Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/t2M2W76ZB36CpSnkZZgZapQo_V8.roa
File: t2M2W76ZB36CpSnkZZgZapQo_V8.roa (raw, json)
Hash identifier: NBlTQZ6B4r8nzTov7lvRuViOT21EY0BAblo9WxcrWD8=
Subject key identifier: B7:63:36:5B:BE:99:07:7E:82:A5:29:E4:65:98:19:6A:94:28:FD:5F
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A0D89BA617B956BBD36D7F4E259144E6D2
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/t2M2W76ZB36CpSnkZZgZapQo_V8.roa
Signing time: Fri 25 Sep 2026 12:47:54 +0000
ROA not before: Fri 25 Sep 2026 12:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200154
IP address blocks: 95.86.136.0/24 maxlen: 24
95.86.158.0/24 maxlen: 24
95.86.161.0/24 maxlen: 24
95.86.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:9b:a6:17:b9:56:bb:d3:6d:7f:4e:25:91:44:e6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Sep 25 12:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b763365bbe99077e82a529e46598196a9428fd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:d2:a1:64:d2:13:c2:43:49:60:29:03:f3:
c4:f3:89:3b:36:c7:fe:b2:4b:c8:a4:6e:6f:8b:47:
4a:d4:c2:0e:3e:b5:e9:4f:82:19:53:ae:60:d0:7d:
1e:5b:11:39:c3:7b:0a:49:10:e5:11:a2:7a:9a:dd:
81:42:b4:5a:5d:7b:35:54:7f:ce:a2:80:0d:2c:ac:
4e:8a:18:53:0f:ba:fd:44:60:db:0f:8d:44:ca:2e:
45:4a:a8:2f:fc:67:65:fc:cd:6b:51:d3:ba:27:da:
e3:ec:93:d8:f6:30:2d:c9:6c:e6:3d:f3:82:73:35:
fd:fd:4b:67:de:e8:fb:62:e3:43:6b:c1:37:0a:5b:
24:a9:66:8d:77:ec:b5:a1:ce:ce:fe:15:66:88:5a:
fd:cc:2a:ae:6a:ce:09:fb:54:44:b2:60:d9:a5:2b:
43:49:c1:c9:5d:ff:af:f3:71:e3:ba:49:d4:b5:7c:
dc:23:df:34:27:74:d6:37:3b:5a:5b:67:48:20:ca:
0c:6c:86:71:a2:ca:58:72:e9:0b:d0:7c:e1:8f:e8:
93:cc:97:4d:45:d9:ab:71:fe:33:3d:97:63:3a:bd:
16:dc:8c:1c:c1:01:a9:5d:87:0b:96:cd:2f:34:30:
a9:b4:ed:d3:88:7e:67:61:df:00:78:97:f9:7b:1c:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:63:36:5B:BE:99:07:7E:82:A5:29:E4:65:98:19:6A:94:28:FD:5F
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/t2M2W76ZB36CpSnkZZgZapQo_V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.136.0/24
95.86.158.0/24
95.86.161.0-95.86.162.255
Signature Algorithm: sha256WithRSAEncryption
39:60:91:bf:56:34:55:6f:93:bd:13:a4:ec:f2:00:f9:fe:01:
20:4c:9c:ad:5e:e8:aa:2e:21:34:bd:4b:77:aa:c1:f9:e6:d1:
fb:5f:6e:8d:08:f6:9f:c6:e4:1d:31:5b:4f:56:f0:d9:19:5a:
00:92:93:a8:24:23:6a:27:35:a7:f6:e3:ed:86:95:d0:84:21:
cf:51:d3:c5:af:f6:7f:5e:18:65:3f:95:24:37:30:c8:9f:33:
ec:0d:20:8d:be:5d:c0:c0:95:60:7e:e3:f4:b9:14:1c:30:e5:
31:a1:7f:3e:7a:a9:59:4c:22:5c:89:9b:ca:88:0e:4a:13:9b:
0a:78:08:32:ae:85:b1:7e:8d:92:b3:38:f7:11:d6:e2:9c:1a:
fa:bd:9e:a7:2a:41:5d:82:db:0a:2e:82:2d:0e:6b:6a:1c:6e:
ad:06:f3:ba:d9:0a:c3:0f:07:e1:ff:77:29:46:ac:5b:41:6f:
d3:bb:ed:70:3e:6a:9a:79:70:86:f8:3a:d0:22:14:7a:ab:e9:
4d:89:5b:55:e6:f0:3c:ca:64:08:53:88:2e:7d:1c:b1:0d:bf:
15:19:3c:0f:a7:e2:9f:dd:1e:ba:4b:5b:58:1b:0a:c0:62:c3:
b0:e6:a6:07:35:aa:42:5e:25:d1:ef:f5:ee:87:cb:36:d2:ba:
2e:41:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:25 2026 by rpki-client