Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/ufRes8Nqob9X-LbpoNirtnnM0Bg.roa
File: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (raw, json)
Hash identifier: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=
Subject key identifier: B9:F4:5E:B3:C3:6A:A1:BF:57:F8:B6:E9:A0:D8:AB:B6:79:CC:D0:18
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F2368388E0A85FA7E8878188663D329CD
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/ufRes8Nqob9X-LbpoNirtnnM0Bg.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206336
IP address blocks: 95.181.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:8e:0a:85:fa:7e:88:78:18:86:63:d3:29:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9f45eb3c36aa1bf57f8b6e9a0d8abb679ccd018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:55:89:92:98:c9:69:7b:11:ed:a3:c2:51:
18:56:d2:99:8c:d4:a0:ea:db:86:3e:34:a0:b5:00:
7a:2f:c0:f5:0c:06:f7:3a:84:b0:65:44:bf:d9:5d:
34:29:5b:3f:e9:8f:46:3d:54:c6:c2:79:97:36:76:
22:01:82:ef:90:70:98:61:f0:5b:09:42:34:5e:c9:
b8:08:46:d5:30:ad:e3:26:08:c6:7c:9f:cd:00:bd:
5c:61:e4:df:66:09:61:4e:8e:68:f4:aa:02:27:1c:
c3:29:bb:87:54:eb:e0:0d:14:64:89:dd:8e:09:72:
44:aa:f0:d4:73:60:bb:32:a5:67:3e:63:19:f9:4b:
b8:42:83:2e:83:aa:d7:59:a2:b5:b0:f3:59:23:41:
14:3c:29:47:fb:70:0b:bd:d7:e7:54:30:ad:13:18:
b2:6f:ee:92:82:a4:bf:9c:19:20:7c:f0:05:71:66:
94:52:8b:1b:1a:b2:fa:1c:88:de:bd:b2:06:fa:56:
c8:49:c8:5a:b7:76:e2:00:a4:1c:b7:93:37:e0:8b:
07:d3:bc:8d:04:3b:78:ba:1f:27:e3:ca:79:02:94:
68:eb:a3:36:97:f7:c4:f6:51:de:e3:1f:45:da:72:
75:9c:e9:3d:f5:49:9d:30:54:4b:41:22:9b:9a:52:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F4:5E:B3:C3:6A:A1:BF:57:F8:B6:E9:A0:D8:AB:B6:79:CC:D0:18
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/ufRes8Nqob9X-LbpoNirtnnM0Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.173.0/24
Signature Algorithm: sha256WithRSAEncryption
04:86:91:24:79:b2:22:3d:0e:82:7b:25:1b:61:f1:0c:e3:5f:
ed:70:2b:6e:a3:a1:8e:36:d2:e5:d8:6c:30:ea:5c:e5:3e:5d:
de:01:5a:6b:1a:bb:6a:f5:02:b6:ee:3d:59:fe:19:41:73:42:
bb:cc:3a:38:41:98:25:0a:ea:c5:61:7d:83:49:1a:94:b7:08:
de:41:d8:43:ac:55:94:e3:cb:38:0f:85:5b:03:a8:fc:b5:a7:
e3:88:b8:b7:8c:a3:ac:87:92:d8:6c:8a:f6:f2:a1:98:58:13:
08:35:50:9c:c9:81:b4:58:78:50:67:d8:43:08:18:53:94:be:
31:87:4d:8a:3f:5e:d8:81:ac:b9:b1:65:12:4c:bf:e0:ea:74:
4a:d4:b4:d8:e1:67:bc:22:d1:4e:f8:bd:43:4a:77:cd:a3:ec:
5e:53:39:72:5e:c2:92:8c:b0:ee:4c:a0:8a:25:78:6b:6c:05:
d7:f6:9a:e7:a6:0e:14:a9:c9:f7:5f:ac:ab:26:e8:f2:5d:ad:
cf:e1:e3:91:62:04:04:84:a3:46:08:76:ad:38:e6:87:2f:b1:
82:9b:8c:a0:f6:a4:ab:90:c4:b4:25:97:b7:14:6a:83:cc:0e:
4b:31:fa:7a:37:97:38:d2:45:9a:69:47:07:b8:13:39:91:fb:
24:a4:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:33 2026 by rpki-client