Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XbZUxjF6er6AIYfuTf_SYoXj0T4.roa
File: XbZUxjF6er6AIYfuTf_SYoXj0T4.roa (raw, json)
Hash identifier: EU2xDMefpjL7XoPYAukKa0Xo42kHY6dXwLP+3AmR/q4=
Subject key identifier: 5D:B6:54:C6:31:7A:7A:BE:80:21:87:EE:4D:FF:D2:62:85:E3:D1:3E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019D209448C1F1392948C0FCB944A992F0F9
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XbZUxjF6er6AIYfuTf_SYoXj0T4.roa
Signing time: Tue 24 Mar 2026 16:01:21 +0000
ROA not before: Tue 24 Mar 2026 16:01:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201309
IP address blocks: 85.133.217.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:94:48:c1:f1:39:29:48:c0:fc:b9:44:a9:92:f0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 24 16:01:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5db654c6317a7abe802187ee4dffd26285e3d13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:78:99:0e:a7:d8:80:d8:9a:ec:e0:99:d4:41:
30:90:a3:b4:43:ab:3c:3a:4a:ef:31:25:4d:ad:f1:
50:49:28:c9:5f:ad:02:a1:27:fa:99:b0:a2:6a:0b:
69:5f:48:d0:70:d2:4a:05:96:36:15:e5:d9:89:cb:
e1:2c:f0:5e:e2:47:4f:81:45:cb:bc:5b:8e:31:04:
2a:1a:d9:80:e4:d1:6b:f0:7c:cd:5b:6e:d6:1d:06:
db:4b:2b:a6:94:3a:45:d8:39:b1:2b:24:f3:10:95:
d2:0f:47:1c:a1:12:21:04:e8:f5:b4:a2:15:98:74:
3d:52:8f:80:c4:34:cd:52:38:c6:05:48:53:86:4d:
69:be:98:61:da:fc:46:1d:32:2b:59:d8:22:18:8e:
fc:e4:0d:e1:e9:d0:85:2b:91:df:44:2c:23:5b:40:
fa:2e:03:97:fd:3e:31:e7:df:7d:46:13:88:a7:a9:
88:05:33:dc:4d:12:58:e7:26:d6:ec:16:06:1f:ed:
74:68:72:51:32:d1:86:d1:5c:da:ad:28:3e:77:6d:
93:9a:2e:d4:cf:aa:e2:a7:5b:71:4f:91:0b:48:b6:
78:48:59:a2:8b:43:12:88:e9:7a:06:aa:15:16:c4:
a2:d5:10:04:51:b6:02:d0:c4:44:9e:ba:d4:40:bb:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:54:C6:31:7A:7A:BE:80:21:87:EE:4D:FF:D2:62:85:E3:D1:3E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XbZUxjF6er6AIYfuTf_SYoXj0T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.217.0/24
85.133.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7e:c6:4f:a0:b3:06:e4:a1:60:d8:f3:06:64:91:ed:35:3b:
4d:0f:c1:79:07:e9:af:78:14:c0:fa:b7:60:fb:3f:c5:26:d6:
33:98:81:3f:3d:04:5e:04:53:6f:9e:09:ee:a4:78:6c:a8:2e:
7d:76:5d:c6:3d:f0:51:99:15:4c:6e:50:9f:36:7e:65:0a:8d:
72:1a:46:a0:a0:ff:5c:bc:66:0d:f9:3e:1b:aa:92:8b:0c:8b:
e1:fb:d6:1d:d0:96:c3:2b:a8:36:4e:dd:f0:dd:1e:27:4b:1e:
a8:8c:27:80:82:bc:62:fd:1e:23:57:a1:8f:44:81:7f:f1:12:
81:d2:f3:14:fa:3d:b7:b8:39:72:ec:6a:d4:b1:31:db:b2:6f:
5c:78:a3:fe:95:3b:bc:d2:d4:57:b9:5e:56:b4:3a:2f:69:a0:
3e:ac:8e:8f:00:43:ef:da:61:0d:28:08:30:a0:10:5a:9c:e8:
a2:de:ec:e0:08:1c:51:ae:0d:c3:ca:bb:2b:c7:9c:ce:b8:e6:
6f:fc:ad:f1:42:00:d7:03:84:6b:b4:b6:e7:5a:d8:06:eb:ed:
70:9b:66:e7:58:7e:f8:16:5f:67:01:4a:c7:d5:f1:bc:b5:6f:
0e:61:4c:c2:83:bd:a2:00:d9:2b:39:fe:4c:e3:1b:ac:22:cf:
e9:10:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:48:23 2026 by rpki-client