Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/n91LfvClMfEJOaWjyWdaaytjht8.roa
File: n91LfvClMfEJOaWjyWdaaytjht8.roa (raw, json)
Hash identifier: f6DJDytJxh0m0I4dXqIGaPc1MpD757jZcqpZAD8OAfA=
Subject key identifier: 9F:DD:4B:7E:F0:A5:31:F1:09:39:A5:A3:C9:67:5A:6B:2B:63:86:DF
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A0B882FD31B626C0071812EDA1BBA6380A
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/n91LfvClMfEJOaWjyWdaaytjht8.roa
Signing time: Sat 19 Sep 2026 07:13:07 +0000
ROA not before: Sat 19 Sep 2026 07:13:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 85.133.193.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:82:fd:31:b6:26:c0:07:18:12:ed:a1:bb:a6:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 19 07:13:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fdd4b7ef0a531f10939a5a3c9675a6b2b6386df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:82:69:e6:fc:30:32:12:c3:30:c8:21:46:
81:1f:cf:ee:2d:f8:8a:ad:21:7a:86:ab:46:1b:2e:
a9:15:57:9e:cb:19:22:3d:49:97:99:9f:1e:3e:db:
a2:be:b2:c0:ff:90:4e:95:8d:de:ec:ce:58:c6:b8:
bb:19:2e:d1:9f:a2:ff:fc:75:a0:8e:e6:8e:10:cd:
e5:2a:53:a3:bf:9d:ce:67:05:76:d2:fb:13:91:17:
82:a9:d8:25:e5:11:a2:51:0f:e0:50:40:54:c4:3f:
50:64:c3:06:69:02:11:fb:c4:a0:c9:be:26:b6:ce:
2d:c4:e8:e0:88:33:b8:ae:be:3d:ba:f7:f2:59:ef:
11:55:26:88:75:61:bc:de:d7:41:1b:1d:0e:37:5d:
f9:4d:28:f6:00:f4:cf:52:1a:af:71:cc:74:48:81:
f4:52:c2:2d:37:4b:61:ca:51:95:78:90:f0:4f:68:
e8:04:ee:de:8d:a6:5f:77:48:7e:eb:f7:aa:f5:32:
3d:2a:75:22:20:b0:37:cd:e7:c3:68:e2:0a:4a:de:
e8:f3:ff:5a:6b:47:95:58:0e:09:71:db:a5:a5:c8:
91:f1:92:44:73:06:c4:f0:90:a9:38:35:57:5c:db:
64:ef:7f:58:8b:7d:47:f9:b7:18:6c:68:31:1b:8a:
38:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DD:4B:7E:F0:A5:31:F1:09:39:A5:A3:C9:67:5A:6B:2B:63:86:DF
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/n91LfvClMfEJOaWjyWdaaytjht8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.193.0/24
85.133.249.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c4:22:69:4b:88:70:97:23:9f:95:46:dd:b6:37:48:ed:ff:
4a:1d:ac:6d:3b:d0:83:72:ca:cb:d5:8d:e0:77:bf:dd:ee:8d:
25:78:13:60:ab:09:84:b0:c1:a5:89:eb:20:48:89:6a:81:58:
a4:95:d1:f1:06:ee:a4:52:c3:9f:f8:22:0c:84:eb:ab:13:1d:
f2:d7:16:ef:29:c6:c6:1e:f5:d3:3d:02:ae:f5:2d:d5:d2:42:
99:cf:e2:10:f4:e7:9c:be:03:ce:96:5a:97:37:e2:48:bb:22:
af:7f:50:0e:82:da:9d:41:f0:ee:27:26:e9:bc:b4:34:f5:aa:
3f:9a:45:40:72:a6:80:bf:29:89:46:d6:ca:d7:df:dd:26:aa:
82:20:40:cd:d0:53:57:34:40:35:fa:6e:10:bf:40:8a:34:ac:
0f:69:a8:50:a9:50:b4:61:a5:42:d0:d7:51:93:60:fa:f3:62:
9d:7b:98:65:2d:32:54:da:3b:d1:ab:ca:86:82:68:28:32:5f:
a9:56:98:ff:e2:02:75:ea:bc:cb:fe:0e:d9:df:3d:08:c7:de:
dc:59:94:1f:4b:50:4e:f0:0d:78:dc:e3:52:4c:08:6a:bc:81:
0a:2b:4d:7b:94:de:52:e9:96:00:22:e3:96:3a:fa:2c:51:24:
e1:a9:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:50 2026 by rpki-client