Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/Fg7N_gQFSybcMtVV8_M9Elsq198.roa
File: Fg7N_gQFSybcMtVV8_M9Elsq198.roa (raw, json)
Hash identifier: qHY5rWQi6Q9lmnwTOfO2DKm7A2p8iS4b9yJI5JgWPWc=
Subject key identifier: 16:0E:CD:FE:04:05:4B:26:DC:32:D5:55:F3:F3:3D:12:5B:2A:D7:DF
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A07FAD04A32D906152704A4BEF8BCC162F
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/Fg7N_gQFSybcMtVV8_M9Elsq198.roa
Signing time: Tue 08 Sep 2026 06:20:40 +0000
ROA not before: Tue 08 Sep 2026 06:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34876
IP address blocks: 95.86.132.0/24 maxlen: 24
95.86.133.0/24 maxlen: 24
95.86.134.0/24 maxlen: 24
95.86.135.0/24 maxlen: 24
95.86.137.0/24 maxlen: 24
95.86.138.0/24 maxlen: 24
95.86.139.0/24 maxlen: 24
95.86.140.0/24 maxlen: 24
95.86.141.0/24 maxlen: 24
95.86.142.0/24 maxlen: 24
95.86.143.0/24 maxlen: 24
95.86.144.0/24 maxlen: 24
95.86.145.0/24 maxlen: 24
95.86.146.0/24 maxlen: 24
95.86.147.0/24 maxlen: 24
95.86.148.0/24 maxlen: 24
95.86.149.0/24 maxlen: 24
95.86.151.0/24 maxlen: 24
95.86.152.0/24 maxlen: 24
95.86.153.0/24 maxlen: 24
95.86.154.0/24 maxlen: 24
95.86.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:ad:04:a3:2d:90:61:52:70:4a:4b:ef:8b:cc:16:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Sep 8 06:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=160ecdfe04054b26dc32d555f3f33d125b2ad7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:ec:7e:5c:85:22:72:47:f3:93:37:a9:55:
09:d7:de:74:00:c4:07:3a:22:d4:86:cc:a8:c5:65:
8e:b5:4b:65:3e:97:b7:a2:46:0f:9a:5e:6e:d0:b5:
d9:3e:19:fc:8c:3b:13:22:79:f0:db:6e:62:ff:98:
e7:1c:34:49:93:13:45:a7:b1:4b:f5:bd:58:93:c5:
66:82:57:79:55:bb:a7:d1:ba:87:91:c4:49:00:98:
cc:cd:56:cf:3f:ce:57:a2:d5:24:48:31:ba:0f:86:
ae:81:98:0e:7b:9a:e7:9a:70:0c:15:05:a7:9e:48:
b9:3a:50:f7:a1:54:2e:fa:df:c8:6d:73:cb:6f:d7:
d9:a0:ce:ec:5f:05:51:7e:5a:25:be:90:ac:16:a6:
db:a7:6b:40:e8:f0:33:c5:ee:bf:c4:89:7a:1b:88:
68:1a:c5:ff:4c:5c:32:5c:a9:00:bf:6d:1c:23:39:
bf:d7:69:6a:15:f6:30:ae:58:10:ec:8b:ac:fe:57:
89:99:3b:33:09:5f:4f:11:ba:f4:67:5d:00:62:70:
a8:46:11:22:58:86:da:68:16:20:59:4d:ad:f0:e9:
af:66:d1:bc:35:df:2a:f0:03:19:24:7d:a2:18:4d:
54:c8:ce:2c:ff:b1:e1:db:12:53:1a:f6:b7:e7:53:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:CD:FE:04:05:4B:26:DC:32:D5:55:F3:F3:3D:12:5B:2A:D7:DF
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/Fg7N_gQFSybcMtVV8_M9Elsq198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.132.0/22
95.86.137.0-95.86.149.255
95.86.151.0-95.86.155.255
Signature Algorithm: sha256WithRSAEncryption
a6:94:52:b3:14:c2:f5:7d:0b:3f:ea:64:f2:ca:da:d9:fd:0a:
ab:8a:4f:b8:56:d0:6e:b8:03:ec:ce:61:47:83:1b:71:1f:6b:
b7:5e:53:af:1c:d0:2a:14:92:36:8d:9c:19:8d:32:44:c6:48:
50:a8:f9:13:95:b4:20:ee:70:48:bf:e7:3a:76:51:7a:c5:37:
61:23:c2:0a:b9:a1:ab:6d:20:95:5a:1f:ee:17:7a:dd:ab:d6:
5d:09:aa:41:9d:05:6a:03:b4:9e:2f:e7:57:b1:3d:e2:fd:22:
63:96:fa:3d:98:56:d3:c6:aa:76:50:58:1e:6c:ee:2d:bf:02:
14:1f:33:63:03:c2:c1:1b:d5:9d:cb:5e:4a:4d:0a:03:07:7b:
53:ec:0f:a3:ee:9f:ff:9b:11:ae:ad:d9:dd:bd:9f:2b:83:77:
46:00:31:09:88:b4:48:38:a7:89:5a:32:f3:33:6b:36:a0:d1:
e3:6b:f6:f4:22:d8:95:86:6d:15:e4:cc:68:96:6f:9e:00:a5:
2a:9b:57:e8:08:e3:d2:1c:cf:74:ce:7b:a6:0a:80:bc:82:e3:
cd:95:3e:48:38:cc:fa:1b:a8:2a:b3:28:eb:43:bf:e3:a6:ce:
22:31:18:bb:40:cd:51:02:c1:99:65:15:82:16:12:06:8a:01:
63:3d:d5:a2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaB/rQSjLZBhUnBKS++LzBYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1
YmU3OWIwHhcNMjYwOTA4MDYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjBlY2RmZTA0MDU0YjI2ZGMzMmQ1NTVmM2YzM2QxMjViMmFkN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P7sflyFInJH85M3qVUJ1950AMQH
OiLUhsyoxWWOtUtlPpe3okYPml5u0LXZPhn8jDsTInnw225i/5jnHDRJkxNFp7FL
9b1Yk8Vmgld5Vbun0bqHkcRJAJjMzVbPP85XotUkSDG6D4augZgOe5rnmnAMFQWn
nki5OlD3oVQu+t/IbXPLb9fZoM7sXwVRflolvpCsFqbbp2tA6PAzxe6/xIl6G4ho
GsX/TFwyXKkAv20cIzm/12lqFfYwrlgQ7Ius/leJmTszCV9PEbr0Z10AYnCoRhEi
WIbaaBYgWU2t8OmvZtG8Nd8q8AMZJH2iGE1UyM4s/7Hh2xJTGva351NzwwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBYOzf4EBUsm3DLVVfPzPRJbKtffMB8GA1UdIwQY
MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt
YTI1ZTE0ZDUzOWEyLzEvRmc3Tl9nUUZTeWJjTXRWVjhfTTlFbHNxMTk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy
LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQCX1aEMAwD
BABfVokDBAFfVpQwDAMEAF9WlwMEAl9WmDANBgkqhkiG9w0BAQsFAAOCAQEAppRS
sxTC9X0LP+pk8sra2f0Kq4pPuFbQbrgD7M5hR4MbcR9rt15TrxzQKhSSNo2cGY0y
RMZIUKj5E5W0IO5wSL/nOnZResU3YSPCCrmhq20glVof7hd63avWXQmqQZ0FagO0
ni/nV7E94v0iY5b6PZhW08aqdlBYHmzuLb8CFB8zYwPCwRvVncteSk0KAwd7U+wP
o+6f/5sRrq3Z3b2fK4N3RgAxCYi0SDiniVoy8zNrNqDR42v29CLYlYZtFeTMaJZv
ngClKptX6Ajj0hzPdM57pgqAvILjzZU+SDjM+huoKrMo60O/46bOIjEYu0DNUQLB
mWUVghYSBooBYz3Vog==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:23:48 2026 by rpki-client