Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/fMMDFT6e2w-Bc-seWRAaUFt0QSI.roa
File: fMMDFT6e2w-Bc-seWRAaUFt0QSI.roa (raw, json)
Hash identifier: 9wfe4T86807zWhFXODkpd4t2xLBZDuBu9/t6XFoJZvQ=
Subject key identifier: 7C:C3:03:15:3E:9E:DB:0F:81:73:EB:1E:59:10:1A:50:5B:74:41:22
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A11586ECA5250A144445E5D3E185ED50B4
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/fMMDFT6e2w-Bc-seWRAaUFt0QSI.roa
Signing time: Wed 07 Oct 2026 08:42:06 +0000
ROA not before: Wed 07 Oct 2026 08:42:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34876
IP address blocks: 95.86.132.0/24 maxlen: 24
95.86.133.0/24 maxlen: 24
95.86.134.0/24 maxlen: 24
95.86.135.0/24 maxlen: 24
95.86.137.0/24 maxlen: 24
95.86.138.0/24 maxlen: 24
95.86.139.0/24 maxlen: 24
95.86.140.0/24 maxlen: 24
95.86.141.0/24 maxlen: 24
95.86.142.0/24 maxlen: 24
95.86.143.0/24 maxlen: 24
95.86.144.0/24 maxlen: 24
95.86.151.0/24 maxlen: 24
95.86.152.0/24 maxlen: 24
95.86.153.0/24 maxlen: 24
95.86.154.0/24 maxlen: 24
95.86.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:86:ec:a5:25:0a:14:44:45:e5:d3:e1:85:ed:50:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Oct 7 08:42:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cc303153e9edb0f8173eb1e59101a505b744122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:ea:94:f6:8d:8a:22:f0:57:c2:41:ba:68:
7b:72:2c:10:cd:a1:2e:45:e6:a0:e5:fa:bd:de:35:
fd:53:22:23:b6:25:06:03:7f:30:4d:d5:b7:9b:09:
6d:80:f6:fd:21:c1:3a:67:c5:2e:22:7d:66:66:f7:
3d:88:83:1b:23:8e:3c:ff:5c:9b:fb:5e:a3:18:dd:
85:d0:8c:7c:d6:c3:db:64:ee:1a:99:49:72:f0:2f:
05:e8:fa:5c:25:f5:b9:68:e0:85:54:4b:a2:1d:05:
90:44:61:e2:2d:e8:7a:ef:bc:d3:a2:02:fe:fa:0c:
f2:d4:59:fe:6f:04:79:1f:64:d6:6c:51:bb:85:d2:
97:bf:a3:00:fd:e2:fe:3e:3b:74:b3:00:f0:26:d9:
3a:1e:8f:79:7b:9d:b4:dc:0d:95:c7:6f:f7:46:57:
86:85:50:56:1b:9d:ea:41:75:1e:e0:66:dc:2e:69:
f4:de:b1:6f:a8:7e:06:9d:69:08:89:7f:4c:26:33:
50:95:2a:da:74:e3:34:87:fd:3e:63:65:b3:5e:5c:
4c:1e:0b:4f:df:7e:ce:d8:8b:3b:ce:74:74:1f:fd:
05:b9:9f:ef:c5:58:00:e7:e6:46:e9:54:06:2f:e6:
59:32:43:95:19:5d:52:9e:7f:f6:76:af:e6:46:02:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:03:15:3E:9E:DB:0F:81:73:EB:1E:59:10:1A:50:5B:74:41:22
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/fMMDFT6e2w-Bc-seWRAaUFt0QSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.132.0/22
95.86.137.0-95.86.144.255
95.86.151.0-95.86.155.255
Signature Algorithm: sha256WithRSAEncryption
04:c3:db:78:d6:b8:c3:70:59:f1:99:91:0d:93:73:e8:87:01:
af:d5:f9:4d:0d:e7:fb:26:41:26:ad:b2:54:22:c1:52:cd:08:
c2:7d:95:72:39:f9:87:77:db:d2:09:a6:1e:43:33:27:53:8b:
b9:8c:3c:47:e2:f6:2d:da:0a:4e:82:4a:05:ed:aa:85:21:b2:
22:ca:c9:d3:2e:94:34:e4:e5:c9:04:d9:8a:ca:e4:74:b4:18:
73:68:58:38:ea:e0:df:d3:27:94:8c:37:04:ad:41:a6:43:b1:
c5:b4:31:fa:30:ad:c0:aa:fa:0b:b4:7d:4e:63:47:13:a5:c1:
c2:98:88:30:90:00:bc:6b:9b:e7:d3:db:21:e7:c7:a1:13:9a:
5a:ab:c0:07:64:60:6a:11:8e:e3:53:f4:19:34:30:1c:07:6f:
67:29:54:44:33:0b:0c:5e:8f:2d:31:b9:df:7b:07:93:58:7a:
54:9d:9f:cd:a8:e6:2c:07:fd:ff:9a:b9:c5:56:0b:b3:f2:f8:
8f:e7:55:20:17:2e:59:48:b6:8a:df:0e:23:18:a5:0b:3f:4a:
c8:55:9d:c2:85:da:9e:ba:38:36:76:74:5c:9f:4d:7e:88:ba:
6b:37:29:cc:d6:f4:8d:a0:34:97:20:71:8a:83:9d:a9:c8:ac:
0c:54:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:27 2026 by rpki-client