Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/XOi85xchegQdEgpI4mXcfY6_oyo.roa
File: XOi85xchegQdEgpI4mXcfY6_oyo.roa (raw, json)
Hash identifier: NWZm79H/sNZAfnfeCevBGwXIE/eghb061VhNgtCA6WY=
Subject key identifier: 5C:E8:BC:E7:17:21:7A:04:1D:12:0A:48:E2:65:DC:7D:8E:BF:A3:2A
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 01A1D5440B07C58EA24DDC44BA97A8C61D41
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/XOi85xchegQdEgpI4mXcfY6_oyo.roa
Signing time: Fri 13 Nov 2026 14:16:08 +0000
ROA not before: Fri 13 Nov 2026 14:16:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207143
IP address blocks: 95.36.100.0/22 maxlen: 24
95.36.100.0/23 maxlen: 23
95.36.102.0/23 maxlen: 23
185.77.0.0/24 maxlen: 24
185.101.156.0/22 maxlen: 22
185.101.156.0/24 maxlen: 24
185.101.157.0/24 maxlen: 24
185.101.158.0/24 maxlen: 24
185.101.159.0/24 maxlen: 24
185.229.88.0/24 maxlen: 24
185.229.89.0/24 maxlen: 24
185.229.90.0/24 maxlen: 24
185.229.91.0/24 maxlen: 24
193.203.253.0/24 maxlen: 24
204.174.100.0/24 maxlen: 24
213.254.165.0/24 maxlen: 24
2a11:8b81::/32 maxlen: 32
2a11:8b82::/32 maxlen: 32
2a11:8b83:1::/48 maxlen: 48
2a11:8b84:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:44:0b:07:c5:8e:a2:4d:dc:44:ba:97:a8:c6:1d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Nov 13 14:16:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ce8bce717217a041d120a48e265dc7d8ebfa32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:ce:02:5f:8f:a9:df:0a:57:f9:92:b0:67:
f7:5c:da:31:a8:fe:7a:e3:7b:11:28:ce:f9:eb:ea:
f8:37:16:47:9c:18:24:0b:01:5d:78:a0:0c:09:67:
21:7f:33:69:81:04:35:b7:f3:38:b5:54:a4:8d:f9:
d4:5d:51:4c:c2:ac:06:e1:b6:b5:d4:11:74:32:21:
10:f2:09:cf:be:2c:44:f8:19:59:32:4d:3e:86:dd:
81:97:56:24:e1:b5:09:92:e5:10:81:34:76:f7:34:
48:bc:00:04:42:10:44:41:17:e1:51:41:0d:f7:18:
96:d6:d8:71:ed:8a:e3:3f:9d:32:ff:27:2e:f5:f8:
b8:a9:4e:e6:52:81:64:de:62:71:59:22:bd:f8:71:
e5:f4:5a:4e:6f:00:4c:21:0d:e4:c6:ec:01:a0:8d:
2d:58:81:be:98:07:1e:ba:c0:0e:5b:b0:43:cb:6b:
d7:c2:17:09:0e:8d:14:f6:0e:50:7f:d7:85:60:1f:
60:6c:50:52:51:df:87:ae:eb:e5:38:b5:68:4a:23:
75:83:45:7a:97:d3:0c:0d:e9:62:a0:34:79:9c:45:
c1:4b:56:b6:1e:35:ad:49:4d:d0:22:32:64:41:92:
e1:9d:a9:72:52:fb:bb:2b:e2:6f:44:94:c8:a3:14:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E8:BC:E7:17:21:7A:04:1D:12:0A:48:E2:65:DC:7D:8E:BF:A3:2A
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/XOi85xchegQdEgpI4mXcfY6_oyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.36.100.0/22
185.77.0.0/24
185.101.156.0/22
185.229.88.0/22
193.203.253.0/24
204.174.100.0/24
213.254.165.0/24
IPv6:
2a11:8b81::-2a11:8b82:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8b83:1::/48
2a11:8b84:4::/48
Signature Algorithm: sha256WithRSAEncryption
2e:26:c2:be:7f:c9:57:02:ad:ec:9d:f8:57:d3:35:12:91:f8:
3f:51:e1:6e:14:48:15:d8:65:f7:bc:55:ec:77:c6:d9:bf:d0:
03:7c:ce:86:0c:43:3f:02:be:b8:e7:e3:28:9f:d5:69:0b:a4:
e6:0a:27:ae:82:c0:41:ed:bb:0b:d8:6b:6c:f0:32:b8:84:3d:
5e:38:a1:a6:28:f7:48:14:f8:21:fa:d0:31:21:ee:0f:8e:e1:
4a:88:7e:fc:e0:1e:4a:cb:a2:c9:1b:f5:5d:db:55:9d:36:49:
3c:1c:ec:5b:15:f8:03:7e:f6:cc:42:0b:8c:80:d6:c7:0e:52:
5d:3d:95:38:39:21:d6:d6:56:b5:37:5e:a0:28:72:82:7b:29:
f9:a6:a7:1d:4b:22:56:c6:f5:5b:2e:c6:dd:24:dd:c5:eb:97:
be:23:62:31:2d:ac:3f:25:e2:1f:1c:9c:e9:3a:53:09:b9:ff:
63:af:9c:7e:68:7a:82:e5:a6:21:6a:fc:e5:d9:cd:49:1f:0d:
6c:77:ff:5b:0f:45:47:98:df:46:98:fe:03:83:67:68:7a:c3:
48:e2:45:37:c4:46:d5:fd:50:11:4e:81:97:2f:c9:56:5e:b5:
9a:16:e5:a4:8a:0a:d0:9c:20:7f:49:dc:85:2b:81:cf:9e:34:
db:9d:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:07:14 2026 by rpki-client