Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/X7DeWmIh751ahxsaFVz2zkdKKCc.roa
File: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (raw, json)
Hash identifier: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=
Subject key identifier: 5F:B0:DE:5A:62:21:EF:9D:5A:87:1B:1A:15:5C:F6:CE:47:4A:28:27
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F23683C43BC6505E09BAEFAA29FAD4F5A
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/X7DeWmIh751ahxsaFVz2zkdKKCc.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216127
IP address blocks: 95.181.151.0/24 maxlen: 24
95.181.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3c:43:bc:65:05:e0:9b:ae:fa:a2:9f:ad:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fb0de5a6221ef9d5a871b1a155cf6ce474a2827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:5e:0a:f4:35:76:3b:08:48:55:61:eb:d2:
d3:66:ba:6f:d1:98:dc:e1:7a:36:6a:a1:27:9c:56:
3c:bc:11:08:ed:09:56:34:b1:4e:8f:77:1d:41:77:
7d:52:0f:7b:c7:04:0d:51:c3:a2:35:b7:a8:ca:77:
65:9c:29:9b:ce:13:3f:68:6f:ee:63:2e:b1:10:b7:
e4:e3:60:73:f4:29:03:8b:14:0c:fa:b0:ef:32:b0:
8a:62:cb:bc:26:e7:96:d4:34:c2:31:21:d4:bb:5a:
2b:67:8b:60:32:7d:88:f3:6f:d0:b1:f8:09:3d:70:
c3:47:4a:f0:7d:a2:af:cd:0a:6d:ad:10:24:07:31:
94:38:a6:78:c0:10:df:10:c4:9d:d0:56:3a:aa:6d:
ae:c0:03:8c:44:ca:f6:02:25:c6:fa:eb:90:71:b7:
4b:38:74:d0:6b:0a:c5:60:a2:e8:4f:da:28:0e:99:
1e:1c:c9:a7:fc:ec:30:47:6b:46:55:ca:e9:68:16:
0d:bc:5c:82:45:3d:b0:bc:9a:5b:e7:10:9f:db:ec:
ac:a5:33:d7:24:ae:fc:58:37:d6:ac:9b:b7:13:1b:
03:b9:61:ce:2c:38:c7:71:05:a3:84:48:29:62:d4:
1f:9e:5c:87:e7:c6:a7:54:ae:2f:bd:73:2c:d1:49:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B0:DE:5A:62:21:EF:9D:5A:87:1B:1A:15:5C:F6:CE:47:4A:28:27
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/X7DeWmIh751ahxsaFVz2zkdKKCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.151.0/24
95.181.161.0/24
Signature Algorithm: sha256WithRSAEncryption
93:be:5a:b1:71:4f:cb:b5:8f:8e:ac:eb:19:74:4c:b7:f6:4f:
0c:b9:52:4a:d1:a6:cf:81:97:3f:57:48:79:75:c7:5a:91:fc:
82:19:d7:61:81:cd:e1:fc:32:44:8b:74:98:26:60:b0:1e:7c:
b2:05:2b:d5:1e:04:d3:b8:0b:b1:45:bb:36:e5:09:72:46:c8:
7d:96:f4:c3:21:48:0b:96:7f:5d:72:85:29:80:82:82:1d:e0:
f1:d4:2e:b3:04:88:9e:af:07:cc:b0:27:3c:53:5c:8a:f3:2d:
3c:0d:20:58:d1:c4:e5:4c:92:a9:7c:cb:66:68:c7:d9:c4:37:
29:83:f8:74:f8:7c:80:3f:59:a4:f9:e2:24:a0:fc:f5:2b:d8:
6a:c2:8e:1e:17:19:70:22:26:55:4e:0e:9f:c7:db:e7:da:04:
7d:4f:5a:17:3e:39:76:b5:1a:60:33:7f:16:dc:27:f8:74:29:
b5:52:1f:61:64:a1:be:87:77:ce:7b:09:f1:ec:27:79:a0:97:
95:46:d1:8f:95:ad:6c:28:ad:e5:2a:2c:ab:55:eb:55:fd:bb:
0f:2e:c7:bc:4d:c6:34:9f:39:0b:b7:57:1a:11:1e:df:d5:4e:
73:d8:12:2b:21:41:da:93:ef:41:1e:5b:92:de:56:83:6c:cb:
65:1b:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:14 2026 by rpki-client