Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa
File: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (raw, json)
Hash identifier: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=
Subject key identifier: FB:C7:BA:FF:41:5B:3E:F0:17:26:0C:74:D6:DE:C0:45:B0:45:7C:07
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F2368345713DF5ACCE462C8AB1E4F47B0
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50214
IP address blocks: 95.181.154.0/24 maxlen: 24
95.181.171.0/24 maxlen: 24
185.12.124.0/24 maxlen: 24
185.12.125.0/24 maxlen: 24
185.12.126.0/24 maxlen: 24
185.12.127.0/24 maxlen: 24
2a11:f840::/32 maxlen: 32
2a11:f841::/32 maxlen: 32
2a11:f842::/32 maxlen: 32
2a11:f843::/32 maxlen: 32
2a11:f844::/32 maxlen: 32
2a11:f845::/32 maxlen: 32
2a11:f846::/32 maxlen: 32
2a11:f847::/32 maxlen: 32
2a12:9c0::/29 maxlen: 29
2a12:2d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:57:13:df:5a:cc:e4:62:c8:ab:1e:4f:47:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbc7baff415b3ef017260c74d6dec045b0457c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:8f:5d:b0:76:01:f2:47:25:10:d3:96:fb:
bd:dc:79:d2:e8:91:66:f5:d9:89:dc:12:60:4c:e2:
18:44:13:bf:23:76:53:8c:b6:a4:2f:6a:1b:c6:df:
85:37:46:bf:de:03:89:89:56:69:e8:c8:0b:1b:8e:
c3:22:98:53:ef:f5:f0:69:e2:59:69:b7:98:36:b0:
81:48:75:ed:49:8b:cb:60:2e:e0:71:37:52:ff:2d:
fb:ef:0b:c5:3b:ba:bc:cd:dd:0c:01:47:43:9b:8c:
3a:f4:88:69:46:40:f0:ce:de:f7:bf:c6:18:b6:23:
20:68:63:11:fe:b4:73:ef:76:50:34:b1:d3:fc:a5:
74:3b:09:aa:d2:8d:07:81:d7:66:a4:07:d6:db:67:
fe:02:4d:80:8f:79:6c:e1:2c:ed:0c:35:f0:af:3a:
f2:b5:26:89:ba:b0:cb:b3:58:88:88:86:a4:74:01:
a3:d4:8a:f1:3a:7c:df:4f:5b:dc:cb:1b:af:0f:9d:
0d:91:f0:3e:90:86:db:ce:f0:b2:ef:09:14:a8:09:
09:a5:65:fe:c6:10:b6:4a:39:ac:4b:94:a7:65:33:
dd:7a:1e:ef:c2:b8:e3:86:4f:d7:67:37:29:9a:eb:
3f:b9:6d:71:cb:15:5f:ae:93:2b:7d:dc:b3:0b:bc:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C7:BA:FF:41:5B:3E:F0:17:26:0C:74:D6:DE:C0:45:B0:45:7C:07
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.154.0/24
95.181.171.0/24
185.12.124.0/22
IPv6:
2a11:f840::/29
2a12:9c0::/29
2a12:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
57:33:f9:42:89:e1:b2:08:d8:68:f3:41:37:5e:47:83:31:39:
8d:43:a6:06:7c:70:91:ae:a7:7a:e0:d9:7b:4b:29:a3:c4:df:
38:c1:ae:4e:70:f3:59:03:09:10:51:09:61:f6:1f:cb:04:e9:
ae:d3:ba:60:9b:2a:60:4a:e1:49:29:fd:d4:f9:6c:d7:e1:50:
e3:0b:1a:ef:c4:cf:73:9c:c2:a6:48:c7:99:40:1f:57:c3:fc:
dd:18:db:7c:79:ab:45:11:36:83:0a:a4:fd:d7:81:da:09:d0:
13:77:5a:3a:b3:a7:83:5e:14:1c:82:fc:a0:61:14:e7:c6:ef:
08:bd:21:55:16:5d:b0:ca:9c:2b:ad:b2:b5:4b:30:71:42:a6:
1e:39:70:78:16:f6:e6:71:24:09:35:a4:df:e6:00:20:ac:00:
b0:9e:a8:13:0a:c5:34:22:22:af:e1:75:0e:eb:3c:7e:9f:21:
19:b9:eb:f9:d0:35:56:33:81:6f:ec:94:d7:c7:93:b1:fe:45:
38:ee:ec:76:a6:3d:5b:ff:d7:81:fa:9c:db:46:a3:6a:e8:45:
c5:2b:31:e0:10:7e:e4:03:83:bf:6e:5c:6b:3e:f7:49:9a:cb:
44:14:45:6e:ab:b8:68:0e:20:92:9c:88:eb:b5:75:a9:d3:fc:
12:d4:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:05:10 2026 by rpki-client