Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/L6qUGypGGqDhbn2upcQrm5Pn4Z4.roa
File: L6qUGypGGqDhbn2upcQrm5Pn4Z4.roa (raw, json)
Hash identifier: rixk+RWWliguKxAZ4UhqaYkPsPUxRlrAyW3vwO3G3Us=
Subject key identifier: 2F:AA:94:1B:2A:46:1A:A0:E1:6E:7D:AE:A5:C4:2B:9B:93:E7:E1:9E
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A15933DFDA1EC0831273369529D6FEA932
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/L6qUGypGGqDhbn2upcQrm5Pn4Z4.roa
Signing time: Tue 20 Oct 2026 12:05:34 +0000
ROA not before: Tue 20 Oct 2026 12:05:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204986
IP address blocks: 95.86.145.0/24 maxlen: 24
95.86.146.0/24 maxlen: 24
95.86.147.0/24 maxlen: 24
95.86.148.0/24 maxlen: 24
95.86.149.0/24 maxlen: 24
95.86.150.0/24 maxlen: 24
95.86.151.0/24 maxlen: 24
95.86.152.0/24 maxlen: 24
95.86.153.0/24 maxlen: 24
95.86.154.0/24 maxlen: 24
95.86.155.0/24 maxlen: 24
95.86.156.0/24 maxlen: 24
95.86.157.0/24 maxlen: 24
185.233.180.0/22 maxlen: 22
185.233.180.0/23 maxlen: 23
185.233.180.0/24 maxlen: 24
185.233.181.0/24 maxlen: 24
185.233.182.0/23 maxlen: 23
185.233.182.0/24 maxlen: 24
185.233.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:33:df:da:1e:c0:83:12:73:36:95:29:d6:fe:a9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Oct 20 12:05:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2faa941b2a461aa0e16e7daea5c42b9b93e7e19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:41:d0:7c:ef:f9:81:d6:db:14:db:eb:a9:
af:18:65:0f:ce:48:05:f0:c2:d8:e8:43:de:e9:b7:
b5:f5:53:31:b8:fc:2a:28:24:94:53:56:22:3f:cd:
96:67:bf:5c:3e:3b:48:a0:bd:9e:7e:7e:ca:44:c6:
df:ac:b0:69:9d:79:ff:53:9d:65:46:85:77:d3:2f:
73:7c:d5:ff:09:6c:0d:fd:af:e2:c4:18:a4:7f:c2:
1e:8c:f4:f6:0d:06:e4:22:71:5b:ae:bb:2e:31:57:
8b:bb:57:ce:3e:3d:c3:79:79:91:78:08:01:9e:3f:
e2:32:61:bd:d1:28:db:b3:f4:b7:1d:10:5c:56:d6:
9b:bc:35:38:c2:6e:b3:19:18:14:32:70:36:30:e8:
77:94:80:c1:1c:53:e6:df:89:e9:0b:2b:6c:d7:f9:
06:ec:18:5b:ad:cf:b9:a1:8e:df:67:c2:74:86:fb:
12:15:55:7a:0d:7d:27:d8:dd:9a:b6:0e:c7:ed:fd:
75:c7:30:3c:6b:fa:19:73:60:03:53:b8:f0:b7:9f:
be:ff:15:db:34:ad:b1:65:46:20:a0:03:e0:5c:39:
62:9e:3c:75:cd:62:dc:ec:2b:8e:b8:95:35:32:a5:
4c:43:bb:df:24:1d:90:3d:bc:f9:f3:2c:46:fe:1d:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AA:94:1B:2A:46:1A:A0:E1:6E:7D:AE:A5:C4:2B:9B:93:E7:E1:9E
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/L6qUGypGGqDhbn2upcQrm5Pn4Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.145.0-95.86.157.255
185.233.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:81:41:12:83:32:ba:94:41:c5:02:27:2c:1f:d4:c0:20:ab:
dc:03:af:3a:93:77:3f:ab:14:30:26:67:51:aa:7a:62:66:4d:
c3:fa:41:0d:9c:ce:05:dd:48:25:1e:8e:cb:14:87:21:90:02:
d3:4c:cb:5e:8f:2b:35:2a:c2:8a:d3:5f:e2:3e:a5:88:8c:02:
81:01:f0:22:8b:ee:c3:ee:94:f2:c3:94:89:98:5c:36:67:c6:
22:4e:c1:5f:a3:ca:49:fa:28:b2:2a:b0:a8:35:41:55:67:f7:
31:5f:57:21:7b:73:a7:58:eb:99:bc:5f:a0:07:af:6a:ea:46:
19:26:8d:a3:a1:46:b9:e2:82:bf:42:a4:da:21:3d:4a:39:3d:
3e:b5:c7:cb:33:5c:68:a2:ac:ee:76:4c:f6:93:1f:a4:cb:45:
0e:2a:a3:27:f1:b3:c2:1d:1c:45:21:b4:2c:5e:1a:8b:1e:37:
81:db:30:1c:46:ea:01:3d:5f:37:00:38:a6:2d:7b:8d:d8:2e:
0e:21:6f:db:a4:67:f2:e2:59:20:7b:cb:5d:9a:dd:0a:0e:ca:
c8:ea:c5:33:72:7e:25:c9:dd:87:2c:ca:93:d0:50:1c:0e:86:
91:99:90:80:2b:26:16:f7:55:70:6e:72:51:0d:7d:5f:2f:65:
aa:8a:d2:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:07:52 2026 by rpki-client