Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gXSSh2uNtFv405rW43HW70r7Dnw.roa
File: gXSSh2uNtFv405rW43HW70r7Dnw.roa (raw, json)
Hash identifier: PvakYlJ+y7g9x9Bd47alry51yVypAm1SZG5okHVCAgo=
Subject key identifier: 81:74:92:87:6B:8D:B4:5B:F8:D3:9A:D6:E3:71:D6:EF:4A:FB:0E:7C
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F371138AE8D76E35145FFE4409D3D4030
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gXSSh2uNtFv405rW43HW70r7Dnw.roa
Signing time: Mon 06 Jul 2026 10:55:03 +0000
ROA not before: Mon 06 Jul 2026 10:55:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:11:38:ae:8d:76:e3:51:45:ff:e4:40:9d:3d:40:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 6 10:55:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=817492876b8db45bf8d39ad6e371d6ef4afb0e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:5d:9b:6c:cb:5b:e4:d1:75:c5:e4:22:c2:
9d:45:fc:fb:73:7b:f7:d6:76:d2:d6:8a:22:0c:a3:
3d:70:7b:16:9f:00:fe:94:47:e8:10:f1:f9:13:e0:
eb:0d:58:81:ac:8d:08:56:f3:0f:b5:ca:71:d2:bb:
46:11:04:13:1e:f2:fe:33:81:9d:63:b4:86:d6:ee:
ac:4e:77:5d:07:15:89:8d:2d:d5:21:8d:97:01:42:
e0:f0:cc:c4:2b:c0:66:e2:2a:69:35:5c:26:81:ce:
79:79:13:4f:ee:a6:8c:e8:6b:1c:9d:40:ac:cf:17:
f3:96:9b:87:93:38:59:79:12:54:b4:cc:1b:e0:ed:
9d:ee:a1:d5:85:d5:da:98:6a:f7:86:c7:5b:85:f1:
16:d7:f4:70:e1:30:17:25:16:d9:db:22:a5:1d:66:
e6:1b:85:82:b5:06:3b:4a:2a:45:dd:ca:c7:ff:1d:
44:52:ec:97:76:4e:32:08:ac:5d:78:5c:46:6f:22:
3b:c8:6b:fd:14:ca:24:1d:bf:fa:42:fd:bd:cc:b9:
ab:e7:d9:a5:39:4b:af:02:ed:f8:8c:39:1c:f9:ef:
92:e8:ce:f2:5c:c7:5f:26:03:5e:01:a6:ee:4e:6c:
57:c7:bf:84:7b:cd:68:85:9b:65:c0:07:22:c7:b7:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:92:87:6B:8D:B4:5B:F8:D3:9A:D6:E3:71:D6:EF:4A:FB:0E:7C
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gXSSh2uNtFv405rW43HW70r7Dnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.194.0/24
85.133.201.0/24
Signature Algorithm: sha256WithRSAEncryption
75:be:22:b3:85:9d:6d:2d:24:43:98:fb:22:90:39:d3:e7:6f:
14:96:fe:4e:1c:6d:93:0c:7b:a4:20:0b:94:9e:6d:17:d7:ae:
3b:26:f0:7f:a5:85:70:cc:41:1c:99:6f:56:01:87:ae:3b:e8:
a3:12:95:b0:a1:56:54:fb:3e:57:eb:73:cb:bb:ca:eb:4f:71:
1e:d8:da:95:63:24:2f:1d:b9:b8:2e:91:6e:88:7b:40:1b:1c:
01:3d:c2:af:2c:f7:4d:7e:56:51:ea:66:07:f7:e7:fa:ad:7b:
27:12:c1:e9:6a:34:47:f8:4b:e0:31:42:5e:24:79:c2:37:6f:
46:86:f0:90:9d:e4:0f:c3:10:7b:d9:3a:f6:9f:ca:ee:9b:08:
e7:d0:62:26:64:a5:de:32:9c:af:e7:76:fc:e7:c1:1a:0c:c6:
72:98:d2:58:4f:59:9f:f5:71:c6:b7:17:6a:c9:3e:00:a2:bb:
9a:fc:3e:91:8a:84:05:83:9f:1f:6f:b9:76:9d:c2:bf:19:91:
97:17:f9:47:99:96:1a:fa:ca:da:5b:22:d7:19:11:93:fe:6e:
5a:78:04:d8:05:57:a4:31:f0:95:af:2e:c9:54:a9:57:39:17:
c1:c0:18:57:00:cb:b9:4b:2a:58:73:5e:6b:cf:c9:16:38:e4:
fb:08:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:00 2026 by rpki-client