Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa
File: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (raw, json)
Hash identifier: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=
Subject key identifier: DD:1D:18:C6:5E:A4:11:4E:A9:BD:28:10:FA:C2:01:B7:BF:D9:5F:6E
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F236838DDCABE73DB56CB333F022B8FDA
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206787
IP address blocks: 95.181.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:dd:ca:be:73:db:56:cb:33:3f:02:2b:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd1d18c65ea4114ea9bd2810fac201b7bfd95f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:2c:93:e4:bf:c6:67:be:f0:08:bf:1c:f8:
cb:72:4c:63:ce:d2:76:33:1f:22:f4:99:dd:0a:70:
9a:06:7f:5e:cb:19:30:e1:90:57:1c:ca:b4:53:ba:
ac:04:98:ce:5d:da:c4:0a:88:0f:5b:17:57:91:9f:
8a:98:6b:0d:98:2b:4d:da:3f:96:ae:66:ad:e0:a3:
e7:dc:bf:98:72:52:76:0b:bb:3b:ed:98:59:c2:1b:
25:f7:85:5b:6a:d3:7f:14:66:5f:d3:9d:60:1f:c3:
88:bf:8b:da:94:74:6a:6e:d7:4d:05:48:8d:29:a7:
5e:06:60:64:4e:e8:a1:d2:dd:c1:ae:9d:0b:eb:73:
e5:0e:b9:65:bc:db:62:8d:3f:7c:1d:da:f5:66:d0:
9e:d3:4a:18:f5:cb:9b:73:2e:7f:06:ed:4f:c5:36:
e4:19:5b:52:b3:79:be:35:be:a6:46:1a:97:d6:de:
7f:36:51:d4:50:ba:3e:22:1c:73:cc:e8:ea:f4:57:
4a:53:bf:77:8b:a8:fb:7f:68:13:94:a5:b1:e0:45:
77:7e:2f:31:d0:ec:1c:b2:60:cf:88:35:86:aa:5c:
1b:24:94:99:ff:53:41:a9:42:e2:13:cf:79:55:a4:
ec:6f:31:4c:06:8c:93:28:d1:d0:d7:3d:c9:fd:23:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:18:C6:5E:A4:11:4E:A9:BD:28:10:FA:C2:01:B7:BF:D9:5F:6E
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:eb:f1:e7:d3:42:18:23:b1:93:ff:51:04:c5:51:9f:6f:5e:
8c:14:8d:f4:34:23:96:de:d1:9b:b9:71:2a:0e:cf:e8:de:f0:
a2:c8:46:c9:37:52:8a:1d:57:a5:74:ba:c2:bc:bc:62:f7:1e:
4a:f1:9c:7d:d8:f9:a4:33:06:49:36:c3:a1:b5:a5:82:1b:04:
8c:34:e5:95:63:68:85:2a:d7:da:c9:88:16:72:55:54:bd:7d:
4a:39:d0:5b:56:e3:f1:e9:42:1a:05:85:6f:ff:a8:94:5c:ba:
e6:1d:ba:26:70:19:42:b1:b7:8f:81:7b:c3:6f:88:87:96:b2:
92:96:76:69:55:25:84:68:64:18:c0:71:23:df:2c:e6:b1:c4:
2b:26:b6:b1:50:6a:7b:d5:e1:15:5b:f4:94:4f:5f:24:bd:8e:
58:57:9d:70:5b:98:c4:6f:6c:45:58:a7:c2:80:ab:dd:4c:8a:
78:30:13:3e:9f:e6:7d:27:b9:d9:58:2c:89:5f:53:89:51:fb:
07:14:3c:10:d1:ce:27:eb:54:05:ba:dc:01:b4:16:27:6f:a5:
09:64:9f:96:a6:67:7d:e8:ee:1c:55:ad:ed:09:91:77:40:70:
53:b2:63:bc:b5:93:49:9e:54:ec:8a:81:51:4a:5b:b0:bb:44:
ef:4a:98:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaDjdyr5z21bLMz8CK4/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0
MTc0ODAwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDFkMThjNjVlYTQxMTRlYTliZDI4MTBmYWMyMDFiN2JmZDk1ZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Ysk+S/xme+8Ai/HPjLckxjztJ2
Mx8i9JndCnCaBn9eyxkw4ZBXHMq0U7qsBJjOXdrECogPWxdXkZ+KmGsNmCtN2j+W
rmat4KPn3L+YclJ2C7s77ZhZwhsl94VbatN/FGZf051gH8OIv4valHRqbtdNBUiN
KadeBmBkTuih0t3Brp0L63PlDrllvNtijT98Hdr1ZtCe00oY9cubcy5/Bu1PxTbk
GVtSs3m+Nb6mRhqX1t5/NlHUULo+IhxzzOjq9FdKU793i6j7f2gTlKWx4EV3fi8x
0OwcsmDPiDWGqlwbJJSZ/1NBqULiE895VaTsbzFMBoyTKNHQ1z3J/SP0xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN0dGMZepBFOqb0oEPrCAbe/2V9uMB8GA1UdIwQY
MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvM1IwWXhsNmtFVTZwdlNnUS1zSUJ0N19aWDI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WYMA0G
CSqGSIb3DQEBCwUAA4IBAQAe6/Hn00IYI7GT/1EExVGfb16MFI30NCOW3tGbuXEq
Ds/o3vCiyEbJN1KKHVeldLrCvLxi9x5K8Zx92PmkMwZJNsOhtaWCGwSMNOWVY2iF
KtfayYgWclVUvX1KOdBbVuPx6UIaBYVv/6iUXLrmHbomcBlCsbePgXvDb4iHlrKS
lnZpVSWEaGQYwHEj3yzmscQrJraxUGp71eEVW/SUT18kvY5YV51wW5jEb2xFWKfC
gKvdTIp4MBM+n+Z9J7nZWCyJX1OJUfsHFDwQ0c4n61QFutwBtBYnb6UJZJ+Wpmd9
6O4cVa3tCZF3QHBTsmO8tZNJnlTsioFRSluwu0TvSpiZ
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:20 2026 by rpki-client