Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1YYlM4ouGP3n966YQQJD1J8Ht1c.roa
File: 1YYlM4ouGP3n966YQQJD1J8Ht1c.roa (raw, json)
Hash identifier: S2bt8De1mjKmpnVjdK4IwIG1kVZf0VST4BMHZsJGgJk=
Subject key identifier: D5:86:25:33:8A:2E:18:FD:E7:F7:AE:98:41:02:43:D4:9F:07:B7:57
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F6A57CC3A88DB531E5D395A55955AAC9D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1YYlM4ouGP3n966YQQJD1J8Ht1c.roa
Signing time: Thu 16 Jul 2026 09:52:46 +0000
ROA not before: Thu 16 Jul 2026 09:52:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215350
IP address blocks: 85.133.207.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:57:cc:3a:88:db:53:1e:5d:39:5a:55:95:5a:ac:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 16 09:52:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d58625338a2e18fde7f7ae98410243d49f07b757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:38:2e:8c:4d:69:ba:a4:6e:0f:ec:e4:79:
7d:04:a3:b0:84:e2:d2:4c:cb:db:5c:59:e4:5c:e9:
cf:6d:eb:1c:91:6b:26:cc:dc:7d:d3:a4:ee:aa:73:
d1:18:26:1a:da:90:f9:05:68:0b:03:11:00:9d:cf:
40:42:f4:73:62:2a:44:4a:84:a2:c0:1c:9e:97:f6:
9e:c1:04:5f:a4:24:37:cf:4a:14:31:df:b2:cc:4a:
dd:c5:91:f2:f9:c0:c0:de:be:02:f5:4e:43:b5:eb:
2c:41:f6:93:45:6f:65:8e:94:82:56:c4:83:be:5c:
3f:16:99:85:25:20:e2:04:81:25:36:5d:60:c4:7b:
8c:e6:19:fe:86:22:55:b3:5e:1b:36:d5:ac:ca:86:
7d:92:2c:36:f0:c7:6d:6f:26:93:0e:cb:df:b4:e3:
37:c9:bf:b0:8d:6b:a8:4b:db:fc:7f:40:52:a5:ae:
a2:af:d5:30:61:98:ba:cb:13:9c:2b:08:a3:52:d7:
bf:50:e6:30:5e:4d:89:48:ec:a9:b6:94:bb:ae:80:
66:0f:26:ed:20:50:e7:b2:7d:4a:9b:13:51:6b:d1:
fd:26:ab:5d:91:91:f2:69:65:a0:67:36:44:3a:8b:
c8:d7:4b:50:71:15:36:ad:0b:95:a0:ee:fb:6d:92:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:86:25:33:8A:2E:18:FD:E7:F7:AE:98:41:02:43:D4:9F:07:B7:57
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1YYlM4ouGP3n966YQQJD1J8Ht1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.207.0/24
85.133.215.0/24
85.133.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6c:26:39:7d:f7:e9:5a:f1:a4:e7:2d:cc:b2:0f:08:bd:50:
3a:f5:58:8b:24:cd:f8:da:4b:5d:da:34:c0:f0:c5:5c:e5:63:
ba:18:59:e2:63:59:1d:04:10:91:d0:71:50:a2:bc:74:be:28:
03:eb:a6:be:98:6e:48:d2:0b:64:96:a6:b6:89:f2:80:cd:51:
7c:18:0a:0c:cd:ca:e2:97:c4:92:b0:6d:60:df:b7:18:ce:8c:
e9:6b:d6:80:94:30:0f:2b:d2:52:45:9f:2b:83:04:78:b4:91:
6e:4a:f6:af:c4:40:48:b0:d6:05:48:79:71:0c:eb:9f:84:ef:
3f:d4:f1:e4:d0:04:86:97:d7:b4:91:31:f0:63:53:39:f5:15:
90:ca:a1:61:32:e6:c0:2e:e1:f0:81:ee:0c:9e:6e:1d:7c:c0:
e9:11:ec:64:4b:35:1b:40:f5:a1:75:93:15:5c:d1:e5:4f:bb:
5d:70:5f:ac:b3:cc:5a:d5:30:24:0c:1e:e3:5a:a9:1e:cc:85:
de:eb:cc:e0:89:b5:2a:95:65:12:50:3b:f1:a2:ae:c4:37:f8:
6e:c6:3c:a6:71:b2:08:86:38:8e:0e:b2:2e:35:68:fc:95:29:
6a:8c:cf:9a:02:79:3e:3a:23:62:f9:11:54:80:6b:63:f2:02:
71:14:08:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:14 2026 by rpki-client