Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/K1b_aDA9OmpYTDhoffBazaxG7Wk.roa
File: K1b_aDA9OmpYTDhoffBazaxG7Wk.roa (raw, json)
Hash identifier: +4oMB4gdG7o459fDZKvqt0wCrQlxjnW+rcOG8P/GTE4=
Subject key identifier: 2B:56:FF:68:30:3D:3A:6A:58:4C:38:68:7D:F0:5A:CD:AC:46:ED:69
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A1B1C0DB3F8BC3C7CA76CEB85198A6093A
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/K1b_aDA9OmpYTDhoffBazaxG7Wk.roa
Signing time: Fri 06 Nov 2026 16:46:08 +0000
ROA not before: Fri 06 Nov 2026 16:46:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 85.133.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:c0:db:3f:8b:c3:c7:ca:76:ce:b8:51:98:a6:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 6 16:46:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b56ff68303d3a6a584c38687df05acdac46ed69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:d7:ca:52:4b:1d:3d:78:83:0f:60:ec:98:
16:82:7f:54:18:c7:e1:70:13:c3:f1:f0:da:6f:0e:
5e:05:4e:bf:17:ab:04:58:39:8f:51:cd:5f:f4:c0:
49:4f:dc:70:41:57:d9:0d:76:a3:91:d4:5c:e6:88:
a1:fa:de:84:b6:2f:59:51:22:7f:85:6a:42:f7:ff:
f8:7a:b2:c7:c7:64:b2:1b:11:92:66:73:72:18:3e:
a2:8a:e6:05:1e:d4:73:e8:ec:5c:3a:57:aa:46:a0:
a1:85:23:f2:35:c5:3e:8c:10:20:65:30:17:8f:10:
0e:d6:1c:e7:8f:28:45:04:5f:d3:24:3b:42:02:72:
26:51:61:9d:c2:5d:93:8c:db:07:48:42:07:bd:a7:
41:12:25:5d:84:ed:02:11:46:c3:09:d2:3c:7b:24:
eb:97:32:9a:fb:f9:a8:87:fb:22:6f:4b:94:dd:47:
fb:44:55:6c:64:3d:ea:df:16:dd:d8:c7:e6:a9:ee:
07:15:43:92:8c:8a:6c:7d:9e:e4:bf:dd:95:86:bf:
0a:db:85:03:b7:87:c3:e2:7e:95:0e:8a:80:7b:4b:
5d:2e:aa:eb:48:59:35:50:f2:77:64:a3:8e:2e:5c:
3e:17:69:ef:0c:65:81:b2:cd:62:f4:1a:00:41:a7:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:FF:68:30:3D:3A:6A:58:4C:38:68:7D:F0:5A:CD:AC:46:ED:69
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/K1b_aDA9OmpYTDhoffBazaxG7Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.201.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d5:8c:ae:77:56:16:34:0b:d0:c9:78:d3:91:2c:9f:0d:f6:
d3:28:6c:aa:bf:f9:7f:44:c1:e3:21:c3:4e:39:0e:23:67:15:
af:c9:ad:a0:5b:39:01:92:49:fd:d3:ad:d0:c1:29:ec:12:d3:
4b:bc:93:04:55:07:46:a3:7f:95:70:b1:fd:15:80:ba:bc:62:
90:c6:3c:1e:fb:9b:76:05:12:f7:e4:e0:d2:39:82:52:90:de:
ab:21:9c:f2:9a:8b:4a:9d:bc:4f:98:83:a0:2d:53:09:a2:3d:
c1:e5:61:2a:34:61:02:46:2f:3e:a9:67:a0:47:21:03:17:ff:
f4:b1:7c:a3:40:61:02:f0:db:a1:1d:8f:a4:ab:a8:9d:c3:aa:
eb:82:19:8d:b0:b2:76:d9:95:e8:eb:bc:62:8b:31:9f:97:71:
62:77:47:cd:72:73:32:6f:73:6c:1e:0f:ff:1e:29:5b:72:c0:
19:8f:11:06:72:f5:ea:8a:01:b5:11:83:9b:89:bf:cd:f2:d0:
0f:37:db:e0:ec:a7:f3:80:4f:71:18:04:2f:b8:22:75:16:f4:
c7:85:a8:3b:0f:16:85:67:71:72:24:1e:e6:81:72:5d:1c:74:
53:fb:af:3d:6e:62:7b:c3:ef:c0:14:b6:c1:3a:20:79:8c:79:
92:9c:5f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:20 2026 by rpki-client