Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1C6A6LTtabBa0epCI4ajIA8lQm0.roa
File: 1C6A6LTtabBa0epCI4ajIA8lQm0.roa (raw, json)
Hash identifier: 0YG5kYaHQz+kPqSGDVtRfMOTa6MMpN/M9J+snpbMWz4=
Subject key identifier: D4:2E:80:E8:B4:ED:69:B0:5A:D1:EA:42:23:86:A3:20:0F:25:42:6D
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01969F80A5461BD8219D0719E277CBADCB31
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1C6A6LTtabBa0epCI4ajIA8lQm0.roa
Signing time: Mon 05 May 2025 08:12:10 +0000
ROA not before: Mon 05 May 2025 08:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.194.0/24 maxlen: 24
85.133.208.0/23 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/23 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:80:a5:46:1b:d8:21:9d:07:19:e2:77:cb:ad:cb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 5 08:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42e80e8b4ed69b05ad1ea422386a3200f25426d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:ea:3c:7c:72:77:f7:c2:01:4a:91:28:3f:
8f:b0:51:54:4b:5c:fe:4e:9c:d2:ad:17:37:a4:b5:
b4:cf:69:4b:c9:e0:56:9e:8b:fa:4b:e2:0a:73:2b:
bc:b0:4f:de:ec:52:a6:3f:0d:08:80:80:49:51:1e:
af:cd:af:46:f5:91:84:b8:d4:a1:bb:66:df:4b:c2:
cb:ad:f1:f7:b7:b8:22:fa:04:76:44:ee:00:fc:79:
b4:12:09:0b:d5:45:84:20:2b:88:c1:9d:22:ed:2f:
39:1f:bd:de:3c:b7:c4:24:d1:63:4f:17:d6:a3:6c:
58:74:64:86:6e:28:b1:c2:75:17:7f:65:d2:a6:4b:
11:0c:a6:8b:90:7d:01:75:9d:cc:24:32:94:a0:6b:
cf:15:1c:24:1a:c4:cc:dd:58:63:57:ec:db:92:3d:
3a:e4:10:ce:6f:51:44:e2:ec:9e:1a:24:40:64:72:
f2:1f:4f:2f:1e:45:bb:19:64:80:9e:27:5f:09:b7:
55:ad:3b:bf:c3:02:93:44:7c:07:15:4e:42:74:66:
f9:5e:b4:07:84:4b:7c:ee:7e:af:78:68:c0:ae:a7:
f0:d0:f1:c6:00:4f:ed:3b:6a:49:d7:b9:a7:84:8f:
8e:1c:bd:76:0c:af:20:fb:fc:d1:ed:d7:9d:13:56:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2E:80:E8:B4:ED:69:B0:5A:D1:EA:42:23:86:A3:20:0F:25:42:6D
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1C6A6LTtabBa0epCI4ajIA8lQm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0-85.133.192.255
85.133.194.0/24
85.133.208.0-85.133.214.255
85.133.220.0/24
85.133.222.0/23
85.133.225.0-85.133.232.255
85.133.234.0/23
85.133.239.0/24
85.133.244.0-85.133.249.255
85.133.251.0-85.133.252.255
85.133.254.0/23
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:65:38:f3:56:66:bd:ad:98:22:f0:da:c4:87:5a:e1:71:e2:
4a:20:20:42:c1:e9:14:fc:43:15:46:84:0b:11:37:84:ef:69:
ae:57:55:b6:c2:83:65:ef:0a:54:ae:65:b8:fc:16:25:09:38:
25:cc:b6:cf:6f:93:d2:3c:75:e1:d9:21:40:c0:fd:df:31:84:
0c:d1:b6:2a:d4:1f:f6:da:38:dd:60:e8:81:fd:84:14:80:ac:
19:92:a5:31:10:d5:51:a7:44:d0:35:84:0c:59:0a:cf:a4:4f:
78:83:2e:60:b2:7f:93:5b:fa:17:a3:a7:23:ac:42:92:52:f5:
45:40:d0:28:44:83:08:aa:13:e0:24:f3:9d:5e:5a:13:14:0f:
e0:e0:74:65:30:a4:21:f1:39:f7:df:3e:40:2b:6a:54:b4:e0:
86:f3:8c:a4:78:dc:44:34:92:ba:c4:4d:93:48:3c:bb:b9:95:
c7:8a:4b:9e:7d:b1:c5:6a:b1:b4:ee:84:77:86:1c:77:26:b0:
46:cb:9e:85:b3:65:65:21:d4:15:35:06:23:3c:08:ed:1c:b5:
69:6b:01:6f:45:d3:bd:b5:3d:c4:63:c4:7d:f7:3c:ef:f6:d8:
a0:03:07:a8:bc:96:d0:9a:68:4b:c5:d5:80:44:02:7b:71:6f:
a2:60:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:11:38 2025 by rpki-client