Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/OI7FN0R3KVn8RagtjfraPAT_-h0.roa
File: OI7FN0R3KVn8RagtjfraPAT_-h0.roa (raw, json)
Hash identifier: rHzaod1j1F2szA4DXpq47DGPOL7feB2iEse6a1F0sVI=
Subject key identifier: 38:8E:C5:37:44:77:29:59:FC:45:A8:2D:8D:FA:DA:3C:04:FF:FA:1D
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019FC6CFCE9AE4640738B2DC1B46F033DED1
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/OI7FN0R3KVn8RagtjfraPAT_-h0.roa
Signing time: Mon 03 Aug 2026 08:48:55 +0000
ROA not before: Mon 03 Aug 2026 08:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 95.170.12.0/24 maxlen: 24
95.170.19.0/24 maxlen: 24
95.170.20.0/24 maxlen: 24
95.170.27.0/24 maxlen: 24
95.170.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:cf:ce:9a:e4:64:07:38:b2:dc:1b:46:f0:33:de:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Aug 3 08:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=388ec53744772959fc45a82d8dfada3c04fffa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:c7:54:47:42:3d:de:55:cd:d3:76:65:8a:
9a:61:de:d7:2f:12:2d:65:e3:f9:9e:bd:17:3c:23:
7a:0b:73:93:a8:48:78:98:8f:5c:81:c5:3c:e6:12:
80:cd:5e:c3:39:d6:ba:51:85:d3:86:27:9e:20:34:
fb:81:24:29:c3:c6:eb:ad:51:7c:37:88:ef:ed:cc:
0e:0f:8b:e3:7d:af:92:d0:60:cd:7b:7b:4c:0a:8a:
d5:7f:56:44:4d:45:cd:fc:cc:da:0e:6a:43:92:ce:
79:08:62:23:6f:6c:40:fc:5c:6c:05:8d:cc:ac:e7:
fc:3a:6f:5e:92:fa:30:2b:1d:54:b3:88:1d:a1:54:
8a:0f:a4:6e:fc:15:a2:8d:c3:33:40:a3:d2:f7:70:
37:7d:34:c7:0e:a1:45:69:34:55:be:10:85:78:5d:
1b:fe:5e:25:f6:76:39:69:df:6d:76:1a:c5:29:31:
f7:b7:e7:81:fb:9c:55:52:53:05:64:27:d7:cb:50:
a7:6e:42:1f:e0:96:4b:9c:1c:b3:ac:d2:49:f0:44:
90:3a:da:36:9a:fb:90:0a:91:17:1a:ae:51:02:db:
de:91:4d:4a:86:0b:5d:6b:cd:14:06:59:fc:d5:f4:
8f:1f:4a:15:68:47:2b:32:61:53:5e:3a:5c:8a:05:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8E:C5:37:44:77:29:59:FC:45:A8:2D:8D:FA:DA:3C:04:FF:FA:1D
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/OI7FN0R3KVn8RagtjfraPAT_-h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0/24
95.170.19.0-95.170.20.255
95.170.27.0-95.170.28.255
Signature Algorithm: sha256WithRSAEncryption
09:64:76:5b:62:77:01:aa:4d:04:b6:99:ae:48:f6:1a:f7:14:
c7:3c:1b:90:d1:84:cb:9f:e5:2a:62:ff:55:36:02:80:8a:a2:
d7:d3:c6:e3:79:f0:74:a4:87:bd:8b:75:8a:7a:88:15:34:45:
ff:dd:f5:4b:f7:dd:24:18:49:49:be:da:7a:b7:da:2f:fe:e6:
f2:b1:7e:b2:13:f0:ab:c5:d4:54:b6:7d:60:10:19:3e:ae:3e:
db:df:8d:4d:fd:b8:c1:15:78:d3:2c:04:f2:29:0e:ba:bc:22:
22:e6:a2:56:23:b8:33:db:26:c9:29:b5:39:3e:53:86:88:84:
42:3e:94:29:b2:f9:64:ac:92:94:26:d1:f8:23:41:c1:4f:d3:
f9:38:e7:85:34:ed:83:a0:d9:95:2a:e6:f1:61:d6:a5:41:38:
d5:fb:93:2a:c7:5d:3a:6f:4c:db:6e:e3:6d:1a:49:50:b9:77:
68:18:27:7a:fd:e1:51:a1:93:4b:8f:40:dd:19:8d:1a:8d:95:
ac:95:e7:0a:70:ad:7b:80:5a:b5:ec:b2:85:e9:c6:e7:07:05:
b1:f0:03:64:41:5b:de:8c:af:4b:3b:54:e8:63:ca:6b:1f:05:
2e:b8:1a:6f:4c:08:26:85:4e:de:1e:8e:fe:ea:2a:b7:c0:a7:
7f:d7:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:05 2026 by rpki-client