14:0e:35:ab:e5:aa:85:5f:54:80:85:9c:98:
0b:5a:b0:59:d2:0c:26:48:43:05:b1:1c:6f:a7:4b:b1:c4:c1:
78:aa:47:8c:05:8a:b3:a1:a3:c0:ed:49:be:b3:6d:b3:33:c9:
9c:8e:d2:7f:86:90:e8:8d:88:7f:36:f9:be:75:23:04:9b:9b:
a4:f6:0e:79:98:cc:01:39:ee:da:4c:f4:a5:d5:ec:ac:b9:44:
c6:59:60:57:f3:1c:24:7e:71:5a:2a:57:e8:de:94:bc:83:46:
ea:53:b4:8c
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgISAZ6wnhkXspd9XeIqjWyXZlrLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYwNjEwMDgyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmZjNzcyNjU0MDFhNTIyNDZlNDI4N2Y4OGU1ZjAxYzkyNzQwZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOHs9wAuqVXv7F97SMl1aN9fDFmL
0RO7gwinlvPGIqg6MH2qYi/CAZoqQuXXcaRqmx2hwJLX81qU/fO4SUDpEli/i8kH
sD76KRQiso2HcxF359CsCeHFTQiqtUuNS0JLDDqoOV9vl21FYRdOn131nMTM77GT
26u62Ji8QzA/NrTmg8+DeT2rFgt5WBzbxkN6HbkcDi/UnR3z9Zz5YO/OPy1M1PBs
5nFA5+Jg0Fv7Y+wSG7qGO/bnlpXprxGdHYUovXErKpD+kh/oP63CkJtWYlf5wIrM
lVENWqUg0Dlg+hHKJI9r884tW5jgzAk463GezfgPy7n1WkPweNMFbZfQDwIDAQAB
o4IC1zCCAtMwHQYDVR0OBBYEFJb8dyZUAaUiRuQof4jl8BySdA4TMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvbHZ4M0psUUJwU0pHNUNoX2lPWHdISkowRGhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHsBggrBgEFBQcBBwEB/wSB3DCB2TCBxwQCAAEwgcAwDAME
B1WFgAMEAlWFiDAMAwQAVYWNAwQAVYWYMAwDBAFVhZoDBAVVhYAwDAMEAlWFpAME
AFWFwAMEAFWFyAMEAFWFzAMEAFWFzzAMAwQAVYXRAwQBVYXUMAwDBABVhdcDBABV
hdgDBABVhdowDAMEAVWF3gMEAFWF4AMEAFWF4gMEAFWF5DAMAwQAVYXnAwQAVYXo
MAwDBABVhesDBABVhewDBABVhe4DBAFVhfQDBABVhfcDBABVhfsDBABVhf8wDQQC
AAIwBwMFAyoEh8AwDQYJKoZIhvcNAQELBQADggEBACeeGOpSPXlpUzDrKOhnlMEh
3JW51Wuo5L/7DLXFJ1wPSUOECgjQzI6TCjG6Ga99vq+3MqtuXZy2vFsnSmSrON7V
JPH31HrWhfLo7fQI24dY+ChKjR3HvMYeXWLmkDHamJCSZpSKygD0+hzclkS0w+gi
pRIN8VbiqIdjWsi9Ht1hc2l7rxs+l6K+yrEX5BFGx1AcEcgiFA41q+WqhV9UgIWc
mAtasFnSDCZIQwWxHG+nS7HEwXiqR4wFirOho8DtSb6zbbMzyZyO0n+GkOiNiH82
+b51IwSbm6T2DnmYzAE57tpM9KXV7Ky5RMZZYFfzHCR+cVoqV+jelLyDRupTtIw=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:31:26 2026 by rpki-client