Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/tumc2U0ueawjQmyhq2TbwEHEvII.roa
File: tumc2U0ueawjQmyhq2TbwEHEvII.roa (raw, json)
Hash identifier: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=
Subject key identifier: B6:E9:9C:D9:4D:2E:79:AC:23:42:6C:A1:AB:64:DB:C0:41:C4:BC:82
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F23682F8E621BEBBD59CD384FC2350457
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/tumc2U0ueawjQmyhq2TbwEHEvII.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 95.181.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2f:8e:62:1b:eb:bd:59:cd:38:4f:c2:35:04:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6e99cd94d2e79ac23426ca1ab64dbc041c4bc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:53:3c:97:96:4c:ef:5d:50:d3:73:f7:63:
98:2c:50:be:4b:63:65:1e:cd:31:e6:59:39:c1:5f:
53:c8:4a:2b:73:fe:09:73:53:26:90:94:ef:09:53:
63:1c:56:2b:66:18:e2:6e:2b:58:8d:5b:a2:21:27:
29:f4:ce:ce:7c:95:ee:39:6e:cc:b5:7e:2a:1b:eb:
73:e8:d6:a7:4c:96:f6:c2:5d:47:69:b5:80:ea:6e:
08:a6:1d:1b:9c:61:ab:9c:ef:9f:86:ff:23:dc:8d:
63:48:63:86:7c:9d:2d:9f:86:f2:43:d7:01:b8:b1:
e5:09:fc:c7:fe:a3:e9:3d:15:ed:57:1c:a0:c8:dd:
69:a5:c1:f5:48:57:ee:8d:f1:31:35:89:d6:90:5e:
f6:25:aa:ab:7e:66:b5:1c:2c:5e:e8:2c:d4:f0:8f:
c0:3f:be:98:80:4e:68:a5:7d:bf:49:a5:70:cd:12:
04:2f:4e:1c:ee:85:c6:a0:3a:ae:3f:3d:6c:df:96:
3f:7d:b7:60:0c:af:79:fb:79:53:ec:89:72:65:41:
06:94:a1:d9:64:c3:c8:55:e5:7c:41:f2:46:bb:34:
95:6e:24:d9:9e:7b:06:dc:cd:d2:65:2a:bd:9b:92:
76:6b:3f:49:cc:5e:38:aa:83:9f:d7:ea:c8:50:7e:
cf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E9:9C:D9:4D:2E:79:AC:23:42:6C:A1:AB:64:DB:C0:41:C4:BC:82
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/tumc2U0ueawjQmyhq2TbwEHEvII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e4:c4:df:7d:06:a6:df:5f:0d:5d:58:2f:44:ad:82:c8:d3:
db:ec:36:3e:14:17:e4:f5:c4:49:9b:db:b9:bd:90:6f:e4:ab:
07:ca:29:19:44:04:fa:0f:d9:fa:dd:f2:97:5f:b2:cf:3d:71:
ae:58:82:8a:fc:76:6b:0c:75:03:f4:52:ba:3e:be:4b:df:af:
b2:a2:87:84:35:2b:b1:a1:fe:5e:ba:76:a6:bc:16:24:d2:e4:
29:94:09:a0:f1:bc:d3:3f:96:24:4e:43:8f:a7:33:8e:13:dc:
4f:dc:75:c8:7a:e1:e0:ea:e7:37:a2:07:e8:12:f1:06:3d:92:
41:32:60:6e:11:b6:dd:4f:3e:6c:44:d1:e4:bb:f0:79:bf:13:
30:48:8a:fa:b8:19:c3:b0:7c:3d:7e:17:4e:ff:7d:1e:df:1b:
bb:52:fb:15:37:73:75:6d:74:42:e1:07:af:82:75:43:67:b0:
5d:9c:f7:82:b0:98:9c:e5:76:ef:7c:3c:8d:c4:ba:05:b3:28:
1e:94:cb:40:24:58:b9:81:fd:b1:50:fd:dc:dd:21:aa:b9:13:
b1:52:f3:ff:44:8b:3a:0b:b8:a8:c0:e5:06:c4:a3:4d:86:6d:
56:3b:88:03:ef:5a:f8:ef:b1:eb:e6:bc:0c:e4:f5:bc:51:7e:
6e:b0:67:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:33 2026 by rpki-client