Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/9zHInslftdR-WTREL502oLRwOwQ.roa
File: 9zHInslftdR-WTREL502oLRwOwQ.roa (raw, json)
Hash identifier: jDPNOxcen5N6aPN2tf3xyYHO0gdcKMnqEAPq1TTj3hk=
Subject key identifier: F7:31:C8:9E:C9:5F:B5:D4:7E:59:34:44:2F:9D:36:A0:B4:70:3B:04
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A0D89BA6B5D18D026BB9F82555245759CE
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/9zHInslftdR-WTREL502oLRwOwQ.roa
Signing time: Fri 25 Sep 2026 12:47:54 +0000
ROA not before: Fri 25 Sep 2026 12:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215056
IP address blocks: 95.86.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:9b:a6:b5:d1:8d:02:6b:b9:f8:25:55:24:57:59:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Sep 25 12:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f731c89ec95fb5d47e5934442f9d36a0b4703b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a0:36:bd:de:f4:11:72:68:39:77:77:47:35:
18:df:3a:69:34:2f:5a:89:4a:8b:6e:2a:21:49:15:
ca:62:d4:79:b6:01:99:ce:68:75:d8:7b:35:d4:ee:
ff:d1:af:4e:b7:96:d6:26:9a:1b:1a:4d:64:53:65:
c7:4b:e9:d7:8c:1e:48:31:55:04:70:93:18:99:a2:
61:8b:27:8e:c6:c0:4c:ce:ff:1f:15:76:47:cc:fe:
06:d5:91:f1:b4:a5:30:69:e9:3f:e5:1d:e6:b0:5c:
cc:55:6c:b9:0b:f8:0c:d6:8e:9f:5d:4f:27:8c:b4:
24:2d:92:fa:d0:a7:c3:13:d2:fd:e0:0e:ae:f4:3c:
5c:7e:26:dc:cb:57:1a:03:06:31:14:e1:8b:d0:91:
49:7a:d8:df:b3:ad:36:bd:21:ad:ff:41:aa:79:5b:
2a:e9:37:4a:f7:93:5e:37:70:e8:9b:c0:c4:67:21:
87:09:9d:1f:82:8e:9b:70:ca:64:fb:d3:97:17:ec:
45:64:8b:af:4a:4c:24:2c:ff:13:bc:5c:03:40:f5:
c8:6d:13:5f:63:92:6f:20:74:69:65:a1:7d:f5:80:
4b:74:57:2e:37:be:0c:ed:39:c7:87:66:5c:1b:54:
a0:68:95:74:e5:0e:b6:c6:11:3b:dd:7f:42:1b:d9:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:31:C8:9E:C9:5F:B5:D4:7E:59:34:44:2F:9D:36:A0:B4:70:3B:04
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/9zHInslftdR-WTREL502oLRwOwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.159.0/24
Signature Algorithm: sha256WithRSAEncryption
46:83:f7:f8:76:59:50:f1:12:7a:b1:7e:a9:52:eb:53:93:48:
7d:1e:a1:09:c6:93:bc:4b:49:63:85:41:51:15:e2:51:d8:ad:
55:e3:94:50:f3:24:a5:e9:bf:5e:5b:40:c2:43:2e:af:37:77:
08:2a:10:36:f1:9c:e4:ff:26:ec:94:d6:16:a4:d3:6a:b0:75:
0a:07:d7:ae:1c:14:05:c5:dc:7e:9d:03:d8:60:6a:dc:ca:6b:
d5:7f:20:fb:48:01:65:b7:6b:ad:66:52:38:0c:6e:4d:3e:fe:
c8:50:cc:26:78:ee:02:3d:00:ab:11:af:e9:42:99:61:14:09:
fe:70:5a:d2:92:73:9e:06:10:e9:8a:ff:3a:bd:9d:b6:0c:04:
3d:88:f8:4e:77:75:fa:ed:dc:a9:9f:da:be:3d:70:63:c0:f0:
26:78:60:cc:2c:a4:34:c7:03:ae:a0:65:61:aa:ae:2c:ac:59:
a7:d6:d2:a9:c8:ab:01:bb:9d:37:0c:44:df:a7:25:d3:bf:3b:
9a:17:98:7a:70:fe:42:ab:d7:a8:b9:6a:36:fb:71:e5:36:46:
97:0d:d2:d4:90:c9:9d:89:8b:29:22:84:71:ba:2b:ad:1f:1c:
d8:0d:c3:c1:63:8e:6b:53:70:9c:ea:ee:01:d6:d4:2b:94:9c:
6b:3a:0c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:18 2026 by rpki-client