Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xq8JDOA9SLRDOm0uNZBmQ8mnu5k.roa
File: xq8JDOA9SLRDOm0uNZBmQ8mnu5k.roa (raw, json)
Hash identifier: Da2JVYFA2McLoWu5sSTdmkf0PXQwvg+7FyyfSioX18U=
Subject key identifier: C6:AF:09:0C:E0:3D:48:B4:43:3A:6D:2E:35:90:66:43:C9:A7:BB:99
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01975A54D3C94A461201A2310B72557E1F53
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xq8JDOA9SLRDOm0uNZBmQ8mnu5k.roa
Signing time: Tue 10 Jun 2025 14:53:17 +0000
ROA not before: Tue 10 Jun 2025 14:53:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.208.0/23 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:54:d3:c9:4a:46:12:01:a2:31:0b:72:55:7e:1f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 10 14:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6af090ce03d48b4433a6d2e35906643c9a7bb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:43:67:75:36:13:c2:6b:00:47:dd:62:7d:78:
10:26:7d:19:13:74:cb:dc:4e:ad:46:5b:a7:35:06:
4d:fe:72:f9:cf:8d:e6:98:74:10:bb:ee:d5:fe:78:
bb:fc:ef:da:6e:be:e8:4d:3a:eb:b1:72:11:bb:a3:
71:05:df:d7:8f:d1:bd:e3:3a:f9:b4:a0:83:1d:52:
22:2c:c3:23:e9:ee:9b:1d:a5:6b:ab:28:d8:4e:1f:
b0:4e:01:66:fd:83:9c:74:d0:d5:c5:fe:9d:07:32:
24:eb:7a:66:99:28:5a:bd:12:c5:a9:62:d0:56:ef:
e8:51:e0:66:20:83:d8:90:ae:5f:ae:a5:7c:81:77:
01:8b:65:63:a6:bc:39:b5:f8:9c:bd:3d:3b:b6:11:
66:83:44:e5:f7:23:ae:be:e7:e0:6e:d1:ad:0c:7b:
2f:a6:da:c7:2d:eb:94:0a:ba:76:11:82:af:bd:74:
a0:87:ec:81:ee:23:15:1c:6f:4e:79:5f:73:62:3b:
eb:31:40:fb:7e:a1:f8:68:38:49:ed:9e:1a:5b:68:
0b:9a:2c:c4:96:53:dd:ff:e9:93:e7:6a:41:bf:80:
3a:70:0d:0a:7a:58:1a:ed:24:e0:c5:a7:67:e6:f1:
d2:54:ab:dd:ea:a9:5a:a7:eb:5e:d4:e9:8a:b1:ca:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AF:09:0C:E0:3D:48:B4:43:3A:6D:2E:35:90:66:43:C9:A7:BB:99
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xq8JDOA9SLRDOm0uNZBmQ8mnu5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.208.0-85.133.213.255
85.133.220.0/24
85.133.222.0/23
85.133.225.0-85.133.227.255
85.133.229.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0/23
85.133.251.0-85.133.252.255
85.133.254.0/23
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:04:23:6a:e4:b8:c9:47:5d:be:a0:6e:47:9a:93:ff:62:46:
26:8d:6f:93:95:36:27:b6:6b:89:ce:3d:b7:ad:6a:56:9f:99:
90:f5:75:72:c4:5f:05:2e:60:e5:fc:82:3c:a7:4c:af:1b:88:
ae:a3:89:c4:cb:ba:42:c4:ca:f0:c9:70:65:7e:a9:70:df:73:
64:35:24:ed:ac:39:80:99:ca:44:3d:3b:85:28:e8:c4:79:29:
cd:14:e7:45:9e:f9:ea:61:c4:ff:51:65:05:ea:61:09:bd:69:
30:08:b1:d6:d2:55:04:6f:a5:4e:f4:59:a7:74:f8:75:59:d7:
65:a2:9a:2d:88:fc:99:c6:3c:f0:f7:02:62:c8:7a:4a:94:e4:
b0:91:a9:07:54:04:94:c6:c3:e8:4c:ce:ce:cf:22:0f:a8:8b:
c4:c6:ff:ab:38:2d:d1:e0:67:6d:81:13:71:65:cc:b0:13:5c:
7c:c6:0b:a4:0a:06:bf:67:af:17:c7:4a:ae:b2:3a:30:21:94:
2e:8d:80:28:43:4c:eb:92:13:26:9c:26:ba:b7:1b:35:f8:bb:
8c:e0:4a:55:f7:06:44:a9:35:cc:c8:17:21:af:1e:e4:a6:63:
a0:04:53:88:5d:be:34:3f:d1:4a:16:83:bd:5e:59:a1:1b:aa:
82:4b:2d:7d
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISAZdaVNPJSkYSAaIxC3JVfh9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwNjEwMTQ1MzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmFmMDkwY2UwM2Q0OGI0NDMzYTZkMmUzNTkwNjY0M2M5YTdiYjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kNndTYTwmsAR91ifXgQJn0ZE3TL
3E6tRlunNQZN/nL5z43mmHQQu+7V/ni7/O/abr7oTTrrsXIRu6NxBd/Xj9G94zr5
tKCDHVIiLMMj6e6bHaVrqyjYTh+wTgFm/YOcdNDVxf6dBzIk63pmmShavRLFqWLQ
Vu/oUeBmIIPYkK5frqV8gXcBi2Vjprw5tficvT07thFmg0Tl9yOuvufgbtGtDHsv
ptrHLeuUCrp2EYKvvXSgh+yB7iMVHG9OeV9zYjvrMUD7fqH4aDhJ7Z4aW2gLmizE
llPd/+mT52pBv4A6cA0Kelga7STgxadn5vHSVKvd6qlap+te1OmKscrEMwIDAQAB
o4ICnTCCApkwHQYDVR0OBBYEFMavCQzgPUi0QzptLjWQZkPJp7uZMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEveHE4SkRPQTlTTFJET20wdU5aQm1ROG1udTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGyBggrBgEFBQcBBwEB/wSBojCBnzCBjQQCAAEwgYYwDAME
B1WFgAMEAFWFmDAMAwQBVYWaAwQFVYWAMAwDBAJVhaQDBABVhcAwDAMEBFWF0AME
AVWF1AMEAFWF3AMEAVWF3jAMAwQAVYXhAwQCVYXgMAwDBABVheUDBABVhegDBABV
hesDBABVhe8DBAFVhfQwDAMEAFWF+wMEAFWF/AMEAVWF/jANBAIAAjAHAwUDKgSH
wDANBgkqhkiG9w0BAQsFAAOCAQEAXQQjauS4yUddvqBuR5qT/2JGJo1vk5U2J7Zr
ic49t61qVp+ZkPV1csRfBS5g5fyCPKdMrxuIrqOJxMu6QsTK8MlwZX6pcN9zZDUk
7aw5gJnKRD07hSjoxHkpzRTnRZ756mHE/1FlBephCb1pMAix1tJVBG+lTvRZp3T4
dVnXZaKaLYj8mcY88PcCYsh6SpTksJGpB1QElMbD6EzOzs8iD6iLxMb/qzgt0eBn
bYETcWXMsBNcfMYLpAoGv2evF8dKrrI6MCGULo2AKENM65ITJpwmurcbNfi7jOBK
VfcGRKk1zMgXIa8e5KZjoARTiF2+ND/RShaDvV5ZoRuqgkstfQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:24:39 2025 by rpki-client