Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/f36GlzMla5osimpxs3lgIkA66yk.roa
File: f36GlzMla5osimpxs3lgIkA66yk.roa (raw, json)
Hash identifier: YrgRBjmcaowaUy4yVymb0T3RPuHkIzogqh9xzv5zkck=
Subject key identifier: 7F:7E:86:97:33:25:6B:9A:2C:8A:6A:71:B3:79:60:22:40:3A:EB:29
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F7E953033746BEE42437122460B333F43
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/f36GlzMla5osimpxs3lgIkA66yk.roa
Signing time: Mon 20 Jul 2026 08:12:14 +0000
ROA not before: Mon 20 Jul 2026 08:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:95:30:33:74:6b:ee:42:43:71:22:46:0b:33:3f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 20 08:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f7e869733256b9a2c8a6a71b3796022403aeb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:d0:d0:aa:e8:e8:4e:b9:58:d0:07:fc:d4:
15:30:4e:10:89:d1:01:1d:16:07:8f:2c:a9:c4:98:
93:3d:56:e7:62:d7:b6:a6:73:69:c1:da:00:1d:11:
0d:b4:ea:e4:65:4a:fe:fb:1f:92:e4:9b:8f:6d:a8:
ea:9d:35:26:57:9f:42:b9:3d:9b:fd:57:f8:be:a0:
ea:03:c0:8e:f1:66:8b:f0:03:d3:a0:29:db:90:86:
fb:50:7e:e4:67:eb:5f:b5:4f:13:d7:49:f5:8f:9d:
58:62:b0:43:71:a4:12:d8:85:36:8f:da:7e:93:2a:
c4:74:72:c1:75:d4:0f:77:ca:fc:97:65:f3:f1:02:
23:32:a4:08:3c:71:4c:ef:e9:09:3f:0b:1b:07:a1:
72:47:15:97:8d:45:07:34:2f:91:c7:d4:e7:a5:bc:
a2:93:d2:04:c0:ab:c6:11:d5:1c:ba:81:4f:0e:f4:
c7:c6:99:b6:4d:9f:45:10:f9:0a:b9:c7:d1:26:eb:
ef:79:0e:32:6f:7d:70:a1:44:6a:4b:ae:90:81:e1:
b5:29:04:04:b8:d4:70:81:40:7d:4c:5e:8b:1b:a1:
1f:c4:15:71:64:76:35:92:af:1e:88:bb:71:f5:71:
f3:a1:c1:ef:e9:49:fe:a4:99:ff:1c:27:7b:ee:2d:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7E:86:97:33:25:6B:9A:2C:8A:6A:71:B3:79:60:22:40:3A:EB:29
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/f36GlzMla5osimpxs3lgIkA66yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.139.255
85.133.141.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.207.0/24
85.133.209.0-85.133.213.255
85.133.215.0/24
85.133.218.0/24
85.133.222.0/23
85.133.226.0/24
85.133.231.0-85.133.232.255
85.133.235.0/24
85.133.244.0/24
85.133.247.0/24
85.133.251.0/24
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:9b:ae:b3:53:b2:3a:06:33:75:65:3f:d8:95:7f:cb:5f:f4:
42:b4:83:c7:b1:60:8e:a4:a0:fb:3b:a2:8f:7f:a1:6a:90:6d:
92:03:38:7f:f3:2d:11:fb:2f:a2:09:21:1a:7e:f9:10:4b:7b:
7a:14:2f:be:58:8f:4c:1f:0a:58:87:9f:29:5f:2f:e7:3e:17:
dc:74:f8:c3:8d:f1:89:2e:10:ae:73:0e:08:25:10:be:da:5f:
28:44:18:8f:21:99:17:fe:2a:aa:2f:36:8e:71:4b:ac:08:58:
6f:5e:71:02:ba:f7:79:81:30:7f:2f:8f:62:3a:57:46:71:6e:
4d:a6:be:ae:07:e5:8b:9b:1b:f1:5b:b0:2d:72:65:e3:cf:44:
d0:e2:6e:b1:3a:7d:79:57:53:9c:7c:f9:0b:8e:40:52:ec:95:
7b:ed:54:b1:65:75:86:9a:1a:18:65:a7:bf:2e:76:34:3b:01:
66:1e:c2:7d:bb:22:d4:a4:9e:7d:1b:c9:c6:91:a5:0d:a2:29:
71:ed:06:64:d2:15:98:da:73:3f:24:77:cf:0a:37:d8:3c:d6:
71:b2:09:77:c9:e7:b7:ef:8d:aa:33:3d:43:32:64:18:ae:d9:
56:0a:91:81:05:b3:1a:ed:51:8c:fb:25:bc:ea:19:91:6b:31:
da:24:99:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:32 2026 by rpki-client