Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/toAh8pI39iElM-lMCmpCuQvXSCo.roa
File: toAh8pI39iElM-lMCmpCuQvXSCo.roa (raw, json)
Hash identifier: SCU3wIv9WJppN/iEPVjJQTCPiZluXehN3MzKcx9Xfug=
Subject key identifier: B6:80:21:F2:92:37:F6:21:25:33:E9:4C:0A:6A:42:B9:0B:D7:48:2A
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A18BF9A10FD98F7BACC92BE7ABEAFB99C8
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/toAh8pI39iElM-lMCmpCuQvXSCo.roa
Signing time: Fri 30 Oct 2026 08:42:35 +0000
ROA not before: Fri 30 Oct 2026 08:42:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204986
IP address blocks: 95.86.146.0/24 maxlen: 24
95.86.147.0/24 maxlen: 24
95.86.148.0/24 maxlen: 24
95.86.149.0/24 maxlen: 24
95.86.150.0/24 maxlen: 24
95.86.151.0/24 maxlen: 24
95.86.152.0/24 maxlen: 24
95.86.153.0/24 maxlen: 24
95.86.154.0/24 maxlen: 24
95.86.155.0/24 maxlen: 24
95.86.156.0/24 maxlen: 24
95.86.157.0/24 maxlen: 24
185.233.180.0/22 maxlen: 22
185.233.180.0/23 maxlen: 23
185.233.180.0/24 maxlen: 24
185.233.181.0/24 maxlen: 24
185.233.182.0/23 maxlen: 23
185.233.182.0/24 maxlen: 24
185.233.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:f9:a1:0f:d9:8f:7b:ac:c9:2b:e7:ab:ea:fb:99:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Oct 30 08:42:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b68021f29237f6212533e94c0a6a42b90bd7482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:86:16:21:7d:94:a2:68:89:e3:3b:ae:49:
06:12:c7:30:61:d9:49:4a:fc:eb:41:86:92:88:cb:
5e:fe:3e:b6:2e:92:f3:53:be:29:7d:ab:45:87:9d:
8a:e1:e4:d5:84:63:b3:d6:78:ed:6c:e9:43:2c:e9:
42:de:41:64:48:d5:f3:ae:81:e4:7a:bc:c4:68:52:
00:6b:54:84:eb:16:23:2c:0e:77:b7:8d:8c:38:eb:
86:d9:a8:2f:10:e4:ac:f6:3d:98:d9:14:64:0a:24:
c1:ee:cd:56:29:3f:a3:e7:56:13:a1:f0:cc:6f:51:
f5:51:ab:47:e6:38:83:97:9d:53:d2:1b:6a:28:ca:
d5:44:ea:35:64:89:74:41:7a:85:94:39:09:41:66:
15:1a:47:ba:29:4a:12:ba:31:76:1b:2b:3c:41:80:
28:54:a5:7b:65:e7:63:6e:ed:19:ac:cd:38:aa:42:
2d:53:df:2b:23:d0:3f:77:63:53:68:4d:34:ff:35:
0e:4a:17:9c:ad:6f:9f:2e:34:e6:3c:80:03:ad:8b:
d0:c9:00:ed:02:1c:24:0b:d9:c6:b6:3d:35:57:31:
46:ae:8c:dd:4e:e9:d6:aa:ce:7b:45:ca:0f:32:35:
62:2c:3c:71:34:f8:83:b9:31:44:22:57:5f:a5:54:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:21:F2:92:37:F6:21:25:33:E9:4C:0A:6A:42:B9:0B:D7:48:2A
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/toAh8pI39iElM-lMCmpCuQvXSCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.146.0-95.86.157.255
185.233.180.0/22
Signature Algorithm: sha256WithRSAEncryption
66:45:ef:bc:fe:e6:f1:f0:40:1d:fa:5b:be:6f:68:0c:50:3e:
fd:77:3e:62:93:0e:ac:10:88:ae:0a:ed:fa:a8:fa:79:0a:b5:
e1:f1:b1:4c:d3:56:cd:6f:8a:40:b6:1f:57:af:00:58:1a:53:
0d:ec:29:9e:7c:30:fd:16:e8:c5:af:b7:03:1f:e4:36:da:02:
14:73:68:1f:b5:86:0e:ce:8a:bc:52:77:79:29:c5:30:1b:2b:
7e:3e:df:32:05:83:22:23:11:85:59:0a:23:eb:01:e4:ad:c9:
e6:ad:86:46:21:b5:57:64:bc:58:11:13:86:fb:6d:6f:44:f9:
51:d6:e7:29:cd:e0:f9:c2:c3:38:d4:f8:35:0d:4d:82:33:39:
29:54:35:79:ca:0d:46:38:f3:4b:b3:e4:5d:48:6d:8c:9a:63:
34:e7:94:1b:ab:be:1b:df:d8:7f:db:b0:a0:13:39:23:1c:f1:
cf:23:b8:5c:a9:8b:8f:4a:bd:fa:c1:ce:41:58:7d:7f:20:36:
1a:16:be:ad:23:ec:1e:16:fa:6a:0f:67:f9:d9:4d:16:7b:4d:
e5:78:9f:68:bb:cf:87:00:56:77:8e:8e:ba:3c:57:f0:34:aa:
36:6a:44:98:25:8b:c9:1b:e3:84:cf:fd:f4:86:0a:c5:aa:9e:
40:6a:3d:84
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaGL+aEP2Y97rMkr56vq+5nIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1
YmU3OWIwHhcNMjYxMDMwMDg0MjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjgwMjFmMjkyMzdmNjIxMjUzM2U5NGMwYTZhNDJiOTBiZDc0ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp66GFiF9lKJoieM7rkkGEscwYdlJ
SvzrQYaSiMte/j62LpLzU74pfatFh52K4eTVhGOz1njtbOlDLOlC3kFkSNXzroHk
erzEaFIAa1SE6xYjLA53t42MOOuG2agvEOSs9j2Y2RRkCiTB7s1WKT+j51YTofDM
b1H1UatH5jiDl51T0htqKMrVROo1ZIl0QXqFlDkJQWYVGke6KUoSujF2Gys8QYAo
VKV7Zedjbu0ZrM04qkItU98rI9A/d2NTaE00/zUOShecrW+fLjTmPIADrYvQyQDt
AhwkC9nGtj01VzFGrozdTunWqs57RcoPMjViLDxxNPiDuTFEIldfpVRj8QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLaAIfKSN/YhJTPpTApqQrkL10gqMB8GA1UdIwQY
MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt
YTI1ZTE0ZDUzOWEyLzEvdG9BaDhwSTM5aUVsTS1sTUNtcEN1UXZYU0NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy
LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAFfVpID
BAFfVpwDBAK56bQwDQYJKoZIhvcNAQELBQADggEBAGZF77z+5vHwQB36W75vaAxQ
Pv13PmKTDqwQiK4K7fqo+nkKteHxsUzTVs1vikC2H1evAFgaUw3sKZ58MP0W6MWv
twMf5DbaAhRzaB+1hg7OirxSd3kpxTAbK34+3zIFgyIjEYVZCiPrAeStyeathkYh
tVdkvFgRE4b7bW9E+VHW5ynN4PnCwzjU+DUNTYIzOSlUNXnKDUY480uz5F1IbYya
YzTnlBurvhvf2H/bsKATOSMc8c8juFypi49KvfrBzkFYfX8gNhoWvq0j7B4W+moP
Z/nZTRZ7TeV4n2i7z4cAVneOjro8V/A0qjZqRJgli8kb44TP/fSGCsWqnkBqPYQ=
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:40 2026 by rpki-client