Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/yjo-DKyB6upn-q8jOq2YNWMm_7w.roa
File: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (raw, json)
Hash identifier: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=
Subject key identifier: CA:3A:3E:0C:AC:81:EA:EA:67:FA:AF:23:3A:AD:98:35:63:26:FF:BC
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F23683A14ED8EB882BECAA857B26D2244
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/yjo-DKyB6upn-q8jOq2YNWMm_7w.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 95.181.160.0/24 maxlen: 24
95.181.162.0/24 maxlen: 24
95.181.167.0/24 maxlen: 24
95.181.173.0/24 maxlen: 24
95.181.174.0/24 maxlen: 24
95.181.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3a:14:ed:8e:b8:82:be:ca:a8:57:b2:6d:22:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca3a3e0cac81eaea67faaf233aad98356326ffbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:d5:af:6b:d1:b2:d1:c7:76:cc:5a:ca:11:
64:bd:e2:7c:70:7f:4f:46:41:2b:e0:dd:5a:21:c6:
dc:5d:99:ff:80:ac:03:ab:6b:a8:b2:78:5d:94:42:
59:93:4f:59:b3:63:c6:b5:11:a5:41:a6:37:90:9e:
5c:f9:0b:3b:f3:f5:56:fa:ae:c8:33:a6:d3:9e:c8:
a3:ef:63:01:64:f4:76:3d:26:13:bb:83:42:33:c1:
85:3b:04:51:c0:20:70:03:96:2a:28:d1:22:e1:b4:
55:85:56:7c:70:ab:68:cc:d6:43:f5:6a:c5:02:66:
ae:d7:b2:ed:8c:74:02:33:ad:7d:b2:00:13:ba:59:
d6:97:68:17:7b:c5:da:ab:3d:b0:2a:96:2f:7b:67:
f0:a9:f2:55:6b:5d:18:bd:23:f8:be:c2:a3:e5:f7:
20:89:f1:b6:2f:f5:12:eb:77:fc:ad:14:b1:f7:64:
5c:b0:ec:ec:09:b2:ce:bc:12:4c:25:ad:18:dc:39:
c7:14:35:98:56:f2:58:be:c4:bb:48:b9:58:a1:36:
42:d7:f2:78:66:40:68:f2:8c:63:29:e1:57:19:12:
8b:96:57:54:5d:82:3d:2a:6d:e0:44:e3:5a:ab:26:
6a:5c:79:a3:02:f8:38:c0:cf:18:f3:6c:5a:9c:32:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:3E:0C:AC:81:EA:EA:67:FA:AF:23:3A:AD:98:35:63:26:FF:BC
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/yjo-DKyB6upn-q8jOq2YNWMm_7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.160.0/24
95.181.162.0/24
95.181.167.0/24
95.181.173.0-95.181.175.255
Signature Algorithm: sha256WithRSAEncryption
09:fc:6e:f9:43:e2:c6:d1:03:08:eb:d4:51:b0:cc:14:cd:23:
bc:c2:4f:6b:10:a4:55:6e:60:60:78:40:c0:7d:6b:59:e4:66:
98:2c:85:bf:9f:74:d6:a6:4e:3c:bb:75:2a:ef:eb:c2:9d:66:
c3:ad:13:53:32:31:1d:e8:a2:76:81:86:27:6e:0b:41:5a:44:
fc:1d:98:ea:c3:fc:0f:7b:5b:59:69:1b:03:fe:6e:99:50:d3:
0c:39:b0:8c:77:bb:50:83:66:13:21:9d:6c:7a:e3:86:19:fa:
a1:2b:25:8a:5b:c3:8e:43:e3:b4:da:4b:a9:77:9a:07:59:d6:
c8:b5:da:76:71:bf:42:2a:2c:a7:c2:46:fc:1f:e9:35:c5:73:
83:9e:39:c2:b3:1e:26:ff:b7:f9:1f:78:5b:48:76:44:13:d8:
89:4a:4a:7f:5f:31:88:d3:a4:74:77:de:1d:9d:7f:12:ea:fc:
c7:cd:1f:db:68:f0:9e:10:c3:35:9d:30:d3:4c:19:1d:1f:cf:
24:f0:5c:65:2e:ee:1c:25:4d:20:1b:7f:a1:6b:3b:60:d4:b0:
8d:ec:85:bf:84:03:7f:31:7b:bd:c9:75:c7:2f:e5:47:e0:e7:
bd:75:8e:a3:c4:f3:5e:c2:13:1e:95:9e:8e:17:0d:cf:10:f7:
5e:48:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 08:39:31 2026 by rpki-client