Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa
File: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (raw, json)
Hash identifier: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=
Subject key identifier: 45:F9:D0:D8:64:97:44:D9:9D:E6:D8:0F:14:CB:CE:D2:4F:DF:99:25
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F23683493ACE9ECC0344E920EC9A935C4
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64419
IP address blocks: 95.181.148.0/24 maxlen: 24
95.181.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:93:ac:e9:ec:c0:34:4e:92:0e:c9:a9:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45f9d0d8649744d99de6d80f14cbced24fdf9925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:27:86:52:00:d7:81:62:9f:c7:54:ea:b3:
27:4f:15:69:96:54:e0:76:c6:70:65:08:e8:90:82:
3d:0a:16:8b:d2:29:de:c1:aa:14:70:09:20:84:c2:
34:ce:ae:a3:14:a8:4f:ca:8b:cb:ef:b6:f6:42:73:
53:51:fd:18:85:f9:16:ac:80:fc:c2:7a:46:3b:16:
60:88:1a:82:fb:47:4e:be:5e:56:2f:40:cd:e8:58:
df:a5:9f:bf:bc:bc:2f:b8:9a:1b:84:05:70:93:eb:
1f:9f:17:9e:62:ed:37:71:e0:d9:8f:a0:5a:91:3d:
6d:79:10:98:39:a5:5e:4e:3d:49:0d:be:b2:28:51:
b9:74:79:92:1a:97:f6:ae:83:5d:0f:e2:d0:aa:e1:
f4:5b:96:10:c3:ce:21:e7:57:ef:6e:42:9f:2c:c3:
4d:0f:28:3f:db:6e:f5:ab:2a:2d:d3:47:61:a7:81:
1d:59:0c:1c:b6:36:b0:58:63:ed:75:f7:03:ad:da:
fe:04:b6:06:5f:b0:aa:ef:39:88:05:9f:30:31:24:
4d:1e:d8:41:03:42:2e:6b:73:4c:85:3d:80:c0:3a:
25:79:83:3f:3d:f9:97:cf:0b:0e:52:ae:5b:c3:c4:
ac:25:59:67:63:96:c5:83:bc:fb:fa:6a:59:0a:f1:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F9:D0:D8:64:97:44:D9:9D:E6:D8:0F:14:CB:CE:D2:4F:DF:99:25
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.148.0/23
Signature Algorithm: sha256WithRSAEncryption
11:f5:08:25:fc:0d:10:23:ab:a5:6d:a2:3f:69:eb:1d:a6:e2:
22:79:a1:57:7b:ef:c4:c2:ed:17:5f:51:d0:d2:d2:0e:a2:96:
06:68:ed:2c:66:e9:91:c9:df:ff:d7:81:b4:ac:55:25:92:4c:
63:73:ad:d8:15:27:db:a7:84:72:5d:ec:eb:69:7f:ba:ca:b4:
99:b1:7e:e1:5f:22:da:d2:3a:c9:cb:55:f2:e3:40:72:6a:e1:
3b:9f:e1:7e:a3:c2:9a:c8:22:12:7a:2a:3e:3b:4d:70:87:fe:
80:f8:bd:fc:df:61:f0:12:96:fd:5b:b8:b9:f9:11:71:60:55:
79:8b:d7:f3:d2:4b:e8:ec:8f:c2:5d:f1:31:29:48:eb:b9:41:
68:81:60:d7:38:a9:fe:76:1f:66:1e:75:d5:44:c9:6c:65:a9:
43:f8:c0:e0:68:25:72:f4:33:d8:c2:f5:bf:05:f0:f1:0f:7a:
46:f0:49:06:28:a9:a7:9f:b4:cd:44:a7:65:40:4b:fa:e2:3c:
c0:af:68:b3:db:70:b3:07:b3:90:01:e3:2d:63:d1:8c:44:69:
c7:b6:8a:b3:cc:f9:fb:a7:bc:03:44:81:86:80:99:4e:f5:c4:
ed:15:c3:d1:5a:8c:1a:0a:ce:80:d8:f8:a6:6b:47:5c:2a:d0:
b0:f3:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:06 2026 by rpki-client