Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/Iza3p41jBE6_qkDPVqehup0bzi4.roa
File: Iza3p41jBE6_qkDPVqehup0bzi4.roa (raw, json)
Hash identifier: kzICjQv6J1H9VCY5K1uBG1nxi8RgyGkrlw4ql42/Z+Y=
Subject key identifier: 23:36:B7:A7:8D:63:04:4E:BF:AA:40:CF:56:A7:A1:BA:9D:1B:CE:2E
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A1911FD88AB3A0665E8640B72BA9209384
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/Iza3p41jBE6_qkDPVqehup0bzi4.roa
Signing time: Sat 31 Oct 2026 08:42:25 +0000
ROA not before: Sat 31 Oct 2026 08:42:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200154
IP address blocks: 95.86.136.0/24 maxlen: 24
95.86.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:1f:d8:8a:b3:a0:66:5e:86:40:b7:2b:a9:20:93:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Oct 31 08:42:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2336b7a78d63044ebfaa40cf56a7a1ba9d1bce2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ff:9a:60:b8:34:c3:fc:6b:f2:dd:72:e2:aa:
2c:a8:db:7b:1d:6c:97:d3:17:6f:5d:cf:e5:43:f2:
71:65:91:3f:c0:bf:dc:89:b4:49:1e:0d:5b:ae:4b:
f6:f3:a5:b2:ce:67:88:f8:15:dc:5c:01:e3:09:55:
f7:cf:2d:1c:5c:ff:e2:f9:7d:fc:80:1e:7e:55:ec:
f8:01:43:1f:11:f3:e1:35:38:7f:4e:4b:0f:4c:46:
2c:b0:08:2d:64:e4:40:a0:5c:15:d1:f9:a2:47:e4:
ab:ff:01:39:3a:b6:1d:d2:3b:0d:54:e8:9c:9c:d6:
0a:23:dc:2e:80:30:31:f3:3f:3f:46:5f:26:19:2b:
8f:49:74:05:2a:5c:33:53:fa:50:00:2d:55:1d:28:
71:de:aa:98:42:5a:f6:1c:e7:e3:ee:a1:3c:85:81:
2b:3f:e8:be:a6:fe:42:78:97:2b:2f:18:3c:05:a5:
cb:4c:35:d1:88:ca:39:3e:fc:e1:76:98:a4:78:9f:
17:bd:9c:3e:24:3c:7f:5c:14:be:99:34:20:74:ab:
e6:2b:81:8e:e3:20:09:36:fb:45:57:93:d4:c9:2b:
ad:51:dd:df:e9:03:52:66:d9:72:a2:99:5c:ff:58:
0a:2f:d4:f9:7b:83:c6:76:5e:e3:49:2a:f3:4f:04:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:36:B7:A7:8D:63:04:4E:BF:AA:40:CF:56:A7:A1:BA:9D:1B:CE:2E
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/Iza3p41jBE6_qkDPVqehup0bzi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.136.0/24
95.86.161.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:76:ca:87:0c:5a:d6:a9:08:80:5f:79:41:59:51:7d:ec:7a:
4f:05:d4:7b:20:fb:15:75:3b:cb:4b:60:17:07:2f:51:d4:79:
e4:42:59:a0:5a:69:25:69:7e:38:33:75:f8:92:b6:8e:9a:61:
f8:be:09:3d:2e:5e:ac:09:8a:80:b7:a3:1d:8a:34:ba:e6:2d:
f4:60:fc:59:63:38:0c:eb:1e:4a:21:03:af:d7:ef:f0:85:71:
7c:a0:2f:c1:12:b0:fe:cf:24:19:3d:10:58:b7:bc:a1:e0:09:
1b:9a:5d:52:da:6a:2c:83:09:b1:1c:d0:fe:22:d6:5b:b1:d0:
55:2d:c8:ee:ed:10:e4:ec:1f:89:7b:0c:d7:47:eb:ed:c7:3c:
bc:67:cb:58:88:c0:5c:53:42:a7:3c:a4:d4:ae:35:c8:b2:a7:
0f:30:eb:93:cc:07:93:9c:13:68:a1:04:81:01:c8:dc:9b:4c:
4e:ef:48:6c:5c:28:81:80:96:2b:b2:f0:ec:7d:71:09:c1:87:
cd:62:d3:26:4f:44:d2:aa:3e:39:10:81:28:19:da:3f:c6:c9:
0a:68:30:35:01:da:b8:0b:b5:a8:72:2d:e7:46:e7:ad:f9:c5:
ef:90:ff:68:4c:52:b4:56:3a:30:ad:49:bf:7e:d6:56:a6:76:
70:60:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:01:39 2026 by rpki-client