Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JDRQMg3nFiPaRwFxnJQi1-AbBAg.roa
File: JDRQMg3nFiPaRwFxnJQi1-AbBAg.roa (raw, json)
Hash identifier: gToDJn13ltVSFYC/uSSPmvjPn1G4zKEagGW7tfpE0aw=
Subject key identifier: 24:34:50:32:0D:E7:16:23:DA:47:01:71:9C:94:22:D7:E0:1B:04:08
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A0B884D1D0548B8A0148885632E1226E92
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JDRQMg3nFiPaRwFxnJQi1-AbBAg.roa
Signing time: Sat 19 Sep 2026 07:15:07 +0000
ROA not before: Sat 19 Sep 2026 07:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 85.133.216.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:84:d1:d0:54:8b:8a:01:48:88:56:32:e1:22:6e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 19 07:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=243450320de71623da4701719c9422d7e01b0408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:1c:77:9f:5a:83:2b:17:55:c6:ff:0f:45:
c4:01:01:44:ab:39:55:33:4d:d5:91:e6:0b:32:38:
96:19:d2:e9:da:55:34:7f:03:e8:7f:02:68:bc:d7:
05:f1:3d:ff:d2:c4:7a:9a:2c:a5:6e:f3:3c:d7:70:
92:24:d8:64:58:8c:ce:00:06:ee:54:92:f8:89:4c:
93:84:2c:91:60:4b:17:5f:20:6d:4b:5c:60:4f:26:
37:15:44:89:b7:f3:48:dc:40:41:06:66:16:36:9b:
ba:e6:7d:5c:94:5a:d4:de:75:53:d1:25:92:a6:ab:
87:41:09:ac:ec:51:f2:fa:5b:4e:23:24:45:ec:69:
cd:8d:21:0b:a6:5c:e8:5f:42:b4:75:86:f9:1f:57:
3a:a0:8f:bb:51:21:0d:62:b1:9d:56:9b:3a:e3:8f:
a7:cf:fb:fe:72:c9:53:55:a6:ea:de:a7:e2:cd:0f:
97:3e:d1:e6:3b:e9:3c:96:a8:2d:2c:00:50:61:f6:
db:e7:79:69:d8:db:06:9a:27:c7:21:c4:6b:85:2f:
68:70:39:60:06:2a:50:e8:00:c6:79:b5:1c:62:47:
46:9c:04:76:eb:57:43:0b:47:5d:77:97:1e:cb:ba:
5d:31:90:db:10:f9:e2:24:91:d8:9e:d9:4e:d7:81:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:50:32:0D:E7:16:23:DA:47:01:71:9C:94:22:D7:E0:1B:04:08
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JDRQMg3nFiPaRwFxnJQi1-AbBAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.216.0/24
85.133.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5b:b5:7a:51:e7:fd:51:4a:78:45:63:08:4f:b4:80:e1:89:
67:c9:f3:52:20:a6:9a:62:bf:53:8e:fa:1e:e9:49:4b:1f:ac:
76:0a:f4:c6:f8:78:5a:bf:e0:f2:48:31:08:f7:ef:e5:1d:5d:
57:6e:3d:3d:d4:c2:66:b5:cd:90:da:99:77:a1:11:77:c6:f7:
97:a7:46:27:e2:60:6f:91:f9:58:aa:7a:9c:4f:44:c3:30:fa:
fa:6f:52:6a:72:f9:de:96:8d:b8:72:c5:0e:c9:8f:de:27:43:
a4:c1:e6:99:30:59:d7:15:5d:d6:16:de:5b:ca:73:5d:50:b9:
67:4b:a9:c0:aa:51:18:83:76:43:2f:0e:27:92:88:ca:b5:6d:
4e:02:2f:5b:c4:74:f9:f5:21:e1:1a:e9:86:08:5d:b1:60:5b:
73:0e:09:4a:24:35:c4:a7:29:8a:c3:cb:f0:be:05:b2:ac:58:
d7:d4:c4:c0:a1:45:0f:11:eb:f3:09:16:9e:ad:05:a2:61:b7:
13:d6:50:c3:35:26:e1:4d:44:95:a8:77:cf:cf:cf:7c:fc:b1:
9a:da:48:21:6f:20:f1:61:cf:67:6e:bf:8e:58:17:b0:0d:78:
6e:3a:1f:26:ee:81:a9:5b:80:9c:b3:f7:4c:1b:a3:3c:96:d9:
44:5b:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:31:19 2026 by rpki-client