Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/PI6hCE-smHPh-rqHkeE0RK3FC44.roa
File: PI6hCE-smHPh-rqHkeE0RK3FC44.roa (raw, json)
Hash identifier: Y45tIdUJzhwalbQCdBEgYQIBMhvIETcWNsgJlqbb7T0=
Subject key identifier: 3C:8E:A1:08:4F:AC:98:73:E1:FA:BA:87:91:E1:34:44:AD:C5:0B:8E
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019FF1372643467B7CB6B66345FC082BB024
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/PI6hCE-smHPh-rqHkeE0RK3FC44.roa
Signing time: Tue 11 Aug 2026 14:25:51 +0000
ROA not before: Tue 11 Aug 2026 14:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 95.170.12.0/24 maxlen: 24
95.170.19.0/24 maxlen: 24
95.170.20.0/24 maxlen: 24
95.170.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:37:26:43:46:7b:7c:b6:b6:63:45:fc:08:2b:b0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Aug 11 14:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c8ea1084fac9873e1faba8791e13444adc50b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:eb:40:95:71:d9:96:b3:b3:5e:86:e7:7b:
17:8f:25:c1:35:5f:ac:8e:72:6e:9c:4e:26:93:72:
f0:14:2f:19:d1:2a:45:27:b5:31:c4:1d:49:d2:c7:
e8:7a:94:c8:d7:e1:77:d3:e2:76:1d:09:70:02:a3:
27:4a:4b:bb:bd:19:e4:e4:42:c3:67:89:d0:8c:12:
8f:6f:ee:d9:d9:c7:73:45:23:67:e3:b9:71:8d:8c:
f4:ee:6b:d4:f0:1c:b1:a2:10:1a:51:2b:cd:47:90:
67:d6:f1:9a:9a:ab:01:87:be:09:de:27:01:90:62:
8b:1a:b9:ce:1e:15:4f:19:ea:ed:c2:34:80:c9:a4:
b5:8d:ba:b2:8a:78:3a:6a:5b:d2:81:7e:aa:9f:bc:
a1:e8:4a:0d:be:90:67:f7:fb:f7:1f:2c:56:f1:31:
e0:b1:db:2f:81:6e:04:5c:db:b1:9b:45:af:45:0b:
cd:a9:7c:c4:01:6b:5d:02:76:8a:0b:c4:a9:03:85:
cb:f8:c3:fb:14:24:9e:6d:23:2d:04:58:ff:05:36:
3a:9d:21:45:b6:39:a7:e5:16:d5:77:c8:c6:05:80:
aa:63:f8:b1:4f:2a:15:f4:0e:f6:e6:2b:68:f5:c1:
17:0b:75:62:c5:53:0b:35:3a:b3:12:4c:48:5a:58:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:A1:08:4F:AC:98:73:E1:FA:BA:87:91:E1:34:44:AD:C5:0B:8E
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/PI6hCE-smHPh-rqHkeE0RK3FC44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0/24
95.170.19.0-95.170.20.255
95.170.27.0/24
Signature Algorithm: sha256WithRSAEncryption
26:fe:d8:9d:e3:be:d8:b6:fc:14:40:d5:30:33:e5:dc:96:fa:
0c:45:4c:50:e9:4e:37:98:2a:02:cb:49:9f:1d:0e:65:02:c0:
54:f0:d0:8c:96:95:b6:70:d8:0f:df:be:a5:16:cf:26:1e:61:
8c:f1:1b:6b:14:af:61:9b:b6:9e:33:6d:ca:92:20:2f:d3:e7:
e3:48:b7:b9:54:8c:0f:4f:3e:c2:8d:4a:9f:24:c9:8b:14:d1:
df:9d:8b:a6:50:a9:e1:5e:cc:7e:d2:34:d2:82:8e:28:8e:f5:
e5:a1:62:68:88:c4:5b:65:6d:f1:28:09:1a:ea:69:ff:c6:37:
0c:f6:01:68:f6:ac:8b:c6:8d:5d:a3:42:2e:21:63:82:06:0b:
dd:2d:f6:2d:72:c5:4b:3d:21:ae:dd:6f:fb:d1:70:5c:53:a5:
36:d7:9e:9d:8a:c9:70:57:ce:77:49:d8:dd:23:e6:24:ac:fb:
f9:5a:f2:60:18:db:95:53:6b:b6:2e:47:d8:64:17:3d:34:22:
19:fb:01:56:28:fb:02:90:27:3d:3b:7a:41:46:ec:59:d2:58:
0d:32:aa:7c:4a:4c:88:a5:3b:5b:1c:57:5c:29:ca:a8:e3:5f:
30:58:85:57:ad:2d:c7:d1:b6:d8:ba:9f:34:49:48:04:c7:28:
74:54:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:05 2026 by rpki-client