Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/xCY-jwx9TbNDKze1sHckd7X3tBk.roa
File: xCY-jwx9TbNDKze1sHckd7X3tBk.roa (raw, json)
Hash identifier: QqEPzXWUxO16JFzM38SIXYJvIofroFhSqR/yItN6UWk=
Subject key identifier: C4:26:3E:8F:0C:7D:4D:B3:43:2B:37:B5:B0:77:24:77:B5:F7:B4:19
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A1D400A0DD3878FD240E65BE6A08CEAC6F
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/xCY-jwx9TbNDKze1sHckd7X3tBk.roa
Signing time: Fri 13 Nov 2026 08:22:53 +0000
ROA not before: Fri 13 Nov 2026 08:22:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.42.88.0/23 maxlen: 24
88.135.152.0/22 maxlen: 24
88.135.154.0/23 maxlen: 24
185.220.199.0/24 maxlen: 24
195.3.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:00:a0:dd:38:78:fd:24:0e:65:be:6a:08:ce:ac:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Nov 13 08:22:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4263e8f0c7d4db3432b37b5b0772477b5f7b419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:cb:10:fc:3a:74:04:4e:f1:a7:a3:19:05:
c2:ec:82:86:85:a4:dc:0b:1b:3e:a1:59:2b:3b:6e:
fd:b4:fa:2b:77:9d:51:a6:64:93:a8:ca:6e:66:e1:
91:2b:da:6b:71:6f:fd:5b:e4:4f:07:00:60:95:3c:
82:c6:45:87:69:69:53:ce:a2:a4:28:b5:4a:ba:22:
d7:7c:c3:6d:6f:e0:89:e6:b8:86:aa:89:a3:9b:57:
f4:6b:4b:0b:41:2a:e5:c4:2b:cf:da:e2:3e:f0:4c:
83:2a:d1:0e:c8:32:ba:40:52:66:a3:3e:17:4e:6b:
d5:d2:2f:78:b6:59:d3:66:3d:e1:eb:61:dd:42:0b:
4b:df:8d:77:2f:f8:5c:e6:0f:07:98:ca:95:33:56:
b1:a4:4a:d5:99:ee:34:01:39:05:c6:10:6f:a9:38:
8d:d9:91:48:82:f0:5f:ef:3a:dc:d0:6b:76:e4:32:
41:35:a9:16:de:c0:95:fa:12:44:9f:a6:87:e0:db:
eb:b5:40:64:58:54:73:63:28:9e:7f:13:22:27:1b:
b8:54:cc:ee:63:cd:35:49:71:56:30:f1:06:e5:64:
48:cf:44:6e:f0:97:f7:e7:d2:f4:7c:e0:31:dd:c0:
17:44:76:f9:0a:a2:49:e0:33:1b:c2:7b:64:2f:a1:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:3E:8F:0C:7D:4D:B3:43:2B:37:B5:B0:77:24:77:B5:F7:B4:19
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/xCY-jwx9TbNDKze1sHckd7X3tBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.88.0/23
88.135.152.0/22
185.220.199.0/24
195.3.144.0/23
Signature Algorithm: sha256WithRSAEncryption
81:b9:58:9b:15:d1:63:fc:a9:e2:67:7d:3e:8b:8c:ec:17:7e:
eb:c0:3b:e2:9d:2e:ec:d3:f2:e7:6d:3e:6d:bc:67:01:c7:e7:
c7:90:2f:0c:86:d8:1f:fb:bf:bb:05:2f:cd:10:ab:73:4f:e2:
fc:47:eb:25:6f:83:ab:31:96:b9:ba:1a:d7:4a:3d:35:27:6a:
73:aa:4e:b6:d6:5d:b0:4b:46:7b:22:1e:18:7f:ba:ed:5c:bb:
9f:a3:ee:46:09:0d:0f:76:90:07:98:5d:95:48:2d:4e:56:63:
d2:df:87:f5:36:29:6d:61:63:2e:a0:8b:53:01:fc:1e:bf:14:
8c:14:1d:39:06:33:a9:61:47:e8:3d:0d:ec:dd:9d:6d:53:e4:
68:e1:61:4b:cc:28:97:34:5b:9b:f8:c2:f1:52:e5:45:12:51:
c8:ac:1e:04:66:27:27:0c:07:21:06:2d:19:e7:3b:c3:77:ca:
ad:f9:6d:71:48:98:04:8e:ff:05:a6:22:c3:61:50:fc:0b:e3:
c4:4a:2e:21:01:13:20:0a:3d:9a:5b:bc:3e:ff:8e:65:3f:e1:
8a:31:6b:f0:4d:bf:82:85:21:1f:f7:da:35:22:e6:98:e7:da:
b2:23:31:7c:37:6f:5b:ee:73:a1:c1:a8:5e:de:8d:81:69:36:
27:76:ce:d4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaHUAKDdOHj9JA5lvmoIzqxvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjYxMTEzMDgyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDI2M2U4ZjBjN2Q0ZGIzNDMyYjM3YjViMDc3MjQ3N2I1ZjdiNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq3LEPw6dARO8aejGQXC7IKGhaTc
Cxs+oVkrO279tPord51RpmSTqMpuZuGRK9prcW/9W+RPBwBglTyCxkWHaWlTzqKk
KLVKuiLXfMNtb+CJ5riGqomjm1f0a0sLQSrlxCvP2uI+8EyDKtEOyDK6QFJmoz4X
TmvV0i94tlnTZj3h62HdQgtL3413L/hc5g8HmMqVM1axpErVme40ATkFxhBvqTiN
2ZFIgvBf7zrc0Gt25DJBNakW3sCV+hJEn6aH4NvrtUBkWFRzYyiefxMiJxu4VMzu
Y801SXFWMPEG5WRIz0Ru8Jf359L0fOAx3cAXRHb5CqJJ4DMbwntkL6EiEQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMQmPo8MfU2zQys3tbB3JHe197QZMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEveENZLWp3eDlUYk5ES3plMXNIY2tkN1gzdEJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBHypYAwQC
WIeYAwQAudzHAwQBwwOQMA0GCSqGSIb3DQEBCwUAA4IBAQCBuVibFdFj/KniZ30+
i4zsF37rwDvinS7s0/LnbT5tvGcBx+fHkC8Mhtgf+7+7BS/NEKtzT+L8R+slb4Or
MZa5uhrXSj01J2pzqk621l2wS0Z7Ih4Yf7rtXLufo+5GCQ0PdpAHmF2VSC1OVmPS
34f1NiltYWMuoItTAfwevxSMFB05BjOpYUfoPQ3s3Z1tU+Ro4WFLzCiXNFub+MLx
UuVFElHIrB4EZicnDAchBi0Z5zvDd8qt+W1xSJgEjv8FpiLDYVD8C+PESi4hARMg
Cj2aW7w+/45lP+GKMWvwTb+ChSEf99o1IuaY59qyIzF8N29b7nOhwahe3o2BaTYn
ds7U
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:10:28 2026 by rpki-client