Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/7Tx6m1Mlr9g68gnr49sVUkDk1Xg.roa
File: 7Tx6m1Mlr9g68gnr49sVUkDk1Xg.roa (raw, json)
Hash identifier: 1SDLELL+XgHE5flIOP5YIh561gYe5fn195KucrdnSZ8=
Subject key identifier: ED:3C:7A:9B:53:25:AF:D8:3A:F2:09:EB:E3:DB:15:52:40:E4:D5:78
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A09ABBB2F2A8D38086783098373CB6A556
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/7Tx6m1Mlr9g68gnr49sVUkDk1Xg.roa
Signing time: Sun 13 Sep 2026 12:26:27 +0000
ROA not before: Sun 13 Sep 2026 12:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 85.133.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:bb:b2:f2:a8:d3:80:86:78:30:98:37:3c:b6:a5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 13 12:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed3c7a9b5325afd83af209ebe3db155240e4d578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:1b:c7:73:2d:21:49:d7:3a:2d:00:67:6c:
cd:0b:3f:31:19:31:77:76:18:9d:2f:d9:5b:be:c9:
3b:7b:f4:68:a8:46:07:51:70:3e:61:1f:b6:be:cd:
49:1e:7b:89:a7:28:b1:ad:53:74:f7:ea:77:10:dd:
c8:a8:cb:1d:f6:73:1f:ab:0d:59:91:f1:9e:d9:4e:
f7:04:12:3c:75:f3:70:03:a9:e3:93:39:45:90:9a:
79:d6:41:79:64:cb:c2:86:4a:6b:04:75:5c:ea:fd:
1a:65:97:ec:77:61:63:c9:eb:07:38:ed:f7:77:9a:
72:0f:7c:b0:18:96:59:d9:80:95:32:06:64:c9:a5:
b4:78:16:91:6f:09:b6:00:5f:79:9c:8e:a5:22:70:
9a:75:93:8c:ee:83:32:93:0d:17:a6:c6:84:54:c6:
dc:d0:14:e1:4c:a4:18:35:0c:a0:e7:36:3d:f7:64:
c5:73:06:03:2b:5c:f8:c7:f2:fe:16:1f:a0:9f:fb:
cf:1f:bb:d1:1a:30:1c:11:15:ab:60:a4:f0:8a:4c:
8d:47:cf:f2:2c:6e:e4:7d:16:e5:5e:a2:8d:d9:54:
10:c2:18:80:a4:b0:c1:f3:42:13:94:76:65:fb:2a:
dc:06:54:71:f3:4f:d1:dd:47:d6:39:52:9d:a0:20:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:7A:9B:53:25:AF:D8:3A:F2:09:EB:E3:DB:15:52:40:E4:D5:78
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/7Tx6m1Mlr9g68gnr49sVUkDk1Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.202.0/24
Signature Algorithm: sha256WithRSAEncryption
48:5c:37:67:36:92:9f:c1:1d:0c:6b:58:a0:50:d1:e8:b4:46:
35:1e:89:76:92:3d:71:69:20:ac:37:9a:ed:5e:d7:7c:0c:55:
71:ea:7c:06:e8:31:80:9a:a2:98:84:d0:bc:dd:67:5c:45:1d:
b1:64:8f:2f:43:03:75:06:23:3b:fa:dd:ed:c5:42:46:bc:33:
b2:f1:ce:55:26:d9:58:c9:d9:0f:3a:8c:f5:9b:9f:cd:66:a2:
0c:8d:4e:26:58:3f:81:1f:44:09:ed:08:f6:f8:af:48:98:95:
15:60:8c:48:23:93:b3:c6:dc:d4:48:e5:d8:a4:cd:bb:d2:0e:
bd:0f:28:7e:00:9d:c7:b2:b2:a1:5f:de:a7:b3:be:df:75:da:
36:b5:7e:62:98:f1:f8:c4:1e:bd:0b:68:70:42:10:d1:c4:a6:
4d:c3:08:ab:33:24:25:5a:19:73:08:4d:3b:c1:3c:77:be:da:
ff:0f:34:4b:80:bf:cc:3a:ad:69:d7:26:d3:3a:11:5e:7c:4c:
6b:d7:76:47:f2:2b:f2:25:8d:25:a8:e6:99:5c:d1:1f:51:45:
99:f6:aa:6c:df:44:9c:a3:fd:86:eb:45:5c:2b:e5:89:bc:31:
31:71:fe:34:04:e5:01:4a:89:1f:8c:fb:df:3f:2e:13:e0:87:
74:7d:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:25:14 2026 by rpki-client