Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/k0yZ1_53kOjS3t13dFhCBHkiUpc.roa
File: k0yZ1_53kOjS3t13dFhCBHkiUpc.roa (raw, json)
Hash identifier: z0eUUX0DNdogvuqSHAwD1uMDcP4HGdPgaWvuUrxV/0E=
Subject key identifier: 93:4C:99:D7:FE:77:90:E8:D2:DE:DD:77:74:58:42:04:79:22:52:97
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019F458DBA91ADE5E774BFE0710AF4CFF0D7
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/k0yZ1_53kOjS3t13dFhCBHkiUpc.roa
Signing time: Thu 09 Jul 2026 06:25:44 +0000
ROA not before: Thu 09 Jul 2026 06:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215938
IP address blocks: 85.133.153.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:8d:ba:91:ad:e5:e7:74:bf:e0:71:0a:f4:cf:f0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 9 06:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=934c99d7fe7790e8d2dedd777458420479225297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:0f:5f:42:f1:f1:a8:10:b1:94:96:23:ed:
d8:61:63:17:06:6c:4f:e4:79:7f:ea:ff:4a:7b:78:
e4:72:16:85:80:87:74:3a:2a:a9:6c:ba:ea:7a:07:
eb:99:b5:d2:76:7e:50:98:63:7d:98:83:dd:d5:98:
95:9f:b5:b7:78:ac:37:60:e3:8b:c7:a1:ee:a1:aa:
98:3f:6a:d9:54:87:22:85:60:1c:76:c6:d9:78:16:
03:d7:3a:3b:e2:34:d8:8b:81:60:fe:35:b1:ce:c8:
75:d2:6a:80:c5:d0:1b:f9:b2:2c:f2:ee:32:c7:82:
b2:55:68:21:2d:c8:1d:3f:0c:8d:de:8e:7a:0f:7a:
aa:f7:0e:b1:29:cd:0f:f5:ba:cd:90:b0:22:af:20:
75:b1:0b:db:27:b1:4a:ed:be:5f:52:0a:43:d7:29:
4d:34:b1:dd:22:ca:93:2a:5c:0f:4a:6f:41:1b:7c:
53:b0:ec:85:89:7d:77:0c:a8:72:0a:9f:1a:9b:08:
bf:c2:77:4f:b2:2a:ab:ad:2e:16:b7:18:31:26:4c:
b2:19:8f:47:8a:a8:54:5a:36:dd:6c:a7:75:67:e0:
bf:06:72:1c:2b:ed:16:ec:5a:79:90:76:d6:2e:b9:
ec:f4:c1:21:67:1e:29:fd:67:eb:38:74:42:71:61:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4C:99:D7:FE:77:90:E8:D2:DE:DD:77:74:58:42:04:79:22:52:97
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/k0yZ1_53kOjS3t13dFhCBHkiUpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.153.0/24
85.133.204.0/24
85.133.217.0/24
85.133.224.0/24
Signature Algorithm: sha256WithRSAEncryption
79:bd:d2:5a:f1:35:c2:0c:3c:a8:b5:6d:de:1c:8e:1b:8a:66:
4f:d2:5c:61:37:dc:87:df:60:92:b7:0b:2e:44:b0:46:3d:a0:
27:a0:fc:88:da:c6:91:c6:cd:09:5d:d0:c0:3a:f6:d4:85:dd:
b6:ae:c0:9b:76:4e:c8:12:0c:f2:fa:58:72:4c:1b:3b:a4:61:
40:b0:ee:5c:97:60:ce:f0:7c:be:da:a6:e7:3b:c0:7d:7f:9f:
45:ee:03:8c:e9:02:66:08:26:75:c7:65:23:a5:c6:be:80:08:
63:de:db:c2:c7:91:c9:d3:43:d0:39:56:e6:12:56:20:61:43:
6c:50:db:7b:c3:a4:13:26:c6:9c:96:cb:59:fd:e6:c0:0b:9a:
81:18:ed:46:2c:fd:e4:78:f3:1f:ce:1b:8b:05:f6:db:6c:e8:
36:73:00:f6:7a:30:a9:7e:2b:15:a9:7c:b9:47:f3:38:8f:cc:
ee:06:c4:43:44:3a:64:11:62:9e:dd:44:54:fc:72:ef:12:89:
7a:d2:78:56:4b:9f:93:c1:40:7b:7c:c5:23:9e:b6:eb:79:dd:
a1:a1:d3:f8:b8:57:29:d0:fd:f0:b4:03:40:21:2b:cf:1f:2a:
7c:43:95:ba:9d:a8:2c:56:4a:2a:c4:99:52:55:c8:c6:fd:95:
77:9b:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:29 2026 by rpki-client