Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xDfppUKZpqc19-vGgXT3lwf9WuA.roa
File: xDfppUKZpqc19-vGgXT3lwf9WuA.roa (raw, json)
Hash identifier: 0u0ZdDPysHadKowixwQfvGCPIIj5EAZYvzu+FgRU+Tw=
Subject key identifier: C4:37:E9:A5:42:99:A6:A7:35:F7:EB:C6:81:74:F7:97:07:FD:5A:E0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A0B884D18B286C123BCE1426B2F4427B3D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xDfppUKZpqc19-vGgXT3lwf9WuA.roa
Signing time: Sat 19 Sep 2026 07:15:07 +0000
ROA not before: Sat 19 Sep 2026 07:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
2a04:87c0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:84:d1:8b:28:6c:12:3b:ce:14:26:b2:f4:42:7b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 19 07:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c437e9a54299a6a735f7ebc68174f79707fd5ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:ac:09:f3:70:82:fe:f8:71:8b:f6:55:eb:
36:7e:fc:53:7a:06:5a:64:d7:b7:cb:55:09:ea:42:
39:b1:45:ef:98:3a:46:67:3c:fd:1e:ee:91:0c:9d:
99:6a:e4:05:6d:af:9e:75:e1:1b:2f:72:88:12:9e:
5d:59:b7:1a:25:8e:28:bd:65:0f:b3:30:d4:07:21:
c6:da:4b:3c:99:41:c7:40:fe:60:82:03:72:e0:71:
99:c9:e2:4a:b2:95:ea:83:63:36:e8:65:0e:6a:5e:
79:ca:28:24:88:54:91:bd:05:e1:d8:bf:42:9c:00:
dd:a4:77:a9:cd:fb:e5:3e:cb:91:c4:84:cf:5b:44:
b8:b5:41:f9:c6:4c:20:17:53:10:35:05:5f:c5:09:
e6:bb:69:38:23:5b:9a:8c:ed:43:5f:a0:5a:44:63:
f0:cb:0b:6d:96:74:b2:8c:a2:47:c2:9b:95:f8:35:
0f:c9:ab:ce:dc:4e:ee:2f:4b:c9:fa:06:b9:1b:a3:
c9:17:2b:b6:f3:83:96:1c:eb:7b:77:15:33:0d:33:
72:d7:45:fe:1f:b4:18:bd:c9:2f:dd:3c:d4:49:59:
18:33:8d:82:8c:b1:f0:08:2b:a8:e8:ea:08:24:f5:
f3:c0:3c:fa:9d:a3:a0:d7:b5:f2:26:d3:88:2f:63:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:E9:A5:42:99:A6:A7:35:F7:EB:C6:81:74:F7:97:07:FD:5A:E0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xDfppUKZpqc19-vGgXT3lwf9WuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.227.0-85.133.228.255
85.133.233.0-85.133.234.255
85.133.237.0-85.133.238.255
85.133.240.0/24
85.133.247.0/24
85.133.249.0/24
IPv6:
2a04:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
9d:cc:57:27:97:b0:9f:ba:31:60:e4:e8:f0:b9:e5:a4:ca:9f:
e1:1c:32:34:bd:1b:66:88:83:70:a5:cf:58:45:a1:86:38:08:
94:75:49:b4:78:f8:76:7c:71:63:56:68:b9:cf:a9:e0:06:70:
ce:48:58:68:ae:50:bb:ab:84:36:b4:de:99:4e:44:16:f1:2b:
23:42:db:7b:41:48:85:a7:b1:34:29:59:6d:e1:58:26:18:f0:
44:fc:35:c5:43:57:f8:6e:1a:d1:6e:2c:ac:a4:8b:2e:45:0c:
e9:4a:ac:96:89:a7:4a:2c:d6:f1:11:90:50:98:c9:54:43:2e:
9a:8c:74:46:4c:9b:b8:a2:4f:7b:84:e4:12:3d:12:74:7e:00:
4e:84:51:ce:35:a7:36:4e:4f:63:8e:49:bc:04:d1:bc:63:14:
47:cd:25:c3:60:92:d5:4a:4d:75:4e:d3:92:13:d2:0f:ab:97:
49:74:10:97:97:b1:57:a2:6c:0b:ae:40:42:f8:37:eb:6e:9a:
04:92:e5:1d:9e:bc:83:c4:ee:67:e5:5b:83:42:a1:a0:27:e6:
80:d8:c9:bb:89:10:48:30:75:75:1e:a7:35:dc:73:6c:c1:9a:
1e:ee:4d:cc:bc:38:7a:9c:84:89:74:02:c2:e2:c5:df:c5:fc:
73:90:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:47 2026 by rpki-client