Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa
File: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (raw, json)
Hash identifier: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=
Subject key identifier: F9:25:3C:48:79:C0:35:A0:C3:D1:56:25:15:FF:47:A7:1E:43:30:17
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F2368397636A1737B6BE686E61C2D8AF4
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208626
IP address blocks: 95.181.164.0/24 maxlen: 24
95.181.169.0/24 maxlen: 24
95.181.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:76:36:a1:73:7b:6b:e6:86:e6:1c:2d:8a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9253c4879c035a0c3d1562515ff47a71e433017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:9d:06:9e:95:3b:35:e7:65:89:c6:4e:65:
6d:d6:8a:8e:2e:34:38:f7:f8:b3:0c:3a:f8:f1:90:
86:aa:49:c1:b5:4b:91:8d:90:fe:13:5d:46:6c:3b:
b1:80:90:26:71:64:03:c9:5e:02:0b:c0:64:15:1e:
6e:fc:98:68:13:a3:14:d2:02:83:e8:cf:3a:c3:97:
02:81:77:41:c1:7a:11:e5:31:c3:a9:94:73:95:ba:
bb:e8:b4:9b:a5:6f:2b:1d:c6:30:4e:0f:36:58:84:
38:99:3b:db:d4:5a:70:1d:ae:dd:1a:da:d8:98:d6:
78:c3:45:f8:77:20:c5:ba:0f:07:8f:86:e9:b4:c4:
15:b7:9c:89:18:67:e8:0a:cd:ec:64:0c:b1:4f:93:
0e:a0:4f:53:e4:0d:21:ea:ad:89:59:42:05:92:48:
d8:aa:37:1d:fa:92:9d:43:03:70:7a:b6:40:f2:51:
3f:fb:68:2c:3b:af:34:9b:bf:92:9a:1d:f1:d7:2c:
05:c7:95:08:7a:c9:ed:7d:8c:36:29:da:b1:b3:72:
b3:01:20:e6:26:61:f9:73:bc:29:c6:e8:94:03:2a:
93:55:19:8b:36:28:fb:d6:58:89:55:1d:f3:d1:1b:
bc:17:fb:25:93:4f:72:90:27:72:49:93:e6:f7:ae:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:3C:48:79:C0:35:A0:C3:D1:56:25:15:FF:47:A7:1E:43:30:17
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.164.0/24
95.181.169.0-95.181.170.255
Signature Algorithm: sha256WithRSAEncryption
52:db:9c:df:77:52:ac:58:5f:57:13:b7:f6:8f:84:a7:74:71:
16:26:b4:1c:bd:24:37:7e:63:92:ad:f7:10:9a:cb:ed:98:c6:
30:6b:08:8f:30:77:53:77:c7:a5:6a:66:20:af:2d:0b:f8:f6:
3b:e8:a7:68:ee:28:39:88:7a:6f:b2:fc:30:ba:03:be:9e:6d:
6d:6a:82:c8:2b:04:f5:11:88:ae:6a:2e:46:54:3e:54:d0:09:
97:f6:1c:95:d2:da:e9:55:25:1c:a1:06:8f:82:eb:98:cd:4d:
19:8e:33:1a:f8:f1:4f:7d:89:c7:19:aa:8c:a9:b7:fc:4e:56:
19:4c:02:42:4f:cb:3f:30:69:db:0f:80:d3:99:6a:5f:eb:e2:
34:4f:e3:d1:43:c1:84:59:cf:ba:d4:e2:51:54:bd:de:ed:52:
da:12:5a:79:38:b3:28:5d:72:ad:7f:ab:f5:65:c3:3d:0a:4b:
95:25:eb:6c:d8:3c:af:b5:06:0a:93:d7:ed:5a:30:11:d0:a1:
70:75:cc:cf:03:ca:c8:1f:86:5e:8d:b1:30:ac:50:81:91:07:
9d:1b:f6:8c:4d:fa:8c:da:dc:8b:da:ac:ed:53:89:e2:dd:61:
c6:fc:f9:1c:c9:9b:38:d2:81:3b:2a:ec:e2:07:92:68:ad:d9:
c6:88:12:75
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaDl2NqFze2vmhuYcLYr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0
MTc0ODAwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTI1M2M0ODc5YzAzNWEwYzNkMTU2MjUxNWZmNDdhNzFlNDMzMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6+dBp6VOzXnZYnGTmVt1oqOLjQ4
9/izDDr48ZCGqknBtUuRjZD+E11GbDuxgJAmcWQDyV4CC8BkFR5u/JhoE6MU0gKD
6M86w5cCgXdBwXoR5THDqZRzlbq76LSbpW8rHcYwTg82WIQ4mTvb1FpwHa7dGtrY
mNZ4w0X4dyDFug8Hj4bptMQVt5yJGGfoCs3sZAyxT5MOoE9T5A0h6q2JWUIFkkjY
qjcd+pKdQwNwerZA8lE/+2gsO680m7+Smh3x1ywFx5UIesntfYw2Kdqxs3KzASDm
JmH5c7wpxuiUAyqTVRmLNij71liJVR3z0Ru8F/slk09ykCdySZPm964ucQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPklPEh5wDWgw9FWJRX/R6ceQzAXMB8GA1UdIwQY
MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvMS1TVThTSG5BTmFERDBWWWxGZjlIcHg1RE1CYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2YvMGY4ZmVhLWYwMGEtNDQxNS1iMzk2LTM5OWZjOTY5M2Iy
Mi8xL2xiUElmbkIwaFR5UmdfRm5vc0piQXVOQmRJQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAF+1pDAM
AwQAX7WpAwQAX7WqMA0GCSqGSIb3DQEBCwUAA4IBAQBS25zfd1KsWF9XE7f2j4Sn
dHEWJrQcvSQ3fmOSrfcQmsvtmMYwawiPMHdTd8elamYgry0L+PY76Kdo7ig5iHpv
svwwugO+nm1taoLIKwT1EYiuai5GVD5U0AmX9hyV0trpVSUcoQaPguuYzU0ZjjMa
+PFPfYnHGaqMqbf8TlYZTAJCT8s/MGnbD4DTmWpf6+I0T+PRQ8GEWc+61OJRVL3e
7VLaElp5OLMoXXKtf6v1ZcM9CkuVJets2DyvtQYKk9ftWjAR0KFwdczPA8rIH4Ze
jbEwrFCBkQedG/aMTfqM2tyL2qztU4ni3WHG/PkcyZs40oE7KuziB5JordnGiBJ1
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:14 2026 by rpki-client