Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/snxe_w3IKkhLIe7EgkGi3Sltxa8.roa
File: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (raw, json)
Hash identifier: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=
Subject key identifier: B2:7C:5E:FF:0D:C8:2A:48:4B:21:EE:C4:82:41:A2:DD:29:6D:C5:AF
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F236833A61A2C94ACE73F81ACF36B4D33
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/snxe_w3IKkhLIe7EgkGi3Sltxa8.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 95.181.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:33:a6:1a:2c:94:ac:e7:3f:81:ac:f3:6b:4d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b27c5eff0dc82a484b21eec48241a2dd296dc5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:60:55:68:9a:6a:10:ec:86:ba:ee:5b:5c:
9f:e0:97:02:41:6e:05:79:25:79:9a:84:ae:f9:9d:
fb:7a:6a:4e:be:e0:25:0b:9d:7e:e6:5e:c6:d4:f3:
b5:66:2a:94:62:28:f0:88:d4:66:a2:fd:74:9b:37:
c4:dd:b2:bf:a4:58:2c:5d:a1:0d:94:d5:3d:0b:a9:
4b:3e:05:8d:2e:aa:b5:2f:ae:82:de:0a:03:87:73:
92:7b:13:ed:a7:3d:99:e7:8e:c5:54:8b:6b:de:d3:
75:a0:14:68:05:ef:a1:db:ec:b7:f1:69:77:f5:b3:
a5:e8:18:f0:1b:43:f9:91:31:73:10:6b:43:91:f7:
c3:17:5d:88:b3:12:63:c0:83:5e:2e:af:30:84:04:
50:0d:2e:25:dc:38:c9:69:df:f1:cb:e7:e5:5d:99:
5e:75:34:95:03:98:31:7b:f8:79:2e:f6:fc:24:a4:
fe:0c:ec:f7:9b:45:0c:6e:8c:c7:b1:a1:45:84:bc:
48:ff:fe:7b:ab:d1:79:ac:da:38:39:66:5a:80:1d:
a2:ed:a3:3b:92:b7:5f:e4:0a:0f:d3:e0:28:14:42:
bd:a7:92:04:17:8b:a6:ad:ca:1e:b6:96:35:a5:70:
c2:88:da:68:e3:39:b7:1b:9a:c4:6a:ba:7f:d2:54:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:5E:FF:0D:C8:2A:48:4B:21:EE:C4:82:41:A2:DD:29:6D:C5:AF
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/snxe_w3IKkhLIe7EgkGi3Sltxa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.168.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0e:f0:cf:50:d1:ec:8c:10:95:fc:7d:18:dc:15:86:be:2a:
2b:75:ac:28:31:d0:39:f5:17:e9:3b:da:ab:23:a5:f2:73:36:
88:30:00:62:26:e4:80:5f:9d:48:39:07:84:6b:54:e0:73:cf:
e8:e8:59:fb:50:62:93:f6:d8:a2:7a:96:20:a5:ee:1b:37:84:
7e:8a:4e:0a:e3:e4:74:73:6e:1e:36:c6:1b:5d:a3:23:3d:22:
60:ea:71:0c:56:64:46:31:52:29:e4:b8:14:ab:c0:2c:5d:76:
19:48:7b:b9:58:64:69:6e:5b:e8:82:80:35:06:c3:8d:3a:84:
f9:df:60:0c:39:65:2e:48:a1:2f:a1:19:fa:94:40:14:6b:2b:
6f:63:e4:04:d2:81:f1:d8:60:6c:c5:eb:9b:0c:42:78:e0:e6:
2e:62:36:33:a9:93:34:4d:d7:22:6f:28:7b:c9:ee:af:79:4e:
a1:3c:c0:cd:e3:41:47:bd:7b:69:57:9e:b1:38:82:6c:11:13:
d9:4e:5f:ed:2e:70:05:b0:d2:c6:1c:f7:a6:2d:f2:d8:34:19:
24:81:a0:b1:da:72:62:9c:92:a2:8e:aa:21:bf:68:f5:8b:8b:
47:c8:7e:74:39:21:80:a5:3d:95:5b:43:15:a7:18:22:21:cc:
b5:1f:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:06 2026 by rpki-client