Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sO_yh_ImEqd9a0RWGY0yhEG_whk.roa
File: sO_yh_ImEqd9a0RWGY0yhEG_whk.roa (raw, json)
Hash identifier: 6TzCp8KRDv6vYBWTQaWV5mP2FjGsU6P3ijKKRDG2xPA=
Subject key identifier: B0:EF:F2:87:F2:26:12:A7:7D:6B:44:56:19:8D:32:84:41:BF:C2:19
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019FCB8ED4BD76F95CBE5C5EFD7CCBC16EA3
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sO_yh_ImEqd9a0RWGY0yhEG_whk.roa
Signing time: Tue 04 Aug 2026 06:56:03 +0000
ROA not before: Tue 04 Aug 2026 06:56:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 85.133.196.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:8e:d4:bd:76:f9:5c:be:5c:5e:fd:7c:cb:c1:6e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 4 06:56:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0eff287f22612a77d6b4456198d328441bfc219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2a:f4:64:82:e3:fb:5d:6e:f7:0a:3d:c7:30:
c4:c3:43:94:67:04:9a:48:0f:23:38:d2:3d:84:b1:
c2:e5:14:35:f4:e5:37:5a:a8:bc:5a:c4:24:84:14:
68:3f:89:27:72:c3:79:b2:c1:bc:27:b4:2e:00:25:
4d:a8:39:82:f4:51:23:b7:68:28:c0:8e:4c:d3:06:
2c:52:6a:9d:5e:59:75:68:97:05:fe:d2:4d:42:97:
6a:75:17:89:e9:fb:74:ba:e2:d5:ee:bb:69:a5:c6:
b7:42:e5:f7:0c:01:47:e5:e1:66:41:99:be:f2:ab:
b8:07:9c:bf:84:28:6e:62:4c:57:dc:48:92:0a:a4:
04:99:f7:15:d5:78:f9:05:16:d0:be:67:95:84:77:
44:37:72:ea:f0:69:09:67:c2:bf:aa:19:4f:60:5e:
8e:77:58:fd:c8:08:40:c7:67:70:58:d1:13:5c:37:
d3:1f:f9:8e:24:4a:f6:ed:c1:d3:21:60:3b:65:1f:
00:51:03:97:e8:1e:47:2d:62:61:f0:6e:90:c4:f8:
37:af:c0:56:d0:58:67:7c:0d:f7:e3:a8:43:68:63:
89:01:dd:93:2c:d3:a8:1f:a6:d0:9a:e8:38:62:a6:
df:71:f5:a6:bc:aa:8f:61:de:f2:0b:9f:14:5c:ad:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:F2:87:F2:26:12:A7:7D:6B:44:56:19:8D:32:84:41:BF:C2:19
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sO_yh_ImEqd9a0RWGY0yhEG_whk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.196.0/24
85.133.199.0/24
Signature Algorithm: sha256WithRSAEncryption
03:dc:99:8c:7c:df:5b:9d:28:fc:cf:9b:1a:fa:f9:42:97:df:
e4:e2:8f:cb:5c:2b:9b:6b:1b:3d:51:a4:aa:68:02:47:d9:52:
d3:d9:8c:3b:95:9c:84:82:34:d0:e1:77:f7:33:70:6e:83:c4:
1f:e6:50:d6:b5:41:2d:09:66:6d:21:24:77:9c:70:18:a0:32:
d2:11:02:cf:c4:83:30:f8:38:d9:6a:b6:16:05:27:17:05:8f:
7b:f3:de:52:d1:7b:06:9a:d3:66:b6:06:45:c6:5f:cf:8d:2f:
3a:3d:f1:eb:63:8e:54:bc:57:5c:2a:5a:d7:a2:1d:17:90:42:
a1:ff:b7:b0:3d:17:99:cb:0e:b4:86:55:33:fd:fe:2d:6c:3a:
d1:0e:c2:e9:d6:b6:c8:be:86:3c:fa:ca:45:88:a0:5a:09:70:
c1:56:10:ef:36:5b:30:97:b5:76:c9:ab:27:db:fc:9b:bd:71:
72:de:18:32:b6:54:94:02:04:f2:ed:de:ce:e0:d9:91:de:22:
ea:c0:65:69:29:1e:fb:f8:d9:25:ae:83:dd:7a:1d:78:29:c3:
5a:be:09:43:81:69:59:0b:20:b1:14:b6:97:c0:1b:b9:6a:a8:
92:82:c9:c1:8a:9b:c2:c9:97:90:7f:6d:f0:db:70:8f:ec:7b:
77:08:c1:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/LjtS9dvlcvlxe/XzLwW6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYwODA0MDY1NjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGVmZjI4N2YyMjYxMmE3N2Q2YjQ0NTYxOThkMzI4NDQxYmZjMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Sr0ZILj+11u9wo9xzDEw0OUZwSa
SA8jONI9hLHC5RQ19OU3Wqi8WsQkhBRoP4kncsN5ssG8J7QuACVNqDmC9FEjt2go
wI5M0wYsUmqdXll1aJcF/tJNQpdqdReJ6ft0uuLV7rtppca3QuX3DAFH5eFmQZm+
8qu4B5y/hChuYkxX3EiSCqQEmfcV1Xj5BRbQvmeVhHdEN3Lq8GkJZ8K/qhlPYF6O
d1j9yAhAx2dwWNETXDfTH/mOJEr27cHTIWA7ZR8AUQOX6B5HLWJh8G6QxPg3r8BW
0FhnfA3346hDaGOJAd2TLNOoH6bQmug4YqbfcfWmvKqPYd7yC58UXK3SLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLDv8ofyJhKnfWtEVhmNMoRBv8IZMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvc09feWhfSW1FcWQ5YTBSV0dZMHloRUdfd2hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYXEAwQA
VYXHMA0GCSqGSIb3DQEBCwUAA4IBAQAD3JmMfN9bnSj8z5sa+vlCl9/k4o/LXCub
axs9UaSqaAJH2VLT2Yw7lZyEgjTQ4Xf3M3Bug8Qf5lDWtUEtCWZtISR3nHAYoDLS
EQLPxIMw+DjZarYWBScXBY97895S0XsGmtNmtgZFxl/PjS86PfHrY45UvFdcKlrX
oh0XkEKh/7ewPReZyw60hlUz/f4tbDrRDsLp1rbIvoY8+spFiKBaCXDBVhDvNlsw
l7V2yasn2/ybvXFy3hgytlSUAgTy7d7O4NmR3iLqwGVpKR77+NklroPdeh14KcNa
vglDgWlZCyCxFLaXwBu5aqiSgsnBipvCyZeQf23w23CP7Ht3CMHT
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:02 2026 by rpki-client