Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/BK5B6j0pOrP-0n45ysOZUO_W2Ik.roa
File: BK5B6j0pOrP-0n45ysOZUO_W2Ik.roa (raw, json)
Hash identifier: Tm+MlSuHSZKObOf6UFy7bJ2UoejKvsimnwaGrhrRaDw=
Subject key identifier: 04:AE:41:EA:3D:29:3A:B3:FE:D2:7E:39:CA:C3:99:50:EF:D6:D8:89
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 019FF493BED84C371C60CC4A1129E439A5D7
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/BK5B6j0pOrP-0n45ysOZUO_W2Ik.roa
Signing time: Wed 12 Aug 2026 06:05:51 +0000
ROA not before: Wed 12 Aug 2026 06:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219399
IP address blocks: 95.133.228.0/22 maxlen: 22
2a0b:7140:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:93:be:d8:4c:37:1c:60:cc:4a:11:29:e4:39:a5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Aug 12 06:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04ae41ea3d293ab3fed27e39cac39950efd6d889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:f3:9d:a6:1d:19:ea:11:8a:89:32:e6:7b:
33:4d:81:b7:ef:67:2d:39:18:7d:80:18:af:6c:06:
72:85:a9:1d:d8:60:29:75:59:99:49:c5:53:1d:e2:
b6:ea:a8:c5:62:14:12:fe:d9:a5:80:99:9f:42:fb:
7b:8f:f9:d4:d3:6f:ca:11:a2:3a:86:3c:85:fd:e9:
d2:79:93:68:3c:2f:4a:e2:02:b8:d2:36:08:03:2c:
68:4c:b7:cd:cf:1c:bb:a7:ae:1e:04:56:b1:59:ad:
9c:ea:0d:fe:22:3c:02:e4:72:e6:52:91:b5:36:06:
e1:3d:51:69:d8:5a:44:6e:5a:ad:60:48:8d:73:5e:
91:59:7a:56:3b:b8:50:54:84:a0:e9:35:02:db:34:
91:1d:c0:43:64:8a:01:93:4f:b4:01:3c:b8:1c:92:
7d:e8:d2:be:75:85:01:77:5b:7f:ac:4c:65:c5:c5:
7a:c4:90:8c:21:46:4f:27:1f:e6:53:2e:c6:fe:07:
21:49:e4:95:9b:72:64:2a:d5:69:d7:ab:01:97:66:
f7:a3:a9:d7:12:e2:cb:60:af:b7:45:39:bd:1e:20:
c9:b1:4c:49:96:7c:45:23:d4:e5:31:3c:c6:10:12:
ac:aa:b3:30:85:87:5a:8a:30:ae:be:09:e8:85:57:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AE:41:EA:3D:29:3A:B3:FE:D2:7E:39:CA:C3:99:50:EF:D6:D8:89
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/BK5B6j0pOrP-0n45ysOZUO_W2Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.133.228.0/22
IPv6:
2a0b:7140:8::/48
Signature Algorithm: sha256WithRSAEncryption
5b:e7:1a:84:32:0f:67:63:82:d6:fe:f8:4b:6c:f6:cb:dd:3f:
06:e7:df:37:21:4c:92:53:a1:76:4b:3a:ce:87:ac:44:85:c6:
ab:d9:20:79:21:5d:cb:45:c5:4f:91:e6:0b:d0:40:1a:cc:f6:
f8:55:d6:7c:79:23:6d:21:3c:06:53:ee:5a:4b:29:69:3c:f5:
8f:0c:32:7c:12:0a:cd:10:6c:59:c4:08:21:73:4a:67:5a:37:
bc:1a:b2:a2:57:c5:12:8a:ca:50:17:ac:b1:8f:4d:c2:a1:9b:
12:5e:ec:c5:82:33:c5:96:88:08:93:c0:8c:d0:85:5f:d9:4c:
63:b6:58:c0:a3:f1:52:26:d3:c4:b1:21:db:c3:2c:9c:09:93:
cb:ab:8d:49:89:51:3a:b0:50:dc:6c:89:39:d8:a8:cb:72:5b:
ab:85:c6:4a:f4:61:9d:09:e8:aa:0a:a0:ac:ef:28:ed:25:79:
ac:e8:76:0f:4a:0e:c2:84:69:e1:72:5d:6e:50:5d:aa:5b:aa:
a3:d3:0b:09:3d:ac:43:09:3e:61:26:dc:d6:c4:b5:f8:09:5a:
7d:0f:14:c0:1a:43:b7:10:ea:56:b8:b4:1e:b5:c6:85:ff:4f:
c7:ba:53:f4:df:c9:10:bb:88:6c:a0:cf:b8:cc:69:50:dd:65:
13:16:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:28 2026 by rpki-client