Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zUq98b8i___94VbqFU7J_4ODp-o.roa
File: zUq98b8i___94VbqFU7J_4ODp-o.roa (raw, json)
Hash identifier: /9n8pSxth5HcINO3N8uYE4G/IAGbUmN6Ln6dn0v47CM=
Subject key identifier: CD:4A:BD:F1:BF:22:FF:FF:FD:E1:56:EA:15:4E:C9:FF:83:83:A7:EA
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A05CE083E952CD0A3FC05162AC5F774977
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zUq98b8i___94VbqFU7J_4ODp-o.roa
Signing time: Tue 01 Sep 2026 12:10:12 +0000
ROA not before: Tue 01 Sep 2026 12:10:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 85.133.206.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:e0:83:e9:52:cd:0a:3f:c0:51:62:ac:5f:77:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 1 12:10:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd4abdf1bf22fffffde156ea154ec9ff8383a7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:e2:af:4e:dc:a8:db:21:df:53:bf:1e:d4:
90:bc:73:eb:ed:1d:97:61:73:1d:fb:5c:dd:d4:5b:
08:1f:8f:a7:0d:93:2c:db:20:fe:69:00:e2:db:f9:
b0:a0:d3:77:5d:70:e7:13:8d:37:6d:0f:a2:f0:02:
3c:4f:84:1c:ee:4c:de:9d:61:8f:17:c3:34:b9:0f:
4b:29:a7:e5:3a:a5:07:98:ee:2d:2f:33:1c:be:3b:
54:6a:bf:eb:26:67:f1:07:d6:bd:1a:4b:33:75:ac:
4a:5c:21:b3:4d:0d:d2:41:46:9b:f1:d5:cb:92:c7:
11:cf:fb:0f:5c:40:29:91:4e:3b:b8:40:35:45:58:
63:18:e2:ec:79:bf:a1:fb:1c:fe:28:4d:9f:91:a1:
bc:b4:75:2f:a9:20:f4:1f:66:f3:c1:44:bd:af:d1:
84:7c:67:7f:d5:9a:50:17:e3:ec:8c:8b:f0:18:c3:
87:50:65:a2:df:90:7b:c6:63:b1:cc:90:da:09:c1:
78:b0:a6:20:51:4e:f0:b5:22:bf:c3:83:2e:71:57:
68:5d:61:da:94:e5:3d:7d:96:c6:57:05:cf:9a:94:
8e:21:91:e8:a6:0a:fd:20:a2:5f:cf:de:ec:0c:68:
25:17:32:29:2d:07:4f:4d:6c:ff:d7:1e:58:4e:cf:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4A:BD:F1:BF:22:FF:FF:FD:E1:56:EA:15:4E:C9:FF:83:83:A7:EA
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zUq98b8i___94VbqFU7J_4ODp-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.206.0/24
85.133.254.0/24
Signature Algorithm: sha256WithRSAEncryption
96:99:b2:de:be:5d:d0:f8:53:b7:48:70:6b:74:7e:c3:6a:56:
f4:51:00:42:19:d8:d0:04:13:51:30:73:46:4f:02:af:e5:ec:
66:78:9e:97:ae:17:bf:0d:7e:90:18:f8:13:cd:3c:c5:b9:c7:
c3:57:f2:76:81:57:ad:c3:fd:cc:b4:d0:15:ee:f7:19:bc:81:
97:9c:24:a2:9b:23:11:a1:d9:cd:1b:65:ea:91:36:c3:9a:f9:
e5:80:8a:5a:00:3d:a1:88:04:75:1b:35:54:8a:a6:bb:fe:55:
ba:b6:0c:1b:91:3a:0e:55:eb:de:75:70:ca:43:3e:c7:70:a2:
de:74:35:cc:60:27:fd:3c:57:8c:4c:bf:06:5e:53:ba:67:7c:
7c:80:b2:49:aa:99:cc:26:1c:8e:17:e5:2a:a4:66:89:50:fe:
a5:d9:04:44:7d:0a:28:d9:7b:a2:0c:53:15:ee:a4:c4:de:a4:
24:73:df:28:89:44:9d:94:e3:5a:31:c7:c5:40:79:1c:8b:46:
c4:54:d6:b1:1f:28:17:7c:f4:31:8e:4f:7e:45:d9:73:9f:b6:
73:68:e2:c4:23:9b:e3:d4:c7:90:e2:16:d5:4b:c5:b5:c4:ef:
7c:d2:c6:24:be:69:ba:02:00:6c:9e:ae:08:dd:33:72:73:ea:
90:9e:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:00 2026 by rpki-client