Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/h9pKEM3z71POQosuhmS3E0bJWQo.roa
File: h9pKEM3z71POQosuhmS3E0bJWQo.roa (raw, json)
Hash identifier: QlvjW7kP/nGq0/L5LtWdNkECKZyJXXGNbH1toz/eR70=
Subject key identifier: 87:DA:4A:10:CD:F3:EF:53:CE:42:8B:2E:86:64:B7:13:46:C9:59:0A
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 01A149D7AFE6C6D8D616E868F8B66DCF0747
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/h9pKEM3z71POQosuhmS3E0bJWQo.roa
Signing time: Sat 17 Oct 2026 12:30:34 +0000
ROA not before: Sat 17 Oct 2026 12:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 95.170.12.0/24 maxlen: 24
95.170.19.0/24 maxlen: 24
95.170.20.0/24 maxlen: 24
95.170.23.0/24 maxlen: 24
95.170.25.0/24 maxlen: 24
95.170.27.0/24 maxlen: 24
95.170.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:d7:af:e6:c6:d8:d6:16:e8:68:f8:b6:6d:cf:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Oct 17 12:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87da4a10cdf3ef53ce428b2e8664b71346c9590a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:79:33:78:12:04:ae:cf:e9:59:c3:76:f2:
06:dc:4c:3e:06:f4:4d:a1:e7:e8:4b:3f:f8:37:3c:
c3:ef:05:b0:9a:d6:81:d8:87:d2:88:57:46:54:75:
82:63:fb:3a:fe:0b:19:4c:15:3f:bd:4f:c8:52:83:
7b:c0:b4:db:20:35:e8:b7:dc:b5:25:d8:71:85:8f:
d6:42:62:dd:06:40:32:37:0d:6f:f6:bc:b0:4e:50:
41:ed:dc:d5:b7:2b:c0:e7:03:43:f8:47:27:c5:54:
be:06:a3:e7:d8:48:89:34:10:4a:50:c1:da:38:c3:
da:17:19:4c:f5:4d:ec:23:d6:65:27:ef:c3:8c:30:
28:0b:51:ff:49:0c:cc:d5:8c:1b:c0:50:4a:02:25:
07:d6:d1:6b:9f:47:26:ee:c1:ee:3d:c3:ab:fb:81:
13:c5:98:38:ea:8a:5e:4d:be:16:64:d4:c5:1e:d3:
bc:ae:4e:d2:71:e6:68:97:66:df:cf:d4:c3:e0:1b:
26:4d:8a:36:8e:f9:74:d2:19:31:58:d8:37:8a:6a:
e0:b4:84:7f:90:04:aa:ae:e5:f0:ef:40:41:42:2c:
14:b3:0e:04:49:f3:d3:a4:41:83:9a:03:60:5f:09:
db:99:6c:7b:30:67:f4:8b:89:6c:97:54:07:09:73:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DA:4A:10:CD:F3:EF:53:CE:42:8B:2E:86:64:B7:13:46:C9:59:0A
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/h9pKEM3z71POQosuhmS3E0bJWQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0/24
95.170.19.0-95.170.20.255
95.170.23.0/24
95.170.25.0/24
95.170.27.0-95.170.28.255
Signature Algorithm: sha256WithRSAEncryption
89:92:16:e1:52:f1:2e:06:82:93:9c:0c:77:57:55:81:98:de:
b1:a2:a1:f4:28:c4:7b:f0:f4:67:7b:08:d7:b9:3c:c6:95:a2:
20:04:d9:f9:b5:0b:ca:94:0f:a5:63:40:53:7d:bd:40:d7:a8:
65:fc:f6:c3:ee:24:6d:26:a2:ee:19:7a:7e:7e:d4:f5:02:e3:
4a:ac:35:31:46:58:21:75:7c:6d:e5:18:83:89:df:b4:0e:43:
7d:8b:7d:39:2f:4d:d3:8d:b1:da:86:fe:2e:60:a3:2d:28:31:
17:55:1a:8d:ff:19:8d:82:e4:84:32:67:7d:1b:0d:fb:42:95:
47:0d:1e:41:10:12:a1:53:8e:28:9a:29:cf:8a:f5:99:55:21:
54:e1:9e:d2:bc:44:b1:4a:a4:69:ea:c8:be:37:22:69:49:89:
5e:c4:48:79:d8:58:cb:df:84:d4:ee:1f:e1:43:fc:92:18:6f:
0b:5c:c3:1c:8b:9b:15:c1:32:5c:4f:20:c2:36:88:65:26:2e:
9e:94:ba:ea:bd:4a:7c:54:c2:34:c0:af:9a:ca:e8:6b:62:5d:
04:bf:3e:f5:f3:2b:eb:e9:76:d9:85:2d:46:1b:dd:64:b8:73:
2c:68:3d:d5:8b:85:7a:bf:93:93:33:3f:1d:f1:68:0b:29:d0:
57:9e:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:42:22 2026 by rpki-client