Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jaX_pSZTt2QtAFyBzi9jHzupc6I.roa
File: jaX_pSZTt2QtAFyBzi9jHzupc6I.roa (raw, json)
Hash identifier: Q4Lsi4Y8P1kMxlNLWX66TTwTUzaof2icuH2ghly6BCM=
Subject key identifier: 8D:A5:FF:A5:26:53:B7:64:2D:00:5C:81:CE:2F:63:1F:3B:A9:73:A2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019951F9EA8184981AFDA55D4ADE65BE695F
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jaX_pSZTt2QtAFyBzi9jHzupc6I.roa
Signing time: Tue 16 Sep 2025 10:02:36 +0000
ROA not before: Tue 16 Sep 2025 10:02:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200554
IP address blocks: 85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
185.41.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:f9:ea:81:84:98:1a:fd:a5:5d:4a:de:65:be:69:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 16 10:02:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8da5ffa52653b7642d005c81ce2f631f3ba973a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:59:ae:70:13:87:d9:ce:9c:73:3f:1d:2a:
b2:10:ac:27:d5:09:21:2c:a7:5f:f1:ea:70:84:e5:
0f:1b:d9:eb:46:b4:09:86:38:a4:aa:c5:0e:47:18:
51:8c:b0:82:b5:87:1d:d7:39:d8:04:35:ef:6e:56:
ca:85:8a:f6:44:6f:83:ef:86:b6:ea:25:c0:1f:42:
5a:8c:53:24:7d:aa:d8:04:cd:81:d1:3a:4b:ea:50:
71:86:fc:9f:e1:68:67:5d:76:69:69:f3:0b:f7:27:
53:70:a0:70:bd:7c:6c:d2:79:e9:e4:a7:43:ef:53:
39:bc:a2:a5:e6:5a:bc:75:d6:3c:c6:75:39:2f:b4:
3e:e2:32:7c:61:b2:40:f7:1d:22:bc:be:51:fa:0f:
38:e1:36:9c:49:b1:9d:44:64:f2:9f:e6:40:5e:10:
39:88:e7:a5:9d:d7:5f:81:15:c6:3e:59:31:2b:ef:
cd:79:f1:0c:df:5f:75:85:6c:e4:d2:ef:41:16:6c:
56:40:cd:63:25:3d:4f:fb:08:4e:6b:b4:fc:a7:3f:
a1:7d:65:5c:7e:22:34:38:c7:22:ac:f8:73:8c:e9:
bd:bb:75:96:cd:9d:72:fb:01:3d:17:33:3e:18:3b:
74:1a:b7:02:e1:0d:20:10:7d:3f:fb:c6:ba:a0:c7:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A5:FF:A5:26:53:B7:64:2D:00:5C:81:CE:2F:63:1F:3B:A9:73:A2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jaX_pSZTt2QtAFyBzi9jHzupc6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.169.0-85.133.170.255
185.41.0.0/22
Signature Algorithm: sha256WithRSAEncryption
37:c1:6f:9b:74:ca:e1:92:3b:6c:59:d3:7f:b9:53:7e:58:2f:
07:31:0d:87:23:0c:be:3c:8a:43:9d:35:e9:c2:90:36:96:87:
fb:f1:87:b0:0a:13:3f:28:fd:64:6e:0c:46:b1:88:e4:85:aa:
f9:51:0e:39:bd:5b:a5:a9:38:f7:11:c0:33:d2:5f:8b:ba:9a:
17:15:2b:b4:45:07:82:b3:af:d9:94:f7:e0:f6:83:5d:d9:a4:
67:b8:3c:30:69:e3:20:71:86:0a:c8:02:af:f5:33:15:95:3e:
97:4b:12:ba:20:8a:67:cc:45:65:a4:91:24:f6:8c:21:6b:c9:
88:79:bc:a8:02:f7:9b:11:86:50:63:5f:27:b8:3c:62:3e:32:
41:39:f5:ab:78:8f:d5:07:3a:9c:f1:81:7e:91:5f:e3:48:a7:
35:1e:c9:95:fa:d3:0b:cf:d5:c5:f1:f0:ce:c6:41:9c:fc:d8:
4d:a8:92:13:df:8b:0d:a9:d0:45:e5:64:3f:81:4f:cf:d1:c2:
94:96:01:b0:a4:50:9d:be:89:43:f5:66:a6:3a:c8:2a:22:4b:
63:6c:43:6d:3e:12:c7:bd:dc:ce:b5:ea:dc:ee:99:5e:37:e3:
76:51:0b:96:d0:b0:e1:7a:51:8f:89:71:0a:cb:ef:42:78:98:
e7:f2:b0:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:32 2025 by rpki-client