Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/EmaHkN4PwghzXlxJKLnJoSQYQS4.roa
File: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (raw, json)
Hash identifier: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=
Subject key identifier: 12:66:87:90:DE:0F:C2:08:73:5E:5C:49:28:B9:C9:A1:24:18:41:2E
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F236837B7BDAFFA2B66FD8C0AE9F3C427
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/EmaHkN4PwghzXlxJKLnJoSQYQS4.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 95.181.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:b7:bd:af:fa:2b:66:fd:8c:0a:e9:f3:c4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12668790de0fc208735e5c4928b9c9a12418412e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:b8:ef:15:cd:ba:a8:59:a9:bb:c4:d7:9e:
bd:91:84:ae:a1:39:3d:b5:ad:f4:30:de:f4:27:be:
3e:ca:e5:ef:3c:73:5b:3c:52:9f:28:9c:79:26:74:
0a:48:0b:b4:4d:5a:42:42:f1:8e:d4:e3:5d:48:b8:
5d:91:43:77:0e:9e:26:b6:00:33:bd:e6:89:12:e1:
c9:f7:68:36:d2:8e:55:5e:8e:4d:6c:96:61:5f:9e:
f6:ba:ec:17:6f:67:08:7f:a5:ac:95:77:ce:d4:c3:
3d:bb:2d:03:bb:29:29:86:bf:bd:b7:16:24:80:3e:
58:71:43:76:7d:e3:40:fe:1d:67:ed:03:02:f5:7a:
93:21:ae:3a:14:d3:fc:c3:a2:90:7e:90:b6:b6:c0:
31:5b:5f:4f:87:5a:e9:5b:0b:b9:74:df:a0:43:28:
f7:ff:f4:a2:70:27:52:99:e5:6e:ac:2c:9b:7a:d7:
e7:d4:d1:35:a6:61:b2:dc:ed:d6:ef:66:61:51:06:
b7:4f:67:5f:2e:c8:59:09:77:54:5c:38:8d:ae:26:
79:dc:f7:49:5c:ae:66:23:4f:fd:3f:f2:ac:73:c2:
79:b4:52:a4:49:8d:20:f4:cc:78:d1:a6:2b:f9:05:
50:d6:4c:8c:e8:db:4a:ec:54:b5:5b:83:a7:c5:5a:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:66:87:90:DE:0F:C2:08:73:5E:5C:49:28:B9:C9:A1:24:18:41:2E
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/EmaHkN4PwghzXlxJKLnJoSQYQS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.173.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f7:98:40:21:23:2a:a0:d0:5f:37:b3:b4:44:7e:00:d3:78:
f7:13:5f:ec:81:d5:e4:29:bb:ed:88:ca:5a:b2:d0:4c:23:64:
bf:ac:73:df:e5:33:0a:ab:f9:85:90:49:a3:d8:4a:34:92:93:
29:1a:28:2a:c9:a3:d8:18:9d:63:c5:c8:6a:3f:f5:ae:8f:8a:
5d:df:86:b5:d2:df:4c:2a:ae:ae:77:84:06:f3:96:49:ff:9c:
52:cb:d1:2a:45:fc:3a:04:3f:42:19:0b:eb:e7:c8:96:97:49:
c0:20:80:9e:c6:ef:bc:5d:65:fd:7a:cb:40:87:6a:03:55:a9:
7e:fb:7b:a6:5f:07:93:6a:64:0c:4e:68:7c:da:a6:93:07:dd:
4d:f7:d6:20:36:c3:78:11:5a:64:a1:63:be:96:26:ae:df:a3:
25:dc:b1:da:60:c7:b9:83:1e:d8:4e:ca:d8:44:df:89:12:64:
e6:66:69:9c:8a:b2:6f:9d:e6:9d:a4:f8:2e:a2:03:2e:ff:10:
2f:50:c8:91:67:d7:49:8c:68:74:a4:75:66:cb:68:3d:ee:97:
74:58:61:77:bf:d7:de:6f:57:a3:a1:4e:e8:39:99:ff:51:ad:
7b:0a:b2:f0:84:95:d8:00:40:57:f3:6f:2b:d8:7e:0e:35:a1:
8b:aa:94:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaDe3va/6K2b9jArp88QnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0
MTc0ODAwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjY2ODc5MGRlMGZjMjA4NzM1ZTVjNDkyOGI5YzlhMTI0MTg0MTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCW47xXNuqhZqbvE1569kYSuoTk9
ta30MN70J74+yuXvPHNbPFKfKJx5JnQKSAu0TVpCQvGO1ONdSLhdkUN3Dp4mtgAz
veaJEuHJ92g20o5VXo5NbJZhX572uuwXb2cIf6WslXfO1MM9uy0Duykphr+9txYk
gD5YcUN2feNA/h1n7QMC9XqTIa46FNP8w6KQfpC2tsAxW19Ph1rpWwu5dN+gQyj3
//SicCdSmeVurCybetfn1NE1pmGy3O3W72ZhUQa3T2dfLshZCXdUXDiNriZ53PdJ
XK5mI0/9P/Ksc8J5tFKkSY0g9Mx40aYr+QVQ1kyM6NtK7FS1W4OnxVr05QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJmh5DeD8IIc15cSSi5yaEkGEEuMB8GA1UdIwQY
MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvRW1hSGtONFB3Z2h6WGx4SktMbkpvU1FZUVM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WtMA0G
CSqGSIb3DQEBCwUAA4IBAQCZ95hAISMqoNBfN7O0RH4A03j3E1/sgdXkKbvtiMpa
stBMI2S/rHPf5TMKq/mFkEmj2Eo0kpMpGigqyaPYGJ1jxchqP/Wuj4pd34a10t9M
Kq6ud4QG85ZJ/5xSy9EqRfw6BD9CGQvr58iWl0nAIICexu+8XWX9estAh2oDVal+
+3umXweTamQMTmh82qaTB91N99YgNsN4EVpkoWO+liau36Ml3LHaYMe5gx7YTsrY
RN+JEmTmZmmcirJvneadpPguogMu/xAvUMiRZ9dJjGh0pHVmy2g97pd0WGF3v9fe
b1ejoU7oOZn/Ua17CrLwhJXYAEBX828r2H4ONaGLqpQS
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:52 2026 by rpki-client