Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/1-itT2gvROV8BPhqzIAr-ivOXq7M.roa
File: 1-itT2gvROV8BPhqzIAr-ivOXq7M.roa (raw, json)
Hash identifier: ET+/yB+gbA5eF/0EQ5hfSG8t1yJ4BiB3R9H+OhDPgPE=
Subject key identifier: FA:2B:53:DA:0B:D1:39:5F:01:3E:1A:B3:20:0A:FE:8A:F3:97:AB:B3
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A0AE0AA1D94F385C29B4399344CE47DC1C
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/1-itT2gvROV8BPhqzIAr-ivOXq7M.roa
Signing time: Thu 17 Sep 2026 06:25:27 +0000
ROA not before: Thu 17 Sep 2026 06:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204986
IP address blocks: 95.86.150.0/24 maxlen: 24
95.86.151.0/24 maxlen: 24
95.86.156.0/24 maxlen: 24
95.86.157.0/24 maxlen: 24
95.86.163.0/24 maxlen: 24
185.233.180.0/22 maxlen: 22
185.233.180.0/23 maxlen: 23
185.233.180.0/24 maxlen: 24
185.233.181.0/24 maxlen: 24
185.233.182.0/23 maxlen: 23
185.233.182.0/24 maxlen: 24
185.233.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:0a:a1:d9:4f:38:5c:29:b4:39:93:44:ce:47:dc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Sep 17 06:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa2b53da0bd1395f013e1ab3200afe8af397abb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:6f:80:98:c2:81:c1:74:fd:15:9d:64:1f:
e4:47:6f:8b:d7:0f:53:e0:4c:47:aa:8c:49:22:1b:
be:bc:eb:2b:4f:b2:cc:7f:12:7e:6d:27:a5:f2:c8:
9a:d3:bf:6c:ff:f7:d8:ed:37:4c:69:0c:2f:fd:f8:
07:fe:b4:2d:5f:f8:63:a0:00:c9:61:4d:6a:81:69:
c7:bc:5c:75:9a:75:9e:45:3b:db:86:e1:f2:4b:23:
43:05:01:5a:3e:a7:da:ae:3d:c0:b2:0d:b5:ae:d1:
ba:c7:5c:d6:11:a7:cc:af:d6:29:50:fe:a0:e0:1e:
67:06:3b:8b:43:d7:99:65:d9:64:d0:9f:50:b5:cc:
a4:52:ab:be:ad:cd:a4:87:b8:6f:47:07:94:4e:a4:
16:09:ac:9e:4e:cc:36:84:b9:b0:1a:13:2b:de:7a:
6f:1c:f5:2c:98:09:1a:6a:d5:e8:09:89:44:6e:a9:
8d:75:76:d7:d0:74:c0:fc:03:18:42:28:0a:b8:1d:
35:3e:5a:40:86:0d:02:65:c0:43:8a:03:75:0f:7e:
f2:b6:39:83:46:d5:94:31:91:23:01:5a:e1:41:a3:
c9:be:8e:03:f7:0c:f5:ea:42:2c:0e:2c:de:00:61:
41:13:3d:f5:73:7e:48:25:49:a8:72:b3:f2:65:6c:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2B:53:DA:0B:D1:39:5F:01:3E:1A:B3:20:0A:FE:8A:F3:97:AB:B3
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/1-itT2gvROV8BPhqzIAr-ivOXq7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.150.0/23
95.86.156.0/23
95.86.163.0/24
185.233.180.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:d8:50:c2:cf:c8:38:0a:b3:a2:ee:6a:52:99:37:9c:5b:18:
0d:53:7f:f9:be:bb:d9:14:ac:46:7b:8c:fe:11:94:c9:85:f9:
e4:25:a1:79:5a:39:24:70:ea:af:47:2b:e8:10:0d:7d:09:8c:
5f:f3:4a:d7:dd:2b:f0:55:14:c2:71:38:e2:50:00:ca:0a:29:
b7:27:29:5f:bc:95:18:71:51:8d:13:3d:3e:99:5d:8b:58:ff:
1f:79:ba:76:c7:c5:f8:0f:ee:4f:47:c7:1b:83:bc:3c:60:b0:
0c:dd:b7:e8:35:86:e3:58:85:cb:7a:d1:9d:3a:f5:bf:a7:ff:
70:aa:cc:87:f7:e9:de:be:62:2f:01:3a:25:95:dc:e6:5c:ef:
17:9b:3d:63:7a:b2:20:9b:de:7e:6f:b5:98:16:77:e9:e3:2f:
51:66:eb:73:24:77:5d:3e:7b:19:1d:06:8b:e9:6a:d2:8c:e4:
f1:cb:e7:67:f0:0c:21:ac:ae:45:81:bb:eb:17:70:5a:f6:fd:
06:92:6d:35:9d:28:c7:17:81:76:40:2f:cb:ea:dc:1c:3e:a6:
51:a5:e9:d4:fe:5d:c6:d6:c3:52:b4:1f:ef:ab:18:06:2e:08:
e9:19:c6:b8:88:c3:1e:9c:8e:58:5d:58:01:f6:aa:0d:6a:50:
09:ad:c4:ce
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAaCuCqHZTzhcKbQ5k0TOR9wcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1
YmU3OWIwHhcNMjYwOTE3MDYyNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTJiNTNkYTBiZDEzOTVmMDEzZTFhYjMyMDBhZmU4YWYzOTdhYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4lvgJjCgcF0/RWdZB/kR2+L1w9T
4ExHqoxJIhu+vOsrT7LMfxJ+bSel8sia079s//fY7TdMaQwv/fgH/rQtX/hjoADJ
YU1qgWnHvFx1mnWeRTvbhuHySyNDBQFaPqfarj3Asg21rtG6x1zWEafMr9YpUP6g
4B5nBjuLQ9eZZdlk0J9QtcykUqu+rc2kh7hvRweUTqQWCayeTsw2hLmwGhMr3npv
HPUsmAkaatXoCYlEbqmNdXbX0HTA/AMYQigKuB01PlpAhg0CZcBDigN1D37ytjmD
RtWUMZEjAVrhQaPJvo4D9wz16kIsDizeAGFBEz31c35IJUmocrPyZWxwlQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFPorU9oL0TlfAT4asyAK/orzl6uzMB8GA1UdIwQY
MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt
YTI1ZTE0ZDUzOWEyLzEvMS1pdFQyZ3ZST1Y4QlBocXpJQXItaXZPWHE3TS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMzNmMWFiLTZhMzUtNGU2My04YmRjLWEyNWUxNGQ1Mzlh
Mi8xL2h5ajBBTmc5U2FxbTZUSU1vc3Y2azlwYjU1cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAV9WlgME
AV9WnAMEAF9WowMEArnptDANBgkqhkiG9w0BAQsFAAOCAQEASthQws/IOAqzou5q
Upk3nFsYDVN/+b672RSsRnuM/hGUyYX55CWheVo5JHDqr0cr6BANfQmMX/NK190r
8FUUwnE44lAAygoptycpX7yVGHFRjRM9Ppldi1j/H3m6dsfF+A/uT0fHG4O8PGCw
DN236DWG41iFy3rRnTr1v6f/cKrMh/fp3r5iLwE6JZXc5lzvF5s9Y3qyIJvefm+1
mBZ36eMvUWbrcyR3XT57GR0Gi+lq0ozk8cvnZ/AMIayuRYG76xdwWvb9BpJtNZ0o
xxeBdkAvy+rcHD6mUaXp1P5dxtbDUrQf76sYBi4I6RnGuIjDHpyOWF1YAfaqDWpQ
Ca3Ezg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:22 2026 by rpki-client