Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/wR1usNodUuK6XHhDdVcRc5TfXWM.roa
File: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (raw, json)
Hash identifier: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=
Subject key identifier: C1:1D:6E:B0:DA:1D:52:E2:BA:5C:78:43:75:57:11:73:94:DF:5D:63
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F23683C159C983DCBFF317CFCF3E7A0E2
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/wR1usNodUuK6XHhDdVcRc5TfXWM.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215897
IP address blocks: 95.181.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3c:15:9c:98:3d:cb:ff:31:7c:fc:f3:e7:a0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c11d6eb0da1d52e2ba5c78437557117394df5d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:8b:04:e8:97:e1:37:a9:a9:1d:23:f6:ce:
85:d5:00:f6:c7:eb:b0:31:bc:53:22:3b:70:88:5a:
72:3e:dc:48:de:59:b4:e5:68:a9:cb:33:a5:b7:d4:
d5:f6:31:c6:3d:fb:34:69:e4:f4:24:ba:8a:53:ca:
b4:54:21:07:ce:a2:e8:7c:61:58:a1:8f:08:06:52:
aa:54:85:cb:45:e3:cd:c1:56:21:16:8d:1c:b4:31:
cc:8a:7a:31:ba:c1:fe:c0:d9:d5:58:d8:10:30:1d:
51:e3:55:1a:dc:75:65:cf:24:79:f2:5e:80:7a:13:
dc:35:69:2e:0a:f6:0e:07:d8:08:56:75:e2:84:df:
99:77:22:22:1b:b4:4d:c0:0d:c2:20:61:20:08:25:
9b:74:b7:d8:c4:92:fb:ca:d4:f7:3c:9f:e3:5e:ac:
1d:39:d3:a3:68:24:b3:23:cd:e9:5e:18:d6:94:cf:
d9:ae:95:22:28:1f:d6:64:56:b3:bb:44:ac:aa:ff:
06:ed:d6:02:67:1f:98:d5:3d:7b:27:e1:dc:21:61:
de:6d:e1:a1:30:29:5e:15:85:4d:a8:9e:d7:aa:be:
80:86:fb:c4:da:c9:1a:60:1c:eb:a1:81:fe:e7:41:
4d:63:c7:ab:dc:f1:b2:76:bb:75:57:09:51:03:9f:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1D:6E:B0:DA:1D:52:E2:BA:5C:78:43:75:57:11:73:94:DF:5D:63
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/wR1usNodUuK6XHhDdVcRc5TfXWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e1:86:3f:9d:ca:76:95:6e:ce:b0:26:f6:e9:d1:29:01:36:
ae:a0:ea:5c:d2:76:14:a1:24:56:76:6f:b4:17:0a:d8:3f:60:
fa:52:c7:e6:26:25:dd:3d:cb:82:e7:56:d9:e6:7c:66:fc:39:
8b:66:43:db:4c:da:0b:70:7f:14:b9:f3:3e:f2:c9:e3:4b:85:
63:02:99:32:2d:68:0a:15:68:e9:5d:62:93:a8:d2:70:a9:96:
bf:e2:91:9e:07:9d:5f:05:b7:99:43:c7:e9:bb:52:2a:7e:d3:
13:36:48:8c:43:4f:4c:88:e6:ac:67:6f:32:bf:57:81:3f:21:
44:3e:52:4f:25:21:99:67:99:4e:9b:05:2b:4e:b6:d9:96:3b:
c3:c3:e8:87:72:93:08:a3:34:fc:1d:62:ad:8d:5b:5f:4c:eb:
87:77:cf:bb:d0:ae:58:3b:c5:63:fb:94:19:94:79:40:31:28:
8d:af:06:05:33:68:12:58:b0:b9:30:b6:62:fd:9f:43:57:ae:
9e:e5:20:55:71:bc:32:f7:6c:cb:0f:81:79:db:3f:85:61:07:
1e:89:49:b3:db:b2:05:f1:0b:1b:6c:41:45:70:ba:3c:c9:60:
93:1d:8e:d5:76:94:47:9a:95:bd:4d:ba:37:ae:f0:e4:97:5a:
0c:79:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:07 2026 by rpki-client