Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/_TmPbtum-1iw-ZfgGQbHW01SDVI.roa
File: _TmPbtum-1iw-ZfgGQbHW01SDVI.roa (raw, json)
Hash identifier: QIFgUvSVToYQ6kIo/bZvBqmU12ppvif5hiLpO42V1z4=
Subject key identifier: FD:39:8F:6E:DB:A6:FB:58:B0:F9:97:E0:19:06:C7:5B:4D:52:0D:52
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F0E08F8BED6B7954F14AD5F5C2E4FDE65
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/_TmPbtum-1iw-ZfgGQbHW01SDVI.roa
Signing time: Sun 28 Jun 2026 11:41:36 +0000
ROA not before: Sun 28 Jun 2026 11:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 85.133.236.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:08:f8:be:d6:b7:95:4f:14:ad:5f:5c:2e:4f:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 28 11:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd398f6edba6fb58b0f997e01906c75b4d520d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:80:a0:26:7d:ae:91:d3:e4:4e:cd:57:5b:
4f:25:cd:2a:05:7a:d5:ea:97:e3:63:81:92:c1:f3:
74:6f:e7:b3:1d:06:29:1c:20:5b:45:de:13:6a:a9:
bb:16:2b:72:7a:c8:e2:e0:83:31:d0:18:e7:a9:0b:
6c:3b:b1:ce:ca:be:de:44:1c:d5:b8:80:16:67:81:
c0:29:41:39:bb:70:84:14:75:ba:a2:65:1e:50:3a:
d1:ad:15:42:59:76:cc:da:11:0c:5d:78:16:9b:31:
fb:28:4e:fd:cf:e2:36:92:0f:ae:ca:03:23:00:12:
21:ea:73:4b:9d:3c:6e:1e:b2:18:09:e4:58:ea:6b:
f9:9c:26:b2:2b:21:76:43:10:02:41:69:14:65:13:
50:90:60:69:76:ce:da:23:ae:73:c7:93:fe:8a:3f:
c9:2c:2b:cf:b4:33:b5:da:e3:25:a0:7e:41:00:f2:
51:1c:90:55:59:9c:bd:f6:d8:ed:58:2d:22:f5:e6:
f7:2a:e5:8c:99:dc:7d:27:e5:5a:0b:7e:f1:8a:67:
bf:72:2b:da:de:ea:98:c2:4c:08:53:c0:f4:7b:77:
6b:6a:8e:df:82:0e:f3:26:f6:01:4c:dd:e0:40:28:
48:2f:74:5d:9c:ea:b4:c3:57:9e:d6:5a:4d:ee:86:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:39:8F:6E:DB:A6:FB:58:B0:F9:97:E0:19:06:C7:5B:4D:52:0D:52
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/_TmPbtum-1iw-ZfgGQbHW01SDVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.236.0/24
85.133.238.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e1:93:1b:f2:b7:a7:c0:bf:76:ad:a5:18:e0:27:ca:c4:6c:
9a:dd:62:03:96:21:95:5c:be:5b:06:ec:52:db:a2:62:66:48:
6e:33:d1:47:f0:9c:ad:bb:92:38:6f:36:33:e2:a1:87:0c:23:
fe:ad:b8:45:52:28:ca:91:fa:66:5c:50:c8:d5:fa:1c:00:4b:
98:7f:33:8b:32:24:fc:35:f5:b8:65:b1:b8:f5:47:44:91:c8:
f3:90:02:af:08:25:c5:69:70:12:62:e5:52:6c:a9:0b:fd:45:
5f:19:3b:09:a4:4a:b1:28:2b:a7:8c:a0:95:f7:6a:3c:87:eb:
10:35:67:8d:12:44:ba:9f:c6:02:02:13:33:3e:3d:f7:16:9a:
a4:64:b8:bb:23:4c:f3:c3:0c:27:76:5f:d5:64:10:11:66:dd:
d7:cf:b2:2a:5e:ff:e3:09:eb:01:15:91:1c:5d:98:c1:7e:bd:
ce:78:f2:71:3d:3f:6f:00:bd:32:3d:1d:7d:3f:9c:c4:fc:aa:
72:e2:10:46:10:cc:1e:b8:91:c6:34:ba:1b:97:38:a1:6e:53:
a5:94:db:a0:f2:77:7b:f8:eb:9c:58:8d:5b:01:87:1e:5f:19:
0d:4d:2f:5c:a5:c5:7e:a5:d0:9a:df:37:20:94:a8:cf:5b:ef:
da:dd:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:09 2026 by rpki-client