Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/AD2IgnaDcxP-iUrYmaC-dtbyvTQ.roa
File: AD2IgnaDcxP-iUrYmaC-dtbyvTQ.roa (raw, json)
Hash identifier: YirutIpsNuM7OfsWdL6cUp/DubORpuhrcBem96Hz7EU=
Subject key identifier: 00:3D:88:82:76:83:73:13:FE:89:4A:D8:99:A0:BE:76:D6:F2:BD:34
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019D57DE65703184589E934D19EDC548EB67
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/AD2IgnaDcxP-iUrYmaC-dtbyvTQ.roa
Signing time: Sat 04 Apr 2026 09:41:25 +0000
ROA not before: Sat 04 Apr 2026 09:41:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 85.133.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:57:de:65:70:31:84:58:9e:93:4d:19:ed:c5:48:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 4 09:41:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=003d888276837313fe894ad899a0be76d6f2bd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:16:35:66:c0:8b:3c:00:72:b6:01:4d:b7:
07:ba:18:d2:53:c9:48:3a:b9:6e:96:5d:9f:c5:6e:
64:7d:68:aa:d4:95:5f:97:3d:12:f7:7e:9d:41:9e:
42:e6:5d:39:d1:38:16:24:70:1b:23:0c:ad:88:39:
72:a8:36:65:fe:ea:52:2d:3f:d7:1c:a6:89:41:a3:
4e:b3:b0:23:8d:3c:47:ad:64:39:de:3e:47:fa:e1:
b1:8c:d6:8b:c5:05:8c:c2:98:5c:cb:2b:bd:f7:08:
82:0a:44:74:0f:05:58:3b:7c:8c:b4:26:d4:04:44:
fa:20:82:c3:e7:07:e0:b6:85:fa:f0:21:95:98:58:
50:8c:7d:46:a9:06:09:7b:23:7d:06:ec:e5:eb:42:
74:ac:55:41:70:8c:22:7d:69:06:07:62:63:9a:57:
de:92:ff:0c:39:0b:34:4f:ef:0a:08:ad:9d:32:7d:
45:4c:b8:e1:d0:cc:3a:a5:5f:86:a0:22:e8:75:d6:
2f:c5:07:39:37:ef:f0:31:97:1e:50:09:1d:a5:5e:
4e:f2:a4:5e:66:54:4f:39:36:20:28:cb:b8:5e:f9:
2c:78:77:e2:0a:0c:bd:d0:87:59:a2:ee:93:69:8f:
a5:eb:66:60:d9:c7:f3:18:cd:57:95:18:19:19:59:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3D:88:82:76:83:73:13:FE:89:4A:D8:99:A0:BE:76:D6:F2:BD:34
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/AD2IgnaDcxP-iUrYmaC-dtbyvTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fd:fb:d0:19:d7:b8:cb:f1:49:58:41:c8:ba:49:60:f9:0d:
fa:54:72:8c:d3:9a:c5:e8:00:4c:1b:7f:36:a6:f9:4a:63:80:
0c:35:4c:9d:55:b0:db:78:44:ab:df:78:ca:cb:fb:06:3f:b7:
b2:05:39:e5:43:02:c9:ca:3a:e7:b3:ae:3f:ba:0a:04:d0:1d:
38:92:a6:3c:8b:7d:18:13:af:cd:13:07:aa:2f:57:ce:1c:ae:
75:8e:55:68:b3:62:ec:49:a1:8f:a8:0a:11:61:7e:c3:a5:b3:
66:e3:0b:53:99:f9:6d:8f:a4:c3:56:d4:a6:17:5b:db:da:09:
0e:e6:9e:6f:10:62:e4:89:e2:db:04:e6:bb:10:3d:53:7b:40:
a2:c1:7d:98:62:47:73:1a:dd:a2:6c:3d:6d:e2:ce:61:6a:61:
03:f0:93:ac:fb:b8:2a:29:fb:ed:51:83:ae:0e:e2:ef:09:68:
21:97:54:08:28:04:82:87:95:52:c4:2e:ec:b2:35:a4:77:94:
f2:fe:17:37:d5:db:ea:77:0b:bd:c9:7e:b7:9e:6b:ad:39:62:
a4:d4:66:01:ff:82:9a:be:28:9a:42:03:f3:62:42:5d:0e:51:
ee:f2:22:c3:7c:cf:83:05:59:cf:17:47:d1:8c:63:a1:ee:24:
4c:e5:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:06 2026 by rpki-client