Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/CIsZl3gRGGUMvz_jxXeaSwTtpKI.roa
File: CIsZl3gRGGUMvz_jxXeaSwTtpKI.roa (raw, json)
Hash identifier: 1rT1pmkx75hhzF6XR5QgHC9csbs0sZvPHYd7dZsT8Ow=
Subject key identifier: 08:8B:19:97:78:11:18:65:0C:BF:3F:E3:C5:77:9A:4B:04:ED:A4:A2
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 01A1ABB092F75A41570FE53DAFD7AA897163
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/CIsZl3gRGGUMvz_jxXeaSwTtpKI.roa
Signing time: Thu 05 Nov 2026 12:30:38 +0000
ROA not before: Thu 05 Nov 2026 12:30:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205570
IP address blocks: 131.222.198.0/24 maxlen: 24
185.213.170.0/24 maxlen: 24
194.0.207.0/24 maxlen: 24
2a0b:8b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:b0:92:f7:5a:41:57:0f:e5:3d:af:d7:aa:89:71:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Nov 5 12:30:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=088b1997781118650cbf3fe3c5779a4b04eda4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:9d:c5:80:c0:e6:b3:03:1c:f6:91:cd:5f:
00:1f:b8:ca:7a:29:b0:5a:fd:04:49:32:c2:42:15:
ae:ba:03:d2:4a:ea:ba:8c:e0:5a:1b:4d:7f:56:b7:
d1:a0:ff:90:28:46:bc:c2:57:37:8e:04:4a:fd:9c:
0c:c8:08:8a:46:a8:e3:09:3b:e7:16:cc:e3:28:40:
12:3e:39:b9:da:85:48:99:f8:ca:55:94:89:86:92:
ec:4d:b8:eb:90:ac:69:01:8f:bc:a1:ad:00:13:66:
15:02:4a:4f:60:38:80:24:a9:75:a8:a3:7a:09:e5:
ce:46:9a:39:b1:ba:37:84:89:a6:76:7c:a8:d5:66:
10:c5:7b:ae:99:5e:aa:f7:6b:e5:07:f3:93:7a:98:
40:d2:2d:ba:4e:e7:7c:47:2c:c8:22:e1:90:fb:bd:
3f:84:3a:5e:f9:eb:12:08:22:56:53:08:9d:85:84:
fb:4e:18:82:8a:52:36:48:a6:d9:6a:12:2a:a8:cb:
8e:37:d2:8d:62:87:12:04:b2:0f:75:9e:2a:8e:2d:
d5:f0:3c:45:ef:49:3e:9f:ea:0b:4d:8f:e2:35:c9:
48:fa:6d:5b:ad:54:fe:10:bd:fb:c2:2c:eb:0b:cd:
5b:1f:36:ec:e7:7c:2b:5b:16:46:d6:21:ce:51:a4:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8B:19:97:78:11:18:65:0C:BF:3F:E3:C5:77:9A:4B:04:ED:A4:A2
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/CIsZl3gRGGUMvz_jxXeaSwTtpKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.198.0/24
185.213.170.0/24
194.0.207.0/24
IPv6:
2a0b:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
1c:3e:97:be:9e:e3:c8:65:95:7f:58:d7:3c:c0:c8:e5:e5:5a:
df:14:3d:7b:aa:93:c4:44:d7:c9:39:96:a8:83:48:15:33:5c:
d2:51:da:3f:c8:57:fb:36:f0:4f:83:6c:52:8b:ed:73:d7:5b:
9b:55:6f:f0:14:34:f6:f1:7f:7f:bd:fd:14:8e:3e:69:6d:1d:
60:56:4a:40:77:2c:be:3b:c5:4c:a6:cd:18:ea:52:83:0d:c3:
0f:63:ea:a3:08:80:78:29:36:aa:34:cc:7d:9d:4f:1e:0e:de:
06:1d:84:fd:cf:cd:b5:71:b8:46:06:5b:85:8d:ba:0b:42:ed:
12:c1:9e:14:4c:1c:54:6a:dc:89:25:32:ed:f3:75:44:37:05:
d3:1a:59:3a:4d:02:ca:96:a4:ce:b5:31:b8:39:b0:36:b2:09:
61:7d:27:ee:87:6f:d5:b9:42:8a:b2:68:99:63:59:86:ad:12:
89:fd:17:c2:01:fb:30:45:bd:97:43:91:59:c5:7d:5c:80:c7:
30:59:8d:6c:ef:e6:5e:04:77:1e:a8:65:65:a7:f7:12:3c:c1:
a2:89:10:07:7b:6c:03:06:8a:59:d7:3f:62:1a:50:2e:53:dd:
7a:bc:ff:c3:5a:6c:9b:27:07:d2:62:9f:02:30:d5:d0:ce:da:
d6:fb:d0:a1
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaGrsJL3WkFXD+U9r9eqiXFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy
MzZjY2IwHhcNMjYxMTA1MTIzMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODhiMTk5Nzc4MTExODY1MGNiZjNmZTNjNTc3OWE0YjA0ZWRhNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWydxYDA5rMDHPaRzV8AH7jKeimw
Wv0ESTLCQhWuugPSSuq6jOBaG01/VrfRoP+QKEa8wlc3jgRK/ZwMyAiKRqjjCTvn
FszjKEASPjm52oVImfjKVZSJhpLsTbjrkKxpAY+8oa0AE2YVAkpPYDiAJKl1qKN6
CeXORpo5sbo3hImmdnyo1WYQxXuumV6q92vlB/OTephA0i26Tud8RyzIIuGQ+70/
hDpe+esSCCJWUwidhYT7ThiCilI2SKbZahIqqMuON9KNYocSBLIPdZ4qji3V8DxF
70k+n+oLTY/iNclI+m1brVT+EL37wizrC81bHzbs53wrWxZG1iHOUaTXOwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFAiLGZd4ERhlDL8/48V3mksE7aSiMB8GA1UdIwQY
MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt
YTEwMjhlZGE2MzgzLzEvQ0lzWmwzZ1JHR1VNdnpfanhYZWFTd1R0cEtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz
LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAg97GAwQA
udWqAwQAwgDPMA0EAgACMAcDBQMqC4tAMA0GCSqGSIb3DQEBCwUAA4IBAQAcPpe+
nuPIZZV/WNc8wMjl5VrfFD17qpPERNfJOZaog0gVM1zSUdo/yFf7NvBPg2xSi+1z
11ubVW/wFDT28X9/vf0Ujj5pbR1gVkpAdyy+O8VMps0Y6lKDDcMPY+qjCIB4KTaq
NMx9nU8eDt4GHYT9z821cbhGBluFjboLQu0SwZ4UTBxUatyJJTLt83VENwXTGlk6
TQLKlqTOtTG4ObA2sglhfSfuh2/VuUKKsmiZY1mGrRKJ/RfCAfswRb2XQ5FZxX1c
gMcwWY1s7+ZeBHceqGVlp/cSPMGiiRAHe2wDBopZ1z9iGlAuU916vP/DWmybJwfS
Yp8CMNXQztrW+9Ch
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:34:55 2026 by rpki-client