Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/D5KXW9fykA4D2kkau-Hvj4ncfkI.roa
File: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (raw, json)
Hash identifier: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=
Subject key identifier: 0F:92:97:5B:D7:F2:90:0E:03:DA:49:1A:BB:E1:EF:8F:89:DC:7E:42
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F236832EE2978CD81ABE84B511E6B902F
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/D5KXW9fykA4D2kkau-Hvj4ncfkI.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43278
IP address blocks: 95.181.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:32:ee:29:78:cd:81:ab:e8:4b:51:1e:6b:90:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f92975bd7f2900e03da491abbe1ef8f89dc7e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:f8:79:8c:2d:b6:8b:d9:c4:eb:5c:cc:a5:
c6:0a:b1:a2:be:be:73:79:f4:c1:44:66:fe:de:00:
02:c3:86:bc:41:43:34:3b:73:c9:d0:2e:20:11:d6:
e7:55:0a:b0:4e:5f:c6:a2:9d:b7:be:ae:c9:f8:1e:
91:54:ca:21:a7:10:68:25:8a:b7:e8:12:27:6c:38:
ba:bf:b4:71:1b:bd:c3:fc:df:2e:db:5a:44:5c:5a:
f8:ab:cb:51:77:ab:1b:63:58:6d:fb:25:64:09:77:
a2:5d:77:e3:9a:09:5f:1b:a5:68:a2:c2:70:4b:85:
27:8a:63:0c:f0:0b:d0:9e:c0:59:65:62:35:e3:7b:
c3:76:d6:55:b7:7a:6f:ea:e4:a9:74:e8:ca:8a:e3:
84:de:7e:ad:18:de:ec:a6:a9:60:cf:c3:52:61:99:
86:26:54:b2:19:04:91:22:66:c9:9e:6a:41:ee:9e:
de:c5:37:2d:7f:f2:b7:cf:c6:74:68:7c:32:38:a1:
45:35:9f:42:fa:93:26:1f:4b:f2:96:45:07:9f:83:
da:08:2e:e1:f7:d2:bf:80:71:2e:5d:99:0d:29:f8:
cd:64:93:8f:21:b7:4b:32:8b:74:1e:5f:e1:91:aa:
36:cd:2a:3e:ce:9e:1c:10:44:ca:76:04:f1:55:49:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:92:97:5B:D7:F2:90:0E:03:DA:49:1A:BB:E1:EF:8F:89:DC:7E:42
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/D5KXW9fykA4D2kkau-Hvj4ncfkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.158.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c2:50:f2:c9:dd:39:cc:ff:bc:ea:10:c0:c9:41:a9:a1:1d:
bc:66:5f:bf:1d:ec:29:59:a1:bd:da:22:0b:59:89:9b:95:8e:
34:89:43:53:88:a6:04:aa:85:f8:89:01:c8:b6:4e:dd:38:34:
20:78:2d:4b:e5:ab:b4:30:8d:c8:ff:f3:09:84:3f:92:8e:e3:
a4:d2:04:30:25:7c:6a:a5:38:5a:95:87:1c:22:9b:1f:0e:c5:
66:51:69:53:c2:01:b4:97:b9:25:76:e5:b6:44:06:b2:c8:23:
6c:0f:08:a4:65:86:fe:39:ba:fb:df:58:bc:b2:84:c1:c1:30:
36:4e:81:64:fa:3e:a6:e2:52:32:7b:a1:3a:a3:87:e7:10:a9:
83:75:0c:18:61:6c:c1:f4:21:a2:65:8b:6d:9f:27:58:6a:af:
c7:af:3a:0c:c8:a2:47:64:d0:84:d7:36:ab:81:a0:75:14:c1:
e6:7e:6b:1a:30:2d:c3:e2:ca:5f:53:8f:5f:a7:aa:c5:46:07:
cd:3f:a4:5f:a5:b9:c1:79:25:d9:a2:c4:4d:60:1e:45:b8:c1:
18:b8:3d:56:4f:5b:df:6c:41:ae:a7:18:8b:1b:b2:01:d7:b9:
d8:18:b6:38:95:b3:da:0f:7c:e6:1b:bb:a5:b8:8c:91:d4:ad:
03:00:06:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaDLuKXjNgavoS1Eea5AvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0
MTc0ODAwHhcNMjYwNzAyMTUxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjkyOTc1YmQ3ZjI5MDBlMDNkYTQ5MWFiYmUxZWY4Zjg5ZGM3ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKv4eYwttovZxOtczKXGCrGivr5z
efTBRGb+3gACw4a8QUM0O3PJ0C4gEdbnVQqwTl/Gop23vq7J+B6RVMohpxBoJYq3
6BInbDi6v7RxG73D/N8u21pEXFr4q8tRd6sbY1ht+yVkCXeiXXfjmglfG6VoosJw
S4UnimMM8AvQnsBZZWI143vDdtZVt3pv6uSpdOjKiuOE3n6tGN7spqlgz8NSYZmG
JlSyGQSRImbJnmpB7p7exTctf/K3z8Z0aHwyOKFFNZ9C+pMmH0vylkUHn4PaCC7h
99K/gHEuXZkNKfjNZJOPIbdLMot0Hl/hkao2zSo+zp4cEETKdgTxVUkTywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA+Sl1vX8pAOA9pJGrvh74+J3H5CMB8GA1UdIwQY
MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvRDVLWFc5ZnlrQTREMmtrYXUtSHZqNG5jZmtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WeMA0G
CSqGSIb3DQEBCwUAA4IBAQB4wlDyyd05zP+86hDAyUGpoR28Zl+/HewpWaG92iIL
WYmblY40iUNTiKYEqoX4iQHItk7dODQgeC1L5au0MI3I//MJhD+SjuOk0gQwJXxq
pThalYccIpsfDsVmUWlTwgG0l7klduW2RAayyCNsDwikZYb+Obr731i8soTBwTA2
ToFk+j6m4lIye6E6o4fnEKmDdQwYYWzB9CGiZYttnydYaq/HrzoMyKJHZNCE1zar
gaB1FMHmfmsaMC3D4spfU49fp6rFRgfNP6RfpbnBeSXZosRNYB5FuMEYuD1WT1vf
bEGupxiLG7IB17nYGLY4lbPaD3zmG7uluIyR1K0DAAYU
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:20 2026 by rpki-client