Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/_kfQnIvokKk-y7iMkfTNGrYDSBI.roa
File: _kfQnIvokKk-y7iMkfTNGrYDSBI.roa (raw, json)
Hash identifier: IN950bWiQvkE36QDsIQmKPWvfr6QjmrhvENhQOpRe20=
Subject key identifier: FE:47:D0:9C:8B:E8:90:A9:3E:CB:B8:8C:91:F4:CD:1A:B6:03:48:12
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A16719D008A01807DE43BAF408E6847F8D
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/_kfQnIvokKk-y7iMkfTNGrYDSBI.roa
Signing time: Fri 23 Oct 2026 04:51:47 +0000
ROA not before: Fri 23 Oct 2026 04:51:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200154
IP address blocks: 95.86.136.0/24 maxlen: 24
95.86.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:19:d0:08:a0:18:07:de:43:ba:f4:08:e6:84:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Oct 23 04:51:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe47d09c8be890a93ecbb88c91f4cd1ab6034812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:5d:b8:30:4f:dc:86:f7:0c:61:07:c5:0a:
bb:32:69:71:3a:7e:da:31:f8:90:fc:9a:d7:35:35:
8c:09:6d:7b:d2:dd:f6:72:2f:f6:7c:d2:8a:29:44:
ee:a9:b1:4a:ff:68:e6:95:35:f1:56:0c:22:4e:d8:
5b:50:85:94:f1:7e:63:f3:e9:1e:aa:75:e7:77:cd:
45:88:92:0b:ca:40:d6:23:02:af:8c:7c:38:db:64:
5d:6c:14:b5:65:64:89:93:ec:d1:2b:84:94:16:30:
e1:36:1e:3f:5e:3b:53:3b:bb:b2:99:89:f5:d1:b4:
45:d4:29:20:b2:8d:32:df:72:5d:79:b6:06:37:a3:
45:ee:d9:7c:ce:49:5b:bf:13:b6:c9:5a:00:4c:32:
d7:9a:6d:87:e7:1b:9c:b9:09:0e:0c:b8:33:1a:67:
d3:fe:23:9b:82:45:e9:35:42:3c:9a:a6:f0:63:49:
d6:07:5d:6d:bf:ca:36:6c:59:25:88:a1:3f:54:a7:
f0:b1:7c:3e:bf:e5:22:85:65:99:5d:f4:fd:75:fa:
55:23:8e:83:05:53:be:8d:b8:15:f8:50:a4:c9:08:
2d:03:83:5e:ab:be:df:b8:f4:14:e2:7c:8c:b5:4f:
fc:c6:f7:ed:fd:3b:25:1b:1a:81:e4:b4:72:7e:be:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:D0:9C:8B:E8:90:A9:3E:CB:B8:8C:91:F4:CD:1A:B6:03:48:12
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/_kfQnIvokKk-y7iMkfTNGrYDSBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.136.0/24
95.86.161.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c2:c2:c7:a7:c2:dd:68:6a:fb:78:e6:d0:80:11:5a:87:20:
73:dd:08:39:a3:4e:73:25:2d:3c:83:cf:3a:46:fa:c3:01:45:
4f:9f:fd:98:91:f2:10:dc:ee:6f:be:fa:2c:c4:09:8e:86:a3:
97:c4:12:0b:2d:14:51:70:0b:76:3f:87:5d:a5:7f:b4:e6:b6:
fd:07:6a:f4:29:2f:17:a0:ea:41:2f:18:be:18:ea:de:48:08:
78:da:97:91:92:d1:ac:08:8e:16:70:41:72:52:d3:82:cb:fe:
08:a1:38:2f:51:c0:ed:f7:1c:78:26:f6:f5:fa:f0:6f:8d:04:
c1:51:7e:73:4b:fc:3e:cf:e5:ee:33:4a:2c:b2:54:b6:90:69:
e8:dc:c5:bc:15:d3:1f:b0:0b:cb:cb:8e:62:c7:97:a3:f1:2f:
94:d1:47:73:70:4f:6c:65:4d:3e:f0:b4:e8:58:79:03:9d:e1:
8b:96:b9:6c:1b:ea:0e:3a:f8:7d:df:88:77:4c:89:c3:bc:5a:
7d:12:75:32:e5:de:ca:1b:66:ac:ef:0d:7c:36:d2:40:f0:33:
ef:69:7d:cc:00:0c:93:c4:73:3f:32:06:e7:1d:2e:2b:10:3d:
f8:73:e7:ef:41:d4:60:cc:ff:c0:3b:89:57:fd:dd:cd:ee:0a:
97:f1:37:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFnGdAIoBgH3kO69AjmhH+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1
YmU3OWIwHhcNMjYxMDIzMDQ1MTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTQ3ZDA5YzhiZTg5MGE5M2VjYmI4OGM5MWY0Y2QxYWI2MDM0ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspFduDBP3Ib3DGEHxQq7MmlxOn7a
MfiQ/JrXNTWMCW170t32ci/2fNKKKUTuqbFK/2jmlTXxVgwiTthbUIWU8X5j8+ke
qnXnd81FiJILykDWIwKvjHw422RdbBS1ZWSJk+zRK4SUFjDhNh4/XjtTO7uymYn1
0bRF1Ckgso0y33JdebYGN6NF7tl8zklbvxO2yVoATDLXmm2H5xucuQkODLgzGmfT
/iObgkXpNUI8mqbwY0nWB11tv8o2bFkliKE/VKfwsXw+v+UihWWZXfT9dfpVI46D
BVO+jbgV+FCkyQgtA4Neq77fuPQU4nyMtU/8xvft/TslGxqB5LRyfr6JtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP5H0JyL6JCpPsu4jJH0zRq2A0gSMB8GA1UdIwQY
MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt
YTI1ZTE0ZDUzOWEyLzEvX2tmUW5Jdm9rS2steTdpTWtmVE5HcllEU0JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy
LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX1aIAwQA
X1ahMA0GCSqGSIb3DQEBCwUAA4IBAQCQwsLHp8LdaGr7eObQgBFahyBz3Qg5o05z
JS08g886RvrDAUVPn/2YkfIQ3O5vvvosxAmOhqOXxBILLRRRcAt2P4ddpX+05rb9
B2r0KS8XoOpBLxi+GOreSAh42peRktGsCI4WcEFyUtOCy/4IoTgvUcDt9xx4Jvb1
+vBvjQTBUX5zS/w+z+XuM0osslS2kGno3MW8FdMfsAvLy45ix5ej8S+U0UdzcE9s
ZU0+8LToWHkDneGLlrlsG+oOOvh934h3TInDvFp9EnUy5d7KG2as7w18NtJA8DPv
aX3MAAyTxHM/MgbnHS4rED34c+fvQdRgzP/AO4lX/d3N7gqX8TfP
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:57 2026 by rpki-client