Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9iqhMwnYSX5ByoMRX9SAo8AlvHI.roa
File: 9iqhMwnYSX5ByoMRX9SAo8AlvHI.roa (raw, json)
Hash identifier: BJfARuPttpbMngkfJ7n8tMQBGZgrTZz0L0hbWWeGa8I=
Subject key identifier: F6:2A:A1:33:09:D8:49:7E:41:CA:83:11:5F:D4:80:A3:C0:25:BC:72
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A11F7818302401A5BB3F9D9C2CFCFC30A0
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9iqhMwnYSX5ByoMRX9SAo8AlvHI.roa
Signing time: Fri 09 Oct 2026 07:02:06 +0000
ROA not before: Fri 09 Oct 2026 07:02:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30042
IP address blocks: 88.135.152.0/23 maxlen: 24
88.135.154.0/23 maxlen: 24
195.3.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:78:18:30:24:01:a5:bb:3f:9d:9c:2c:fc:fc:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Oct 9 07:02:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f62aa13309d8497e41ca83115fd480a3c025bc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:85:ef:f7:27:56:a9:fa:8f:83:db:e5:4d:
40:77:1b:26:08:13:b1:2e:75:7d:cb:dd:b4:b2:5e:
39:86:f7:4a:17:e9:47:f0:d1:d7:d4:52:e5:5c:2a:
97:07:26:f4:b9:65:25:f8:62:86:2f:e0:92:ba:7f:
44:af:20:6d:00:07:a1:8f:d2:59:22:5d:dc:05:a6:
76:bb:2a:4c:4a:5f:f9:b0:39:39:71:5b:54:15:b7:
05:5c:16:1b:24:81:ed:c5:71:4f:c8:99:fd:9a:91:
fe:49:ff:6e:fa:61:cf:a6:84:44:35:06:28:05:57:
b4:94:64:ae:61:e3:57:0a:89:a1:81:69:99:e8:a9:
b1:24:67:99:78:77:85:52:dd:b1:2b:0e:8e:50:27:
ad:59:7c:7b:7a:36:09:b3:c3:b6:1b:0f:07:f0:e5:
a8:64:12:42:66:70:78:f3:1d:61:23:46:22:5e:90:
16:28:3d:ff:75:40:9e:8b:5a:2b:05:e6:72:17:7c:
d7:24:b7:22:3f:68:43:ee:44:b5:b2:4c:3f:86:ed:
ca:eb:8c:92:4e:3e:fb:04:2e:22:23:7b:e5:92:d6:
9f:2d:4a:90:12:d1:4d:6a:35:eb:9d:fd:2e:8d:a4:
47:f1:a3:0e:4b:03:1e:16:72:1e:c3:9c:dd:e8:4d:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:A1:33:09:D8:49:7E:41:CA:83:11:5F:D4:80:A3:C0:25:BC:72
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9iqhMwnYSX5ByoMRX9SAo8AlvHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.152.0/22
195.3.144.0/23
Signature Algorithm: sha256WithRSAEncryption
06:a5:d4:a5:83:f3:17:3e:55:a4:4c:f3:a7:0b:e0:1d:3b:f9:
dc:b5:91:51:d9:03:59:2f:b3:db:37:d9:17:45:7b:f2:69:47:
20:1f:39:00:d6:2b:95:80:1e:9f:17:64:e3:7f:0e:1c:1d:31:
51:64:2c:05:36:01:33:ce:9d:78:6e:c9:cd:9b:93:8b:2d:6a:
58:47:30:7a:c4:7d:6f:44:72:30:a7:99:72:60:5c:d1:51:39:
d2:9d:61:cd:6b:24:d5:8d:c7:0c:8d:0d:cd:77:1e:c9:11:f6:
e9:f8:18:74:e7:56:19:4e:6e:46:2d:cd:07:42:1a:48:e7:f6:
a4:47:21:2e:bb:e2:de:97:c5:9c:34:bc:45:8b:37:2d:34:17:
64:8b:16:e9:da:38:77:cd:bb:2e:d3:79:2e:68:63:57:39:72:
45:75:30:44:28:78:96:c0:19:a9:2b:f0:8e:d8:12:c2:ba:6e:
1e:43:5d:8e:5b:19:7d:cc:81:a9:7d:1e:91:71:aa:80:9c:3b:
70:e6:93:05:85:c3:1e:69:b2:11:97:a5:f6:55:50:d9:30:6d:
9b:3c:54:cb:b4:4f:8a:4c:13:8b:a8:44:82:73:0e:27:d3:5f:
59:99:96:01:b9:00:6b:cc:d9:0f:84:74:c1:a7:ee:28:4e:16:
c8:0c:bc:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEfeBgwJAGluz+dnCz8/DCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjYxMDA5MDcwMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjJhYTEzMzA5ZDg0OTdlNDFjYTgzMTE1ZmQ0ODBhM2MwMjViYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MqF7/cnVqn6j4Pb5U1AdxsmCBOx
LnV9y920sl45hvdKF+lH8NHX1FLlXCqXByb0uWUl+GKGL+CSun9EryBtAAehj9JZ
Il3cBaZ2uypMSl/5sDk5cVtUFbcFXBYbJIHtxXFPyJn9mpH+Sf9u+mHPpoRENQYo
BVe0lGSuYeNXComhgWmZ6KmxJGeZeHeFUt2xKw6OUCetWXx7ejYJs8O2Gw8H8OWo
ZBJCZnB48x1hI0YiXpAWKD3/dUCei1orBeZyF3zXJLciP2hD7kS1skw/hu3K64yS
Tj77BC4iI3vlktafLUqQEtFNajXrnf0ujaRH8aMOSwMeFnIew5zd6E0rDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPYqoTMJ2El+QcqDEV/UgKPAJbxyMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvOWlxaE13bllTWDVCeW9NUlg5U0FvOEFsdkhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWIeYAwQB
wwOQMA0GCSqGSIb3DQEBCwUAA4IBAQAGpdSlg/MXPlWkTPOnC+AdO/nctZFR2QNZ
L7PbN9kXRXvyaUcgHzkA1iuVgB6fF2Tjfw4cHTFRZCwFNgEzzp14bsnNm5OLLWpY
RzB6xH1vRHIwp5lyYFzRUTnSnWHNayTVjccMjQ3Ndx7JEfbp+Bh051YZTm5GLc0H
QhpI5/akRyEuu+Lel8WcNLxFizctNBdkixbp2jh3zbsu03kuaGNXOXJFdTBEKHiW
wBmpK/CO2BLCum4eQ12OWxl9zIGpfR6RcaqAnDtw5pMFhcMeabIRl6X2VVDZMG2b
PFTLtE+KTBOLqESCcw4n019ZmZYBuQBrzNkPhHTBp+4oThbIDLxF
-----END CERTIFICATE-----
Generated at Tue Oct 20 02:42:17 2026 by rpki-client