Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/a7sIykuS_-ADC4xMZBjceeM9nU8.roa
File: a7sIykuS_-ADC4xMZBjceeM9nU8.roa (raw, json)
Hash identifier: Ijty+qmFJVMZ4WZ2L6tVO4G2nHxdltVE36Aw6ugRkLY=
Subject key identifier: 6B:BB:08:CA:4B:92:FF:E0:03:0B:8C:4C:64:18:DC:79:E3:3D:9D:4F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F846057D61AABACC3F91C5DA0422375C5
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/a7sIykuS_-ADC4xMZBjceeM9nU8.roa
Signing time: Tue 21 Jul 2026 11:12:14 +0000
ROA not before: Tue 21 Jul 2026 11:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 85.133.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:60:57:d6:1a:ab:ac:c3:f9:1c:5d:a0:42:23:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 21 11:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bbb08ca4b92ffe0030b8c4c6418dc79e33d9d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:35:a9:8a:4c:9d:7e:03:3d:bd:ce:53:76:
08:1e:a7:de:0f:63:84:67:f1:7b:17:43:b2:57:67:
60:f2:94:cc:2f:92:41:5a:bb:44:84:7e:31:be:27:
ff:f4:ef:5c:cb:f2:1e:e8:e8:43:65:1c:03:4c:06:
f4:dc:4e:be:02:65:a3:59:40:bf:36:5b:7b:94:36:
aa:4e:e8:a8:5c:77:ef:77:19:df:23:0e:ca:ca:cb:
6c:20:04:20:74:d0:68:ab:17:c3:83:91:1e:85:94:
4f:fe:7a:85:1e:bb:0d:b1:ff:81:dc:67:31:d9:e9:
6e:01:dc:80:2c:44:06:53:90:14:32:c9:50:29:f9:
09:50:32:34:d2:98:84:ac:be:fc:41:18:bc:ed:3c:
08:48:7f:df:37:af:e9:3b:5c:b3:c4:03:71:6f:0e:
e3:4d:1c:a1:9d:cc:f5:59:67:b3:2a:6a:0b:f3:d4:
b6:8d:c3:9e:10:71:37:7e:17:af:92:58:67:fd:6a:
9d:3a:10:62:6e:dc:8d:6b:84:29:42:d9:26:b6:29:
8f:41:df:de:ef:a4:f1:4f:e4:68:20:81:5f:6e:38:
c7:55:42:cb:f4:dc:cf:4f:0e:76:f1:86:63:f8:1b:
15:85:be:db:cf:3d:ad:60:d7:de:7c:c3:ae:14:49:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BB:08:CA:4B:92:FF:E0:03:0B:8C:4C:64:18:DC:79:E3:3D:9D:4F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/a7sIykuS_-ADC4xMZBjceeM9nU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.228.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a9:fd:b6:7a:99:98:be:d8:93:34:7d:ed:4d:09:38:3b:0c:
d1:33:3d:91:e2:e7:e1:2d:b0:0e:8f:a6:f1:27:2a:5a:78:2d:
1d:09:10:df:6e:8e:bb:3b:80:cb:00:68:26:69:12:f7:4d:e7:
71:ed:c0:c8:0e:5f:d2:de:83:2c:aa:09:3d:01:b0:24:2a:a4:
39:6a:3d:37:8b:67:4d:87:b6:27:5d:4d:50:4b:23:c5:78:53:
b9:9b:f8:3e:1b:3c:13:3c:df:4c:e9:90:ac:04:f7:11:fb:26:
b3:61:dc:db:af:6f:fb:b3:b4:82:e0:46:11:7b:65:d9:e8:05:
18:c5:9c:3f:68:76:b6:ee:15:07:97:d5:6c:a3:a3:ef:da:60:
c4:13:de:5b:bc:5f:c3:31:df:a5:62:97:84:e5:29:e5:1f:92:
b5:8a:cb:9d:30:d5:84:82:88:83:fd:eb:a5:9c:b9:11:e1:2b:
33:29:09:f8:c5:e2:b9:b5:13:6b:d7:16:82:f8:28:de:40:11:
ac:38:d4:96:07:8e:ec:35:54:3b:cf:bb:36:65:05:ff:55:a7:
48:1b:c6:cc:3b:13:fb:6f:e6:87:4e:d4:1f:75:1b:ba:3c:58:
78:dd:3b:bc:b7:e3:19:81:c6:00:d2:99:e7:3b:9f:c0:3d:7d:
33:df:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:09 2026 by rpki-client