Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zYYcMK9_Z8iQ75FHs9lRWsYRvFs.roa
File: zYYcMK9_Z8iQ75FHs9lRWsYRvFs.roa (raw, json)
Hash identifier: mLkZnxiZj+rW0Z8QtB8Y0ZUF3d1LdSeO3jM5XAvPGww=
Subject key identifier: CD:86:1C:30:AF:7F:67:C8:90:EF:91:47:B3:D9:51:5A:C6:11:BC:5B
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F1C7393BC264BDDC3BBABAA460938917F
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zYYcMK9_Z8iQ75FHs9lRWsYRvFs.roa
Signing time: Wed 01 Jul 2026 06:52:44 +0000
ROA not before: Wed 01 Jul 2026 06:52:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 85.133.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:73:93:bc:26:4b:dd:c3:bb:ab:aa:46:09:38:91:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 1 06:52:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd861c30af7f67c890ef9147b3d9515ac611bc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:f9:53:ba:3b:29:b4:80:f2:77:83:72:6d:
42:c7:5a:83:14:eb:17:9d:40:7c:13:52:a2:2d:ca:
e0:ef:a4:fd:37:ed:8b:93:cf:2c:2b:99:52:ad:db:
89:b5:92:f1:33:08:ed:9c:16:15:6a:83:d7:7b:56:
d8:8d:df:71:19:9c:06:be:44:d7:f2:f7:55:91:f6:
c5:0a:5d:1e:b0:70:31:11:32:f0:52:7c:89:7d:6c:
e2:2b:b3:47:e4:73:fb:a4:8d:43:d9:67:b7:e1:5e:
ed:20:d5:71:01:ea:1d:7d:4d:33:39:bb:8a:70:8c:
0a:66:fa:34:c5:f9:00:2e:ce:c0:7a:57:66:20:dc:
b8:00:ed:44:57:36:cf:85:ba:db:75:dd:be:58:a0:
ec:04:a0:43:1a:ee:c2:1b:98:af:97:cb:12:95:78:
d5:b3:f4:4b:1a:81:41:8e:90:4c:7a:f8:c7:90:e7:
37:15:f7:08:9d:4e:fd:ac:f5:ba:d9:bc:2b:20:6d:
4f:72:53:7e:29:86:31:c5:74:fb:6a:42:84:02:cc:
35:74:a7:37:03:30:5a:5a:5b:be:18:10:ed:7b:eb:
cd:f2:5b:20:fa:7b:33:b9:ce:a2:5e:00:8b:7e:f6:
0f:d6:45:4c:24:6b:06:55:23:d3:1c:e1:bf:f3:67:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:1C:30:AF:7F:67:C8:90:EF:91:47:B3:D9:51:5A:C6:11:BC:5B
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zYYcMK9_Z8iQ75FHs9lRWsYRvFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.220.0/24
Signature Algorithm: sha256WithRSAEncryption
46:56:48:89:63:38:89:67:24:57:c6:76:55:bc:ca:5d:f5:ae:
fa:3a:8f:bb:02:ba:46:70:a8:16:cd:3d:54:54:9b:be:82:db:
d0:6c:83:55:0a:54:cb:3f:7b:8f:93:7b:dd:10:aa:fa:e2:1e:
70:ad:7a:17:a3:79:63:ef:89:e5:26:de:58:25:49:78:7b:26:
d4:f3:42:36:02:28:1f:e8:57:e9:c3:64:24:a5:11:18:8f:2d:
f9:67:f9:d5:d8:47:56:42:e1:8a:6a:cd:a5:d0:89:b5:d6:16:
36:83:38:1f:53:3d:85:f3:df:39:bf:d7:f6:48:fb:c1:aa:02:
55:57:39:66:a8:9d:02:cb:af:70:cc:9f:11:51:8b:6d:a3:14:
2e:b9:ba:38:31:71:1f:62:2d:1a:99:2c:38:b3:98:f4:83:ad:
cd:87:f4:2b:4b:fc:42:81:0b:4c:74:a2:60:3c:d9:48:0e:62:
77:63:9d:bc:c0:b5:a4:bc:33:1a:15:30:44:f7:54:40:d4:fc:
6c:0b:f9:c6:5e:2f:96:8c:9c:9d:47:a1:0b:68:85:dc:52:66:
56:12:09:f2:3f:de:7a:d4:a3:cf:f4:2c:f2:6a:1e:89:00:bb:
0b:ff:aa:ac:8d:8c:20:01:f9:21:31:78:52:52:d8:bd:d7:5a:
a0:8e:0d:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8cc5O8Jkvdw7urqkYJOJF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYwNzAxMDY1MjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDg2MWMzMGFmN2Y2N2M4OTBlZjkxNDdiM2Q5NTE1YWM2MTFiYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27b5U7o7KbSA8neDcm1Cx1qDFOsX
nUB8E1KiLcrg76T9N+2Lk88sK5lSrduJtZLxMwjtnBYVaoPXe1bYjd9xGZwGvkTX
8vdVkfbFCl0esHAxETLwUnyJfWziK7NH5HP7pI1D2We34V7tINVxAeodfU0zObuK
cIwKZvo0xfkALs7AeldmINy4AO1EVzbPhbrbdd2+WKDsBKBDGu7CG5ivl8sSlXjV
s/RLGoFBjpBMevjHkOc3FfcInU79rPW62bwrIG1PclN+KYYxxXT7akKEAsw1dKc3
AzBaWlu+GBDte+vN8lsg+nszuc6iXgCLfvYP1kVMJGsGVSPTHOG/82cX2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM2GHDCvf2fIkO+RR7PZUVrGEbxbMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvellZY01LOV9aOGlRNzVGSHM5bFJXc1lSdkZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXcMA0G
CSqGSIb3DQEBCwUAA4IBAQBGVkiJYziJZyRXxnZVvMpd9a76Oo+7ArpGcKgWzT1U
VJu+gtvQbINVClTLP3uPk3vdEKr64h5wrXoXo3lj74nlJt5YJUl4eybU80I2Aigf
6Ffpw2QkpREYjy35Z/nV2EdWQuGKas2l0Im11hY2gzgfUz2F8985v9f2SPvBqgJV
VzlmqJ0Cy69wzJ8RUYttoxQuubo4MXEfYi0amSw4s5j0g63Nh/QrS/xCgQtMdKJg
PNlIDmJ3Y528wLWkvDMaFTBE91RA1PxsC/nGXi+WjJydR6ELaIXcUmZWEgnyP956
1KPP9Czyah6JALsL/6qsjYwgAfkhMXhSUti911qgjg3I
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:08 2026 by rpki-client