Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/_XNLWjy23lsFc9i8uoooB8vOXGI.roa
File: _XNLWjy23lsFc9i8uoooB8vOXGI.roa (raw, json)
Hash identifier: kvvdtbDftA/z5w6FJjUp932aVtrB6omoNPpNBl1UhPs=
Subject key identifier: FD:73:4B:5A:3C:B6:DE:5B:05:73:D8:BC:BA:8A:28:07:CB:CE:5C:62
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A1BC08FF4D1B6EE06036C0112B8D18D093
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/_XNLWjy23lsFc9i8uoooB8vOXGI.roa
Signing time: Sun 08 Nov 2026 16:41:08 +0000
ROA not before: Sun 08 Nov 2026 16:41:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 85.133.193.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bc:08:ff:4d:1b:6e:e0:60:36:c0:11:2b:8d:18:d0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 8 16:41:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd734b5a3cb6de5b0573d8bcba8a2807cbce5c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:79:eb:37:07:57:29:52:d6:c2:28:44:a6:
cd:f9:3f:bc:26:63:0e:41:53:4e:a5:47:1c:03:bb:
6a:18:0b:c2:89:63:b2:8c:56:79:a4:60:fd:1c:23:
52:63:0b:40:ea:8a:60:3e:ca:9f:cd:20:12:18:2f:
11:f7:2a:7c:b5:46:fd:fa:7c:d8:cb:94:b8:8b:2d:
be:18:e7:04:35:12:9b:64:23:34:ed:b4:4e:50:37:
fb:20:0e:46:37:c1:f4:ef:c4:df:47:d5:ae:e7:24:
9e:5e:b7:dc:c1:99:2c:18:68:14:c8:08:b3:e1:d5:
a5:14:cd:78:c8:b2:b9:24:13:f3:5d:11:fe:7e:2f:
71:43:64:cd:87:2a:a5:c0:e6:67:97:83:98:70:e1:
f8:76:d4:5d:8f:80:25:98:52:ff:35:da:04:a8:b1:
30:29:b4:d2:7b:09:ac:5e:5e:ea:23:8f:0c:31:db:
20:e2:35:f3:e8:35:69:f7:35:62:bf:4e:d4:a6:02:
27:87:3e:23:d3:6c:ef:0c:08:fe:55:2c:97:4b:06:
8a:9e:f6:68:b2:00:35:be:af:fa:be:9e:17:d4:7e:
93:dc:f8:97:21:9e:de:29:f8:75:93:0f:38:f4:25:
e2:7b:6d:1c:1f:65:2f:8c:ac:6b:78:cd:07:c6:cd:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:73:4B:5A:3C:B6:DE:5B:05:73:D8:BC:BA:8A:28:07:CB:CE:5C:62
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/_XNLWjy23lsFc9i8uoooB8vOXGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.193.0/24
85.133.249.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2c:ee:76:ab:1d:4e:72:22:c9:9c:65:5e:1d:c7:bc:92:8a:
9a:c9:eb:6e:96:2a:ed:60:f3:f5:1a:93:d8:c5:b6:ed:96:b4:
dd:e1:fa:46:fb:7e:36:b9:7e:dc:36:7c:12:ff:ad:7c:d7:7b:
44:31:97:01:e0:30:18:13:5a:01:21:d6:71:c7:26:14:3d:92:
de:13:b4:25:d1:fc:4d:7a:09:de:25:88:ae:fb:cc:8d:ef:79:
2c:df:ac:f3:58:cf:75:15:8b:91:de:04:c9:68:2f:cf:f7:34:
83:e3:1d:69:f1:ea:2c:03:e0:eb:2d:b9:22:72:5b:93:2d:91:
d4:b5:0f:3d:5c:be:29:d8:7d:f8:b3:23:68:14:89:57:3a:e6:
23:b0:10:2a:4d:2a:be:31:e5:d8:b2:25:a2:55:77:af:19:ed:
57:a9:af:2a:fd:22:27:05:07:5a:9b:a1:12:c4:a3:4e:5c:c8:
62:69:70:20:7c:c5:86:ca:c7:44:d2:54:01:2b:d7:b4:12:91:
a7:67:7e:81:18:3c:68:5a:9c:52:5a:8d:a7:cf:43:41:1e:f3:
4f:a3:5f:2a:44:d6:1e:90:3b:b9:9b:0a:56:3d:e0:8d:cb:70:
4e:bf:79:38:5d:00:66:0f:86:15:b9:ce:1f:6f:bb:36:6b:ca:
28:57:ca:25
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaG8CP9NG27gYDbAESuNGNCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYxMTA4MTY0MTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDczNGI1YTNjYjZkZTViMDU3M2Q4YmNiYThhMjgwN2NiY2U1YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlJ56zcHVylS1sIoRKbN+T+8JmMO
QVNOpUccA7tqGAvCiWOyjFZ5pGD9HCNSYwtA6opgPsqfzSASGC8R9yp8tUb9+nzY
y5S4iy2+GOcENRKbZCM07bROUDf7IA5GN8H078TfR9Wu5ySeXrfcwZksGGgUyAiz
4dWlFM14yLK5JBPzXRH+fi9xQ2TNhyqlwOZnl4OYcOH4dtRdj4AlmFL/NdoEqLEw
KbTSewmsXl7qI48MMdsg4jXz6DVp9zViv07UpgInhz4j02zvDAj+VSyXSwaKnvZo
sgA1vq/6vp4X1H6T3PiXIZ7eKfh1kw849CXie20cH2UvjKxreM0Hxs31QQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP1zS1o8tt5bBXPYvLqKKAfLzlxiMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvX1hOTFdqeTIzbHNGYzlpOHVvb29COHZPWEdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYXBAwQA
VYX5MA0GCSqGSIb3DQEBCwUAA4IBAQBTLO52qx1OciLJnGVeHce8koqayetulirt
YPP1GpPYxbbtlrTd4fpG+342uX7cNnwS/61813tEMZcB4DAYE1oBIdZxxyYUPZLe
E7Ql0fxNegneJYiu+8yN73ks36zzWM91FYuR3gTJaC/P9zSD4x1p8eosA+DrLbki
cluTLZHUtQ89XL4p2H34syNoFIlXOuYjsBAqTSq+MeXYsiWiVXevGe1Xqa8q/SIn
BQdam6ESxKNOXMhiaXAgfMWGysdE0lQBK9e0EpGnZ36BGDxoWpxSWo2nz0NBHvNP
o18qRNYekDu5mwpWPeCNy3BOv3k4XQBmD4YVuc4fb7s2a8ooV8ol
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:04 2026 by rpki-client