Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa
File: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (raw, json)
Hash identifier: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=
Subject key identifier: 0A:63:73:EF:00:5C:48:EE:92:E6:46:3D:7E:28:94:DD:2F:A7:E9:9F
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F2368369A276E499019D163C37158CCAA
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201662
IP address blocks: 95.181.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:9a:27:6e:49:90:19:d1:63:c3:71:58:cc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a6373ef005c48ee92e6463d7e2894dd2fa7e99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:74:b5:08:db:f5:55:66:a2:92:71:e5:ff:
ee:57:39:d3:55:9c:91:5b:27:3c:63:be:d1:f7:84:
ea:20:3c:bf:e8:2b:05:67:49:9b:c1:6c:15:30:b0:
b6:1d:52:97:5f:93:87:dc:d2:6c:fb:e1:be:d3:00:
72:1d:bd:a4:6e:f9:a0:3b:c9:70:b8:39:14:6c:5a:
48:14:7a:ba:ce:24:ee:79:c8:d8:bf:e7:24:4b:a1:
6f:10:53:88:4b:71:3c:e3:4f:8f:3c:7b:cc:48:98:
5d:db:69:c8:f5:af:a5:ca:07:cc:c7:59:a6:34:77:
36:97:a2:8b:f7:83:da:de:5a:5c:5f:5a:56:eb:85:
3c:e2:a3:87:9e:ce:cd:d9:a8:73:03:52:2b:97:75:
37:56:14:b9:a4:ca:4b:7b:2c:1e:de:db:55:cf:d3:
09:21:3f:cf:b8:92:e0:7f:21:aa:0a:27:67:a3:ad:
c0:d1:d8:a1:34:2c:dd:90:01:e4:8c:f1:fa:72:3b:
12:63:4a:65:45:5d:65:81:fc:bf:48:b8:d3:9a:87:
a9:a1:94:fd:71:76:66:cf:6d:36:9f:39:33:62:12:
f3:7d:05:61:d6:06:63:f2:52:30:17:f7:55:84:15:
a8:04:b2:e4:cf:b4:f1:82:c5:0e:1f:07:7a:60:e0:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:63:73:EF:00:5C:48:EE:92:E6:46:3D:7E:28:94:DD:2F:A7:E9:9F
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:00:ed:5f:c4:e3:d7:39:b7:b0:d1:cc:b5:b0:5f:9a:e9:d4:
97:76:a2:39:b9:b2:5b:16:54:3d:0b:ca:a4:7b:a7:27:4a:15:
ee:6a:78:d8:be:74:84:1e:01:d7:5b:a3:77:de:dc:6b:35:b5:
7c:87:5f:f6:55:71:5b:2a:47:d0:bb:2d:a0:c8:38:0a:c8:e1:
17:97:13:f0:f4:23:b9:66:00:6c:b8:9d:fd:f8:bd:ea:61:79:
d7:89:b5:0f:31:bf:fa:5b:fc:fc:38:0a:dc:56:a5:f6:e7:2c:
fe:80:61:87:71:0c:ea:d8:57:f0:58:f8:a3:f8:ed:80:f8:00:
e7:6f:e6:60:b6:0f:60:77:28:90:48:11:2e:e3:75:d6:dd:eb:
f5:7f:d8:9a:8a:cf:51:60:9d:c9:3a:f4:2d:69:14:15:d9:44:
f4:5e:d5:f6:f6:7d:6c:30:a9:f5:17:1c:6a:cb:b5:ba:72:14:
e1:6b:87:e0:d2:62:e1:cf:91:38:66:c4:89:c9:ce:98:a3:6b:
86:82:89:74:72:76:41:7f:ad:ac:0c:36:4f:94:a8:16:60:26:
c5:33:dd:a8:46:a9:0b:e6:a5:5f:0b:e8:34:81:d0:e6:e5:76:
94:8f:ff:13:ed:77:13:6c:26:e2:51:ce:e3:f4:00:18:6f:f8:
da:f2:ab:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:06 2026 by rpki-client