Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/qxH47r_0TcDeX5ES5YUjI25GYyQ.roa
File: qxH47r_0TcDeX5ES5YUjI25GYyQ.roa (raw, json)
Hash identifier: CGRzVhzV19X7JKFYRyC0oRcV0F12u4MUVNB5RsQk09s=
Subject key identifier: AB:11:F8:EE:BF:F4:4D:C0:DE:5F:91:12:E5:85:23:23:6E:46:63:24
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A167203898436051B4429E559F1051B36F
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/qxH47r_0TcDeX5ES5YUjI25GYyQ.roa
Signing time: Fri 23 Oct 2026 04:58:47 +0000
ROA not before: Fri 23 Oct 2026 04:58:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208410
IP address blocks: 95.86.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:20:38:98:43:60:51:b4:42:9e:55:9f:10:51:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Oct 23 04:58:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab11f8eebff44dc0de5f9112e58523236e466324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:fa:82:29:db:22:36:8a:80:82:44:55:33:
89:12:69:bd:bb:e9:ed:af:23:77:f4:97:57:e9:a0:
5b:5c:2d:01:d7:24:0b:c9:1d:c0:54:6a:1b:50:52:
48:b7:a0:5e:26:12:32:88:d7:ba:f5:5f:87:52:5b:
d4:ee:b9:59:3f:d3:fb:15:59:d2:21:0f:22:59:16:
ae:df:8b:43:05:ac:83:56:b3:9f:78:6b:88:4b:08:
66:72:6b:e7:03:45:34:4b:80:e6:cf:47:b1:d6:69:
a2:76:81:3a:be:7c:04:53:ae:ef:62:f2:46:90:57:
b2:ed:73:1f:8a:e5:8d:3c:00:29:f1:e8:7b:e8:4b:
ef:f5:5f:1b:f8:b5:f5:54:d6:6e:ca:13:8d:44:1c:
d6:32:52:38:bf:d0:d9:bc:d0:34:22:ed:7e:58:f6:
c2:c5:0c:96:0e:ba:bf:d6:63:f8:84:07:e7:cc:04:
f2:ad:d8:b4:f6:21:77:ac:71:7b:16:07:48:df:24:
d3:62:93:1b:cb:d6:be:19:32:ec:73:0c:32:d8:f8:
8e:42:ea:d1:18:44:1b:2d:a3:af:93:0b:1a:69:0e:
e5:f5:d1:fd:f8:e8:6a:08:6e:85:bd:0b:ee:37:98:
f3:d7:b4:29:03:a0:c7:1b:8a:f4:3b:48:0f:38:41:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:F8:EE:BF:F4:4D:C0:DE:5F:91:12:E5:85:23:23:6E:46:63:24
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/qxH47r_0TcDeX5ES5YUjI25GYyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.159.0/24
Signature Algorithm: sha256WithRSAEncryption
29:74:b2:1e:86:d2:39:0b:00:d5:e3:4e:31:63:c6:a6:75:32:
ba:f0:58:0f:07:6f:73:ec:de:f6:6d:65:27:75:e9:5c:65:5c:
bf:04:71:51:b5:37:7e:df:b9:b2:c2:5f:13:01:f3:b2:5a:ba:
fb:76:f2:23:93:c8:37:c8:ef:b1:9c:4c:bc:4f:3b:a2:e3:d0:
c8:77:41:2f:48:06:1c:97:6e:87:ba:eb:8c:8e:6b:12:5c:83:
32:d5:6f:26:83:c8:c0:98:d1:e1:3c:8a:50:b8:67:7a:c4:ee:
50:90:41:49:e8:be:11:aa:74:84:dd:d5:fa:10:c1:88:98:ed:
85:58:7f:2d:1e:88:ee:14:f4:89:43:31:54:2d:a1:35:cd:6a:
d8:7a:db:25:b2:36:b0:6d:7f:b0:25:23:89:22:59:fe:b7:6a:
f4:2e:22:9a:70:e8:1a:ca:d3:1e:27:c7:fa:21:49:0b:e3:c6:
4e:f5:a2:57:68:15:06:f4:b3:09:be:fa:aa:e1:d9:95:93:33:
ae:76:5c:c9:32:8b:2b:bc:ff:2e:0e:12:a6:73:37:2e:5f:48:
79:dd:49:12:db:15:7a:35:48:0f:5d:74:3c:6b:07:51:e9:59:
7d:05:23:0f:a8:78:26:94:80:be:77:f7:63:f7:fe:84:06:3c:
e0:81:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:14 2026 by rpki-client