Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/72IdSQwVdvBQnKN4ZObcMvOYJcE.roa
File: 72IdSQwVdvBQnKN4ZObcMvOYJcE.roa (raw, json)
Hash identifier: a5WK1zcyWaQTOxNiBlGg3iUaFzmC8WGCfr/FA7icnuA=
Subject key identifier: EF:62:1D:49:0C:15:76:F0:50:9C:A3:78:64:E6:DC:32:F3:98:25:C1
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A11339F0418F7BBFC3F582E7AFB3355506
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/72IdSQwVdvBQnKN4ZObcMvOYJcE.roa
Signing time: Tue 06 Oct 2026 21:58:46 +0000
ROA not before: Tue 06 Oct 2026 21:58:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218642
IP address blocks: 95.214.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:39:f0:41:8f:7b:bf:c3:f5:82:e7:af:b3:35:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 6 21:58:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef621d490c1576f0509ca37864e6dc32f39825c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:02:8c:39:30:c5:42:89:c5:b2:3d:8a:a0:
6d:e5:fc:92:36:9a:5b:25:21:53:47:eb:b1:46:b5:
ca:be:5f:8a:2e:41:c3:19:a1:a6:6c:71:26:82:b3:
eb:73:b0:14:5a:f1:34:f0:f4:28:53:56:8c:8e:c2:
98:ea:c4:28:2e:da:bd:f7:88:73:fd:f7:2e:ca:e9:
c6:7d:89:8d:9c:e3:1e:1a:c5:6b:a4:ad:da:a6:8d:
75:8b:d1:0e:65:a3:0d:eb:ca:ed:94:5b:1b:cf:19:
5d:1a:29:ee:06:15:5a:57:d4:29:d2:3d:1f:9a:87:
70:4b:00:b2:df:1f:0a:64:c3:d6:db:e0:1a:71:06:
10:26:14:dd:76:3b:e3:d3:c2:75:99:6c:76:43:d4:
1d:46:c3:35:8b:44:c6:6c:70:b6:68:59:67:e7:01:
c1:50:2c:32:03:94:65:2f:38:36:14:e8:73:85:a9:
2b:c5:1b:40:2a:54:dc:b1:ab:1a:b2:8e:1f:98:49:
19:f3:13:05:0e:d8:e7:4c:30:30:d1:ad:57:b1:68:
24:f8:4a:2a:d3:eb:50:64:b4:82:c1:55:4b:4a:05:
92:35:fe:2f:bc:85:c2:ba:03:3e:d3:c9:6f:48:a0:
11:f1:f5:c4:f0:16:37:98:5b:ed:b8:80:86:4d:69:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:62:1D:49:0C:15:76:F0:50:9C:A3:78:64:E6:DC:32:F3:98:25:C1
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/72IdSQwVdvBQnKN4ZObcMvOYJcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.82.0/24
Signature Algorithm: sha256WithRSAEncryption
47:41:25:a7:50:ea:e1:c1:34:d8:76:c8:52:0f:f0:53:47:d4:
91:bb:35:d0:e5:26:7e:ca:fc:3d:1f:77:9f:0d:62:71:81:8c:
d6:59:a9:6a:40:a9:08:3d:3b:72:6d:4c:18:c3:8e:e9:a2:8d:
26:6e:4e:a8:d5:72:11:85:c8:da:d4:68:b4:fa:da:ac:af:7c:
03:d0:0e:b4:e9:16:7a:27:ae:1c:9b:9b:92:f6:b1:7c:1e:6d:
ae:58:ab:9c:90:74:8f:43:c8:8c:be:cb:6a:26:ee:52:35:e5:
e1:eb:6d:9f:06:db:bd:06:b2:5b:9b:24:a9:49:7b:f5:85:8a:
c2:86:e4:2c:06:a5:29:c5:b1:5d:44:59:e9:e2:c0:03:4b:32:
1a:3d:a8:e5:7f:5f:84:88:b5:a6:70:ac:ae:68:5d:19:00:cf:
a7:d6:8e:c2:4a:e2:b4:bd:ce:00:ce:79:81:9b:b4:70:40:29:
91:b5:c4:43:f8:8f:77:a8:5c:8b:03:25:d9:7e:37:e9:1d:a6:
d6:7e:87:97:ac:3b:71:d4:78:8b:e1:cb:f7:aa:8c:f1:2d:00:
28:f5:5a:40:90:c1:8d:a9:e9:33:07:a8:37:05:87:ce:ec:0c:
ff:98:a2:0b:37:5a:e3:4c:b4:3d:b3:51:69:71:ca:63:27:91:
7a:36:55:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaETOfBBj3u/w/WC56+zNVUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYxMDA2MjE1ODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjYyMWQ0OTBjMTU3NmYwNTA5Y2EzNzg2NGU2ZGMzMmYzOTgyNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WwCjDkwxUKJxbI9iqBt5fySNppb
JSFTR+uxRrXKvl+KLkHDGaGmbHEmgrPrc7AUWvE08PQoU1aMjsKY6sQoLtq994hz
/fcuyunGfYmNnOMeGsVrpK3apo11i9EOZaMN68rtlFsbzxldGinuBhVaV9Qp0j0f
modwSwCy3x8KZMPW2+AacQYQJhTddjvj08J1mWx2Q9QdRsM1i0TGbHC2aFln5wHB
UCwyA5RlLzg2FOhzhakrxRtAKlTcsasaso4fmEkZ8xMFDtjnTDAw0a1XsWgk+Eoq
0+tQZLSCwVVLSgWSNf4vvIXCugM+08lvSKAR8fXE8BY3mFvtuICGTWnXVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9iHUkMFXbwUJyjeGTm3DLzmCXBMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvNzJJZFNRd1ZkdkJRbktONFpPYmNNdk9ZSmNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9ZSMA0G
CSqGSIb3DQEBCwUAA4IBAQBHQSWnUOrhwTTYdshSD/BTR9SRuzXQ5SZ+yvw9H3ef
DWJxgYzWWalqQKkIPTtybUwYw47poo0mbk6o1XIRhcja1Gi0+tqsr3wD0A606RZ6
J64cm5uS9rF8Hm2uWKuckHSPQ8iMvstqJu5SNeXh622fBtu9BrJbmySpSXv1hYrC
huQsBqUpxbFdRFnp4sADSzIaPajlf1+EiLWmcKyuaF0ZAM+n1o7CSuK0vc4AznmB
m7RwQCmRtcRD+I93qFyLAyXZfjfpHabWfoeXrDtx1HiL4cv3qozxLQAo9VpAkMGN
qekzB6g3BYfO7Az/mKILN1rjTLQ9s1FpccpjJ5F6NlXW
-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:16 2026 by rpki-client