Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/hCUwEVQFkHAHS1ND_WColb8GNDQ.roa
File: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (raw, json)
Hash identifier: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=
Subject key identifier: 84:25:30:11:54:05:90:70:07:4B:53:43:FD:60:A8:95:BF:06:34:34
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F236830AE449BCF9B8ADB807EFCC87AFC
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/hCUwEVQFkHAHS1ND_WColb8GNDQ.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14576
IP address blocks: 95.181.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:30:ae:44:9b:cf:9b:8a:db:80:7e:fc:c8:7a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8425301154059070074b5343fd60a895bf063434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:e9:ac:09:d7:f3:c7:c5:49:6c:5d:4e:92:
aa:6a:23:00:fc:75:db:1f:92:ac:75:b7:24:13:5d:
bf:3c:67:8e:c5:c7:a9:37:63:f5:3e:b3:7b:3c:ac:
d9:51:41:19:30:64:a7:74:4e:28:f8:fc:e4:6e:64:
1d:e3:fa:83:6b:d4:16:64:80:76:45:37:bc:7c:6a:
34:b5:a7:27:bb:e2:70:2d:0c:c5:13:0a:14:f2:73:
55:ae:14:c5:e7:87:d8:ae:13:7d:98:eb:b0:64:d7:
34:54:8d:1e:1f:97:f8:4e:48:a3:33:c9:40:ad:aa:
83:f5:6d:86:92:ff:19:a3:fb:e5:d9:29:5b:9c:27:
1d:16:59:96:33:76:18:83:31:26:19:77:b6:c2:ed:
39:27:2c:d9:7f:4b:2d:fe:92:d8:95:fa:9d:01:c3:
f0:76:d6:60:64:a2:18:c7:9e:b0:db:33:06:da:03:
82:1f:a5:e9:3a:5d:6c:a8:4e:c4:a5:b2:0d:9a:c9:
8c:87:ec:3a:34:97:26:95:a2:e2:f5:1b:93:3a:b6:
c6:20:d2:85:75:9d:8f:a7:fd:5d:52:f6:80:dd:14:
82:14:80:cc:68:78:08:3f:ee:9a:22:47:c2:b9:f7:
36:ac:52:59:38:92:61:94:03:9a:57:87:1e:db:a7:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:30:11:54:05:90:70:07:4B:53:43:FD:60:A8:95:BF:06:34:34
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/hCUwEVQFkHAHS1ND_WColb8GNDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.148.0/22
Signature Algorithm: sha256WithRSAEncryption
22:96:40:ba:c3:56:4a:ed:38:0b:10:31:f3:85:b9:0c:b5:53:
5a:be:af:40:1b:ec:0f:30:16:47:36:ec:ae:ac:1b:1b:6c:9a:
53:23:88:7f:93:8c:fd:5d:5f:1e:dc:1b:a2:57:16:5d:b3:1a:
0f:7b:26:38:27:e5:c5:49:1b:0f:fe:51:89:95:92:94:af:52:
97:c7:98:23:84:1f:7f:24:e7:41:bd:56:07:64:9a:20:55:bb:
ca:86:94:0b:2e:b9:fc:d3:b5:ce:ca:2b:ac:cf:4a:66:70:72:
ce:51:64:df:53:30:8d:c5:13:f4:5c:3d:ee:aa:36:98:7a:19:
05:d7:e1:03:bc:d0:2b:da:c6:d0:fa:46:27:83:d1:8d:11:19:
fe:90:98:5c:21:ba:83:18:67:5a:4c:44:17:4a:04:3a:0b:60:
cc:c2:cb:5f:26:d9:0c:6e:57:f7:2d:8f:3a:f8:dc:9c:45:18:
42:17:93:2c:05:61:a4:ae:1b:83:e5:85:60:7d:15:36:df:c7:
cf:6c:f3:aa:ff:38:6a:70:e7:dd:b5:b4:32:97:e0:7c:14:e1:
84:65:87:0a:75:1d:f9:4c:80:34:4e:3c:ee:86:36:ed:c2:0c:
b7:61:2a:ff:48:ed:72:62:5b:b9:ef:bf:87:a7:4c:8c:74:03:
16:fd:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:05:28 2026 by rpki-client