Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/B4lpUIM7B5EFxoqgmZPk6406HiU.roa
File: B4lpUIM7B5EFxoqgmZPk6406HiU.roa (raw, json)
Hash identifier: v1Mpazt0lPSv04l5t9bEbM7PlU2SItr6X5Yc+nfiDa8=
Subject key identifier: 07:89:69:50:83:3B:07:91:05:C6:8A:A0:99:93:E4:EB:8D:3A:1E:25
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A1D9DB5AE8268BC7B58118623C9769391A
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/B4lpUIM7B5EFxoqgmZPk6406HiU.roa
Signing time: Sat 14 Nov 2026 11:39:53 +0000
ROA not before: Sat 14 Nov 2026 11:39:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 85.133.196.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
2a04:87c0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:db:5a:e8:26:8b:c7:b5:81:18:62:3c:97:69:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 14 11:39:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07896950833b079105c68aa09993e4eb8d3a1e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:3a:c5:29:4a:0f:7b:1b:64:4e:66:79:c5:
23:fb:4a:50:3d:c9:d2:e6:4a:e4:66:70:28:94:33:
90:87:8a:18:57:39:8a:d3:f7:7c:30:2c:5e:c6:df:
cb:5f:c2:59:c8:fe:e2:53:29:09:b9:a3:13:8d:28:
5d:73:76:18:6b:04:00:93:a2:fb:a8:ca:da:8e:5f:
50:a4:1f:f7:d3:d9:5f:1c:47:e0:5f:cc:08:7e:2b:
d2:eb:cb:fe:f5:dc:87:a8:8e:9d:9f:cb:fb:62:39:
d8:da:2b:40:bf:8a:81:28:f9:58:80:16:b1:1c:e6:
09:9e:5a:93:c5:b2:c0:a8:f6:c6:38:dc:95:17:5e:
69:e4:a0:fc:b4:b3:2e:ee:9d:ad:c4:c0:a0:aa:6b:
87:47:39:ee:20:38:fe:de:89:56:3e:bc:11:71:b8:
df:11:94:fc:05:ba:5d:c3:bf:7b:61:1d:89:71:24:
2e:29:e4:0e:ba:d6:1c:bb:e5:35:02:81:e8:8e:6b:
22:93:68:57:a7:c6:71:11:c8:bc:f0:05:bc:08:94:
51:1c:d3:b7:2a:d9:aa:41:1a:47:cd:e2:c3:f2:d8:
37:35:a9:31:5e:07:07:c8:25:c3:d9:7f:f7:26:81:
44:56:ff:18:6c:b2:f5:fd:25:a1:f8:96:ea:29:db:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:69:50:83:3B:07:91:05:C6:8A:A0:99:93:E4:EB:8D:3A:1E:25
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/B4lpUIM7B5EFxoqgmZPk6406HiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.196.0/24
85.133.200.0/24
85.133.203.0/24
85.133.214.0/24
85.133.216.0/24
85.133.219.0/24
85.133.236.0/24
IPv6:
2a04:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
99:31:1a:2f:1f:a2:f0:a1:15:de:bb:01:79:31:ee:f3:e6:27:
ea:41:9c:76:15:2e:2d:2b:24:99:23:03:ea:44:e7:05:88:55:
37:54:52:1a:fc:80:8d:f4:b6:a6:35:df:fe:9f:70:55:89:78:
9b:14:5e:d1:24:e6:34:76:2a:a5:ec:af:d3:c6:5d:56:a3:b0:
96:cb:a3:11:e3:df:2b:80:ef:bb:5c:59:bb:82:d2:6a:1d:17:
dd:c9:bc:7d:b2:19:fb:e6:50:60:a2:34:55:67:74:78:be:8e:
be:3f:5c:5b:39:7a:89:d5:58:80:42:ac:a5:b2:7a:c3:16:fa:
7f:ef:a9:4c:16:8c:db:d9:3b:8a:5b:e9:c0:75:c3:83:5b:12:
e1:b7:be:23:67:c3:ed:7d:f2:0f:41:f3:16:3f:0c:c2:57:bd:
93:25:67:8d:97:a8:e7:a3:18:88:cf:a8:d4:aa:9d:67:20:b7:
1e:fa:c8:c0:70:fd:00:61:94:68:6b:9b:09:71:65:7a:c4:f4:
44:cd:43:b4:70:bf:46:9a:91:a2:8c:49:e5:0e:25:b4:96:25:
33:8b:0a:f8:c1:e3:19:34:6e:43:c8:8b:00:0b:8d:99:09:02:
7e:a6:2f:e1:7e:44:ed:fe:ef:e3:c4:6b:bb:bd:1e:0f:2f:bf:
06:2f:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:05 2026 by rpki-client