Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa
File: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (raw, json)
Hash identifier: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=
Subject key identifier: E2:40:D4:C1:87:05:7D:75:54:44:3B:92:57:E4:C2:2E:B6:C4:F9:27
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F23683AA1CCC077BD38D85A9B4B1E71FC
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210993
IP address blocks: 95.181.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3a:a1:cc:c0:77:bd:38:d8:5a:9b:4b:1e:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e240d4c187057d7554443b9257e4c22eb6c4f927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:ef:8c:cd:16:c2:8c:b2:5e:fa:47:8a:b2:
d5:02:01:6e:f7:0c:88:20:3d:c5:5a:d7:4b:bd:56:
c5:aa:84:0b:53:5b:a8:59:a0:ab:d3:18:10:2d:e7:
f0:5f:bf:cc:56:70:f0:9c:10:11:1d:2a:11:94:b6:
aa:58:44:56:ef:ba:eb:9c:e4:ed:eb:41:bf:09:4f:
2d:6f:00:3d:0d:2b:71:1f:5e:a8:04:05:0b:36:43:
e0:5c:fd:7d:b3:da:ed:75:ec:e0:f6:31:2d:e4:2e:
70:20:e2:1f:1d:72:d3:b8:e3:6e:7a:92:4b:dc:b8:
1b:91:7b:1e:00:f0:48:6f:48:ab:cd:0f:78:ff:c3:
24:37:d4:dd:ab:07:0f:73:0b:c2:d1:1d:45:46:33:
89:26:64:8a:d6:91:c9:61:77:a3:a3:17:9f:72:0c:
2e:b4:64:d7:32:26:87:6c:2f:73:7c:62:f4:a3:4e:
c5:a7:0f:78:d1:85:58:08:0a:ae:c2:e7:8a:d3:db:
0c:49:bb:43:96:c7:78:d1:c5:3a:59:1e:d6:fa:af:
1b:a1:a5:68:db:3e:07:6d:9a:d5:1c:97:3b:0f:6c:
a9:f7:e8:b8:aa:25:8c:de:5f:9e:ef:ae:34:b6:6a:
01:32:ba:5b:c0:0f:9a:01:33:85:ee:cb:8a:32:16:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:D4:C1:87:05:7D:75:54:44:3B:92:57:E4:C2:2E:B6:C4:F9:27
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:76:54:a9:64:ca:f1:d3:34:59:8b:ac:ba:ed:7d:97:3c:3e:
0e:9c:32:79:8c:02:a6:fe:b3:1a:49:76:c0:8f:ac:d6:cc:e3:
a2:f0:d1:7e:97:aa:81:14:2d:d1:28:12:c0:2f:3b:73:7f:86:
5c:5b:fd:1a:bf:a7:fa:b3:26:dc:ad:8c:31:41:34:a2:c5:a8:
b8:28:0a:e2:f5:cf:a9:ce:c0:29:74:9a:09:62:0d:fc:c1:86:
01:af:86:7e:b7:ee:26:96:34:6f:26:9d:26:54:51:3b:51:64:
e7:c7:6f:56:5f:a0:5c:80:69:ba:e1:aa:70:e7:3c:43:0c:82:
f3:b4:84:1c:3b:38:9d:ee:10:f2:44:6e:76:c6:f8:72:da:3b:
88:31:71:3a:bf:54:38:3f:ee:e7:45:86:82:f5:2f:9c:8f:76:
e3:8f:92:48:b3:ae:ee:e3:27:10:0e:ff:09:5b:6c:98:f4:72:
c3:d0:67:00:3b:e0:f7:f6:c5:cf:00:12:4a:d8:5c:c3:1f:ca:
8f:a4:4a:b4:18:63:88:76:65:d6:0a:bf:3c:9a:06:b9:aa:ac:
26:06:ce:07:12:9d:c4:1f:7a:d5:41:ff:7d:1e:7a:fd:71:8f:
6b:cf:f2:33:cd:ff:7f:66:2c:77:4f:58:e6:44:09:6d:15:fa:
9d:7d:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:05:53 2026 by rpki-client