Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Au9bXszlocyVoMwtR7yHKJSJdd8.roa
File: Au9bXszlocyVoMwtR7yHKJSJdd8.roa (raw, json)
Hash identifier: nwgXyCp2VJCxj54VlqhKlW+GmuQayPyEYrSPMy4MTwc=
Subject key identifier: 02:EF:5B:5E:CC:E5:A1:CC:95:A0:CC:2D:47:BC:87:28:94:89:75:DF
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01989D1744CD2B9F0D99620D8CB3E5CDB526
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Au9bXszlocyVoMwtR7yHKJSJdd8.roa
Signing time: Tue 12 Aug 2025 07:03:24 +0000
ROA not before: Tue 12 Aug 2025 07:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215496
IP address blocks: 85.133.208.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:17:44:cd:2b:9f:0d:99:62:0d:8c:b3:e5:cd:b5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 12 07:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02ef5b5ecce5a1cc95a0cc2d47bc8728948975df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:25:ff:3a:7c:ad:5f:5a:72:90:9d:63:e7:6c:
57:21:74:7b:35:26:fa:32:7b:85:f9:81:15:97:54:
ee:15:8e:62:46:41:54:45:6e:67:fb:38:32:a3:8b:
8a:30:96:a4:88:b8:5b:1c:1e:63:b9:76:84:6f:31:
46:1e:4d:af:56:0a:19:33:f4:d3:e1:61:96:4d:9e:
2d:2b:eb:85:d1:d0:0a:33:1a:6e:ad:d0:92:15:a1:
11:e2:86:bb:45:32:ff:fd:72:a0:66:e8:a4:5c:57:
9b:94:cc:c7:8e:40:bc:90:86:40:7c:29:44:d7:25:
8a:8d:a3:37:3a:32:57:19:9b:6c:82:20:fd:84:58:
b9:45:1a:8d:2c:c2:f9:f7:5d:9d:d1:90:c7:23:73:
87:54:f8:f9:96:90:b2:eb:44:f1:4f:b3:96:e3:a2:
a8:e5:80:5b:b6:5b:16:00:b3:46:2f:2c:3d:63:eb:
6c:a5:6c:50:6b:db:03:d4:0c:aa:a5:85:28:cf:2b:
c5:b5:d5:9a:b7:f1:a5:cf:a2:0b:1b:08:c7:aa:f2:
95:bc:78:03:81:56:4e:9e:dd:5e:fc:15:55:24:67:
9b:66:c8:3c:f7:67:cd:74:a9:f2:ad:b1:94:99:5e:
32:07:10:76:c5:69:62:5b:4e:07:cd:51:1c:e3:9c:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EF:5B:5E:CC:E5:A1:CC:95:A0:CC:2D:47:BC:87:28:94:89:75:DF
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Au9bXszlocyVoMwtR7yHKJSJdd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.208.0/24
85.133.227.0/24
Signature Algorithm: sha256WithRSAEncryption
40:99:d0:94:32:c1:e5:60:f7:68:58:8d:ea:94:f2:b6:e9:26:
75:f5:64:fb:bc:96:50:52:54:fd:82:25:dc:ad:f0:30:5f:4e:
df:fe:96:38:8a:3b:9f:4b:d3:ed:2b:16:23:55:ce:16:33:cd:
ec:53:5d:8b:e4:d4:62:1d:79:ec:a8:2e:4e:21:05:cd:02:83:
9a:6d:71:06:95:0b:d5:f7:58:03:8a:cc:cf:57:f3:1b:3f:60:
25:77:39:d9:20:9b:58:2b:26:9c:1f:d5:95:31:6c:3e:6f:e5:
af:09:6a:43:f6:e6:d4:b1:9e:46:f6:77:8a:0d:00:ac:58:1c:
bc:80:48:3a:67:93:eb:0a:d5:ea:e9:f3:25:f7:da:5f:f9:91:
8c:7f:2f:26:7f:77:1f:ad:ff:63:3f:27:d6:c6:ba:9f:e0:07:
44:47:c7:2f:38:8d:92:82:60:6c:93:b9:64:f7:2b:27:86:5b:
b3:f0:09:24:05:27:f8:b4:43:87:1c:81:f6:1d:84:65:d8:15:
a6:86:60:b9:a1:f5:60:cd:4f:99:12:cf:39:97:59:51:80:d3:
8c:90:d5:91:c4:9f:0b:5a:da:d4:61:04:42:1d:e1:33:9e:73:
aa:59:58:d9:87:90:13:59:51:b1:58:45:86:c2:53:05:0f:6d:
e1:c7:88:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZidF0TNK58NmWINjLPlzbUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwODEyMDcwMzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmVmNWI1ZWNjZTVhMWNjOTVhMGNjMmQ0N2JjODcyODk0ODk3NWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iX/OnytX1pykJ1j52xXIXR7NSb6
MnuF+YEVl1TuFY5iRkFURW5n+zgyo4uKMJakiLhbHB5juXaEbzFGHk2vVgoZM/TT
4WGWTZ4tK+uF0dAKMxpurdCSFaER4oa7RTL//XKgZuikXFeblMzHjkC8kIZAfClE
1yWKjaM3OjJXGZtsgiD9hFi5RRqNLML5912d0ZDHI3OHVPj5lpCy60TxT7OW46Ko
5YBbtlsWALNGLyw9Y+tspWxQa9sD1AyqpYUozyvFtdWat/Glz6ILGwjHqvKVvHgD
gVZOnt1e/BVVJGebZsg892fNdKnyrbGUmV4yBxB2xWliW04HzVEc45xNewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFALvW17M5aHMlaDMLUe8hyiUiXXfMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvQXU5YlhzemxvY3lWb013dFI3eUhLSlNKZGQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYXQAwQA
VYXjMA0GCSqGSIb3DQEBCwUAA4IBAQBAmdCUMsHlYPdoWI3qlPK26SZ19WT7vJZQ
UlT9giXcrfAwX07f/pY4ijufS9PtKxYjVc4WM83sU12L5NRiHXnsqC5OIQXNAoOa
bXEGlQvV91gDiszPV/MbP2AldznZIJtYKyacH9WVMWw+b+WvCWpD9ubUsZ5G9neK
DQCsWBy8gEg6Z5PrCtXq6fMl99pf+ZGMfy8mf3cfrf9jPyfWxrqf4AdER8cvOI2S
gmBsk7lk9ysnhluz8AkkBSf4tEOHHIH2HYRl2BWmhmC5ofVgzU+ZEs85l1lRgNOM
kNWRxJ8LWtrUYQRCHeEznnOqWVjZh5ATWVGxWEWGwlMFD23hx4iq
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:12 2025 by rpki-client