Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/lrSqLR82NRCAZMNlya7umAPkYLI.roa
File: lrSqLR82NRCAZMNlya7umAPkYLI.roa (raw, json)
Hash identifier: e002WIuc6QWJDI+2ljBhJv+vKhj6PzT9diK6pU2V40I=
Subject key identifier: 96:B4:AA:2D:1F:36:35:10:80:64:C3:65:C9:AE:EE:98:03:E4:60:B2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A0B882FCDCDF0BA8BDECE38BAF4D269CB3
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/lrSqLR82NRCAZMNlya7umAPkYLI.roa
Signing time: Sat 19 Sep 2026 07:13:07 +0000
ROA not before: Sat 19 Sep 2026 07:13:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
2a04:87c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:82:fc:dc:df:0b:a8:bd:ec:e3:8b:af:4d:26:9c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 19 07:13:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96b4aa2d1f3635108064c365c9aeee9803e460b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:c2:b0:0e:c8:93:4e:df:4e:2d:47:0e:c1:
86:19:d8:1e:79:99:78:dc:43:ac:d9:5f:db:96:d3:
bf:a0:c1:80:7f:24:04:4b:4c:18:3b:bd:34:47:b8:
c8:b8:07:de:5b:f3:73:71:aa:8b:8a:fd:18:3b:f0:
79:fd:8e:1f:70:4c:7b:8c:7c:20:a1:50:ae:42:c0:
5e:a1:68:ba:a6:73:c3:8a:0a:de:e8:48:56:f0:85:
29:bb:35:80:db:83:0e:45:5c:fd:30:0e:2e:77:db:
23:4d:fa:2f:ab:c8:78:f8:b6:6f:3f:bf:52:d3:f4:
5e:a9:e0:e8:85:66:62:ac:9c:db:42:72:39:9f:2b:
e6:a7:d7:18:88:4b:b5:d4:a7:8c:24:c2:1f:62:1c:
1d:24:31:1b:82:1e:6d:1c:94:db:e7:41:f2:50:ee:
33:d6:48:36:1c:a7:5f:7c:cf:79:87:12:80:af:8b:
45:99:37:69:d4:23:46:e4:a8:d1:24:e5:44:2d:9c:
83:fe:79:a8:69:e0:94:1a:96:47:44:8d:e5:5f:1d:
a2:19:1f:a2:f1:00:9f:5b:bc:1c:d9:ac:56:db:72:
73:49:87:85:3e:87:2b:c7:ed:f9:c0:9a:e5:d2:fa:
a7:2f:25:d2:e0:bc:e2:b4:60:85:e5:14:b1:12:f1:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B4:AA:2D:1F:36:35:10:80:64:C3:65:C9:AE:EE:98:03:E4:60:B2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/lrSqLR82NRCAZMNlya7umAPkYLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.139.255
85.133.141.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.199.0/24
85.133.203.0/24
85.133.207.0/24
85.133.209.0-85.133.215.255
85.133.218.0/23
85.133.222.0/23
85.133.231.0-85.133.232.255
85.133.235.0/24
85.133.251.0/24
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:24:fc:8a:ed:f7:ed:1d:c0:78:37:2f:06:01:95:48:d0:88:
b1:35:dc:13:3b:84:e5:be:68:1d:54:58:a4:06:40:b8:e0:d6:
9b:82:47:a9:30:ad:89:9c:cf:3b:4b:ef:9e:ef:65:ec:b1:61:
b5:e8:f9:0d:ef:92:7e:8e:de:b3:d8:e7:88:38:34:0e:1e:eb:
8b:8b:bd:29:85:d1:0b:fe:07:cf:5b:65:d6:b0:ba:23:e8:32:
b2:9f:35:62:28:3b:d6:87:56:be:b2:ed:bd:1c:d6:14:cb:b1:
40:12:f0:a3:21:f5:89:8b:25:8b:e1:5f:4f:96:73:3f:34:d4:
f3:55:a8:6e:bb:f8:20:b7:3f:4a:dc:05:2e:72:af:fe:2d:23:
83:47:54:d5:10:4c:93:1a:40:68:3b:c2:aa:07:63:71:d0:c9:
47:ee:6c:89:f6:15:f9:5c:20:6f:85:e4:09:43:57:4c:04:83:
61:4e:c2:bc:90:63:70:43:10:6b:7f:c4:ab:8a:3b:9a:39:29:
87:83:81:a1:e2:41:70:96:7a:88:a5:2f:d2:29:fe:f6:c4:2b:
06:d6:e8:ff:09:d9:ae:aa:3b:24:04:22:22:27:13:1c:6e:9f:
b4:8f:41:fc:33:b5:fb:2e:c9:82:ed:13:9c:06:5d:6b:dd:31:
4a:21:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:55:07 2026 by rpki-client