Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/y_kSlexGeb7TiS61Y5__-h9JwmE.roa
File: y_kSlexGeb7TiS61Y5__-h9JwmE.roa (raw, json)
Hash identifier: mNFhXW+YkUDwWvy3SkZGzRdGhMxel7XfYcdI27PkPjM=
Subject key identifier: CB:F9:12:95:EC:46:79:BE:D3:89:2E:B5:63:9F:FF:FA:1F:49:C2:61
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A12477868354DA16260CD9729BF511EB9A
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/y_kSlexGeb7TiS61Y5__-h9JwmE.roa
Signing time: Sat 10 Oct 2026 06:19:35 +0000
ROA not before: Sat 10 Oct 2026 06:19:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 85.133.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:77:86:83:54:da:16:26:0c:d9:72:9b:f5:11:eb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 10 06:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbf91295ec4679bed3892eb5639ffffa1f49c261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:a2:87:43:00:ba:41:19:bf:45:c2:06:fd:
d3:89:39:aa:83:bf:68:ff:4a:87:bb:24:e2:a4:62:
55:af:1c:6d:06:7e:8b:86:a4:ae:a4:b4:4d:98:7e:
db:f6:b1:16:42:e4:c3:59:c5:a3:ee:1e:dd:bf:49:
de:3a:3f:e0:71:fc:74:7a:dd:36:20:fa:20:82:ee:
67:e1:56:ba:07:f2:66:77:48:b6:c1:be:08:bd:18:
f8:40:fb:26:5c:62:c3:44:31:74:fb:79:6f:c9:2c:
d9:98:9c:58:52:03:82:14:61:2d:f8:fb:3a:4f:f7:
d8:57:5d:93:cc:af:31:6f:62:d4:3b:11:7c:0b:2a:
f2:24:49:31:6f:6c:f9:71:ed:8f:3e:4c:5f:78:1e:
bc:92:88:f6:49:28:4d:f5:c4:5a:dd:cd:62:8d:6a:
5e:47:eb:4b:2c:7e:a2:56:8d:ea:db:51:f1:ef:54:
20:f9:29:30:e8:bd:57:0f:41:4e:8c:98:08:b9:d4:
d7:48:7e:d3:e6:93:d4:e2:ca:d7:9c:05:e3:ac:1b:
4c:e6:0a:ea:ce:8c:53:c9:77:10:29:53:f9:2f:f3:
bd:fc:86:39:84:9c:b1:db:d0:b0:fb:e8:57:8e:b1:
e9:67:82:33:57:f1:30:9b:01:fc:35:65:d0:2a:c2:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F9:12:95:EC:46:79:BE:D3:89:2E:B5:63:9F:FF:FA:1F:49:C2:61
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/y_kSlexGeb7TiS61Y5__-h9JwmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.202.0/24
Signature Algorithm: sha256WithRSAEncryption
84:42:3e:2f:74:34:ab:c7:83:61:81:45:c1:4c:6b:ee:0d:42:
78:44:fb:e3:2e:95:df:dd:7c:06:92:b1:24:6d:d9:36:18:37:
ea:2d:3d:1b:13:38:b2:e7:a5:e4:8a:cf:13:4d:3b:e0:5d:85:
ce:d9:27:ca:44:52:2b:e1:af:d6:83:46:ff:af:3a:54:40:0a:
da:22:6c:c5:fa:0c:b6:44:b4:f1:30:49:4a:39:0c:13:2e:3e:
fd:8d:ea:ab:94:d3:a6:2a:11:d4:6d:9d:46:5f:09:67:d8:df:
34:ab:1f:05:cc:44:46:10:a4:f6:88:c5:f7:90:5e:73:2c:bc:
26:01:b4:e1:eb:9b:ee:87:71:4e:54:95:8c:cd:af:eb:4d:f7:
3c:45:fb:04:29:b1:05:d4:76:c9:4a:6a:d5:ad:bf:85:01:f0:
69:f4:2e:5a:28:70:97:ed:2d:1c:0a:8e:26:31:7f:90:78:9f:
0c:b3:06:1f:00:04:e3:03:de:22:e8:1c:1d:69:9f:f8:8f:97:
0c:33:4c:cb:02:1c:53:f8:c6:13:47:b1:bf:ca:9b:f7:73:52:
a7:39:ce:ca:92:b7:3a:f9:26:5f:89:f0:00:f2:8a:6a:13:05:
c8:8f:24:36:e6:58:ff:13:29:db:cd:95:8c:ed:61:ed:25:f2:
02:31:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:39 2026 by rpki-client