Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/Pe_0_3RXeg0_K2j9ghGT_HDZm50.roa
File: Pe_0_3RXeg0_K2j9ghGT_HDZm50.roa (raw, json)
Hash identifier: dq4vcwGpi9Xg3PIMEP+w0b/UoMg+2lIHLeWnB9sLO5M=
Subject key identifier: 3D:EF:F4:FF:74:57:7A:0D:3F:2B:68:FD:82:11:93:FC:70:D9:9B:9D
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019E634A089ECB364F8612DAC4533BD43705
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/Pe_0_3RXeg0_K2j9ghGT_HDZm50.roa
Signing time: Tue 26 May 2026 07:57:36 +0000
ROA not before: Tue 26 May 2026 07:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 95.142.112.0/24 maxlen: 24
95.142.113.0/24 maxlen: 24
95.142.114.0/24 maxlen: 24
95.142.115.0/24 maxlen: 24
95.142.116.0/24 maxlen: 24
95.142.117.0/24 maxlen: 24
95.142.119.0/24 maxlen: 24
95.142.120.0/24 maxlen: 24
95.142.122.0/24 maxlen: 24
95.142.123.0/24 maxlen: 24
95.142.125.0/24 maxlen: 24
95.142.126.0/24 maxlen: 24
95.142.127.0/24 maxlen: 24
185.54.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:4a:08:9e:cb:36:4f:86:12:da:c4:53:3b:d4:37:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: May 26 07:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3deff4ff74577a0d3f2b68fd821193fc70d99b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:39:4c:d6:a5:53:d1:f0:73:cf:c7:9e:b2:
24:dd:dd:aa:d7:35:65:81:85:24:30:d9:68:3c:cc:
63:e2:9d:09:ca:38:f8:c6:cb:b8:cb:b4:af:36:f3:
da:88:2f:30:a1:4b:02:19:dc:66:b7:95:57:36:c9:
b1:6d:df:52:7f:66:4c:c5:6c:f0:bb:a0:a6:ae:29:
00:ba:5d:7f:1a:61:b7:1c:c9:27:63:6c:18:f3:a7:
51:20:1d:0c:f8:14:ec:b7:86:6d:32:70:fa:e6:02:
78:a6:c4:ad:fa:d8:ef:b3:66:b9:69:7f:3d:ff:1f:
26:c9:dd:c4:27:09:e6:59:ee:a2:9e:98:e6:db:d9:
9d:83:83:a0:16:27:ac:1f:c7:87:ff:40:58:41:9f:
1b:85:f9:e5:22:63:d9:3c:65:d1:2b:c0:19:7c:ca:
a0:0a:4c:29:9c:ab:d8:d2:51:e9:f9:88:e4:7f:b7:
2e:64:dc:22:10:3c:a3:ad:cd:dd:49:a0:d3:59:39:
94:c9:25:52:6e:b7:a6:a0:9c:06:37:3d:57:8b:05:
0a:92:80:1a:3b:38:70:76:b8:9e:5a:4f:76:99:9c:
13:29:77:bf:8b:3e:00:f1:d7:db:24:71:c0:5a:a3:
cc:86:76:ad:b6:af:b4:dd:dc:23:71:61:24:6b:53:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EF:F4:FF:74:57:7A:0D:3F:2B:68:FD:82:11:93:FC:70:D9:9B:9D
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/Pe_0_3RXeg0_K2j9ghGT_HDZm50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.112.0-95.142.117.255
95.142.119.0-95.142.120.255
95.142.122.0/23
95.142.125.0-95.142.127.255
185.54.228.0/24
Signature Algorithm: sha256WithRSAEncryption
22:aa:41:71:dd:2d:b7:f5:2b:13:20:5f:9a:b8:c4:0c:17:a1:
73:72:43:21:8d:7b:44:86:27:49:57:73:b2:07:04:92:2d:20:
53:15:a9:86:e7:6c:37:4d:87:be:da:e4:92:07:bf:71:33:3d:
14:9e:f7:50:f0:62:b5:0a:bd:25:82:51:e3:3c:1b:a2:f0:e2:
28:dc:ce:ae:3a:d3:88:32:2a:31:d2:ab:d2:32:c8:e4:5e:66:
e9:46:00:8c:12:7b:17:f9:43:3f:1a:b7:4c:b9:0d:11:05:21:
2b:71:eb:6b:04:b2:b0:e1:55:0c:88:31:10:f0:6b:58:d4:52:
33:b9:a3:14:05:f1:68:21:95:0e:73:1e:03:e4:19:c8:d4:f2:
fb:9d:fa:f2:16:32:e0:9c:44:7e:fc:2d:dc:b0:dd:4f:14:55:
42:ba:6b:e2:86:5a:99:9c:46:92:d3:c6:34:3c:6e:3d:b8:c6:
88:5a:0d:c6:b1:3e:3f:91:45:47:a5:b8:78:b8:e1:73:28:93:
8c:ff:bb:1c:1f:51:04:27:75:c4:8c:86:f3:d9:0e:07:de:f6:
98:25:92:39:f1:6e:d4:e0:74:b3:e5:29:f6:4d:8f:71:fa:11:
f3:21:40:f3:8a:0e:64:ce:f2:a1:b6:e3:e1:01:d0:33:f4:bc:
91:5d:52:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:07 2026 by rpki-client