Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/jwVyx2Uoo_29bMJVE5RoO2Ou9Qw.roa
File: jwVyx2Uoo_29bMJVE5RoO2Ou9Qw.roa (raw, json)
Hash identifier: H5EwJIfAqmSbZVjgOG20J2rIONRB1LoF8Y875+qkWM8=
Subject key identifier: 8F:05:72:C7:65:28:A3:FD:BD:6C:C2:55:13:94:68:3B:63:AE:F5:0C
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A060DDC09C814A58498B55245DDA181DCF
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/jwVyx2Uoo_29bMJVE5RoO2Ou9Qw.roa
Signing time: Wed 02 Sep 2026 06:45:40 +0000
ROA not before: Wed 02 Sep 2026 06:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200154
IP address blocks: 95.86.136.0/24 maxlen: 24
95.86.158.0/24 maxlen: 24
95.86.159.0/24 maxlen: 24
95.86.160.0/24 maxlen: 24
95.86.161.0/24 maxlen: 24
95.86.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:dd:c0:9c:81:4a:58:49:8b:55:24:5d:da:18:1d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Sep 2 06:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f0572c76528a3fdbd6cc2551394683b63aef50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:76:81:57:1d:4a:c6:61:50:09:d4:a8:cc:
2e:d2:1f:e4:0a:7e:1f:b4:3e:7a:ef:27:47:5c:3e:
c2:34:e2:92:5f:4b:9f:a9:50:08:b5:92:8b:d4:b4:
f9:61:b7:d7:3f:ef:d4:9e:5b:97:a5:80:d7:73:6c:
30:10:3b:d4:fe:20:b4:bb:d6:d6:13:48:49:d3:75:
e8:42:1f:88:58:8a:73:c6:d4:9e:f3:58:f5:1e:cc:
19:68:f3:ab:b5:e9:12:75:35:c5:a6:70:42:1f:87:
41:59:2b:4a:e7:c4:eb:39:a6:4a:c7:10:da:05:52:
c0:15:f8:c5:80:db:70:4a:0a:b6:9b:e5:ee:12:27:
51:7d:15:b6:8c:6b:3a:30:99:b8:98:c0:a0:11:2b:
73:76:15:de:a4:cb:c0:67:b6:86:e8:cb:08:2c:04:
5d:8c:50:36:64:72:01:cb:5c:36:19:be:c1:ba:c3:
49:ed:30:5c:40:57:96:7d:26:09:83:bf:c2:ba:b8:
71:0e:01:74:b2:13:2a:0e:c2:03:b9:07:e1:32:c0:
f5:73:2f:78:63:1b:00:73:c0:11:ab:10:d5:39:60:
91:fa:7e:cd:d3:c4:d1:90:f4:4d:ba:7a:19:47:54:
0f:41:3d:a1:e6:96:4a:e2:a5:23:bb:61:4b:f1:6d:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:72:C7:65:28:A3:FD:BD:6C:C2:55:13:94:68:3B:63:AE:F5:0C
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/jwVyx2Uoo_29bMJVE5RoO2Ou9Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.136.0/24
95.86.158.0-95.86.162.255
Signature Algorithm: sha256WithRSAEncryption
92:05:c5:12:9a:b5:b4:8a:0d:ec:63:6d:c4:7e:9f:9a:56:a5:
ab:3b:da:4c:73:41:b4:a2:64:b0:e9:49:4c:45:37:2f:8c:ad:
9a:ed:48:e7:b2:12:cc:fa:67:dc:bf:88:c5:bd:8c:00:ee:65:
4f:3e:bf:ac:87:35:ff:5a:4c:ad:70:00:62:93:85:6e:d8:0e:
d6:0d:ae:59:b8:89:5d:34:4c:8e:e5:a8:bf:21:09:e8:4a:13:
c1:e5:30:25:9d:90:93:7d:5a:55:30:b4:e9:a2:c3:06:7d:fc:
49:e7:48:37:cd:47:8d:39:07:fa:75:17:c1:1c:55:35:7c:27:
0b:57:b5:32:4e:3e:ef:1d:c3:14:f9:47:65:2d:1c:4a:3b:6c:
f2:10:4a:c4:ac:86:0d:6c:1d:0e:c3:e2:7a:bb:dc:1d:5b:85:
ac:6e:ca:9c:1c:83:ee:1d:b9:61:a2:59:14:66:d0:4c:d2:d4:
f3:66:99:30:84:8d:7e:3a:77:73:11:65:be:11:66:3c:4a:f9:
25:ba:42:ef:46:4b:27:57:14:c1:5c:2a:5a:f1:9b:da:94:b3:
e6:b2:1a:2d:e9:1d:4d:b3:4c:bd:1c:cc:86:f9:20:82:4f:13:
48:5d:90:db:4f:05:07:60:23:f2:8c:4f:cc:36:02:b4:6e:6a:
ab:d0:06:d1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaBg3cCcgUpYSYtVJF3aGB3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1
YmU3OWIwHhcNMjYwOTAyMDY0NTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjA1NzJjNzY1MjhhM2ZkYmQ2Y2MyNTUxMzk0NjgzYjYzYWVmNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tF2gVcdSsZhUAnUqMwu0h/kCn4f
tD567ydHXD7CNOKSX0ufqVAItZKL1LT5YbfXP+/UnluXpYDXc2wwEDvU/iC0u9bW
E0hJ03XoQh+IWIpzxtSe81j1HswZaPOrtekSdTXFpnBCH4dBWStK58TrOaZKxxDa
BVLAFfjFgNtwSgq2m+XuEidRfRW2jGs6MJm4mMCgEStzdhXepMvAZ7aG6MsILARd
jFA2ZHIBy1w2Gb7BusNJ7TBcQFeWfSYJg7/CurhxDgF0shMqDsIDuQfhMsD1cy94
YxsAc8ARqxDVOWCR+n7N08TRkPRNunoZR1QPQT2h5pZK4qUju2FL8W3cUQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFI8FcsdlKKP9vWzCVROUaDtjrvUMMB8GA1UdIwQY
MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt
YTI1ZTE0ZDUzOWEyLzEvandWeXgyVW9vXzI5Yk1KVkU1Um9PMk91OVF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy
LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAX1aIMAwD
BAFfVp4DBABfVqIwDQYJKoZIhvcNAQELBQADggEBAJIFxRKatbSKDexjbcR+n5pW
pas72kxzQbSiZLDpSUxFNy+MrZrtSOeyEsz6Z9y/iMW9jADuZU8+v6yHNf9aTK1w
AGKThW7YDtYNrlm4iV00TI7lqL8hCehKE8HlMCWdkJN9WlUwtOmiwwZ9/EnnSDfN
R405B/p1F8EcVTV8JwtXtTJOPu8dwxT5R2UtHEo7bPIQSsSshg1sHQ7D4nq73B1b
haxuypwcg+4duWGiWRRm0EzS1PNmmTCEjX46d3MRZb4RZjxK+SW6Qu9GSydXFMFc
Klrxm9qUs+ayGi3pHU2zTL0czIb5IIJPE0hdkNtPBQdgI/KMT8w2ArRuaqvQBtE=
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:50:03 2026 by rpki-client