Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/cjuW9zHucIxHadivGPbPdZXZ_58.roa
File: cjuW9zHucIxHadivGPbPdZXZ_58.roa (raw, json)
Hash identifier: +/HavscS0K4ByxH8Sd+pAVMLMiLtpvePtkXZTD1HVWg=
Subject key identifier: 72:3B:96:F7:31:EE:70:8C:47:69:D8:AF:18:F6:CF:75:95:D9:FF:9F
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019C8BF8898A356B50C834B6D172E109538A
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/cjuW9zHucIxHadivGPbPdZXZ_58.roa
Signing time: Mon 23 Feb 2026 19:27:26 +0000
ROA not before: Mon 23 Feb 2026 19:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200819
IP address blocks: 95.111.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:f8:89:8a:35:6b:50:c8:34:b6:d1:72:e1:09:53:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 23 19:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=723b96f731ee708c4769d8af18f6cf7595d9ff9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:3f:ce:03:8a:5d:c7:1d:07:d1:ff:63:2c:
8b:a4:47:70:84:df:70:83:53:1b:d5:8f:da:8e:83:
68:61:0a:ae:ac:41:bc:e6:dc:60:07:1e:59:cc:fd:
12:bd:ed:b0:07:da:f9:67:3a:3a:dd:b1:e3:48:57:
fe:ac:1e:f0:1c:c7:f7:d4:f0:72:1a:df:c4:90:de:
95:ac:3e:a1:a8:0e:85:1d:4d:c0:50:6f:5b:61:6a:
cf:06:2a:03:52:6f:32:b3:55:91:7a:35:3f:1b:82:
50:90:53:95:46:3d:50:a7:77:a9:1c:eb:6c:45:8a:
7d:b8:e0:5f:88:27:44:64:8c:b6:fd:2e:81:30:22:
2b:05:fa:2c:d5:57:52:38:32:cb:db:76:1b:b7:ba:
a0:f8:72:ba:fc:27:63:1e:aa:65:04:61:1c:79:8d:
cf:4e:3a:74:88:7a:99:83:c8:4b:c3:17:37:a8:b4:
30:15:f4:d9:59:fa:dc:a9:94:5e:d5:ed:a1:8f:20:
1c:7a:53:22:4a:4d:0b:82:ec:09:9d:cf:a4:b5:ce:
8c:33:90:61:6e:91:42:3d:ba:1c:69:3b:f4:48:70:
2b:56:4e:5f:28:0a:bf:00:e9:0b:08:c8:b7:85:5c:
1a:03:16:a7:5e:16:c9:0d:0b:0b:9c:d4:5c:a6:b4:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3B:96:F7:31:EE:70:8C:47:69:D8:AF:18:F6:CF:75:95:D9:FF:9F
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/cjuW9zHucIxHadivGPbPdZXZ_58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:99:5c:04:ba:89:1b:c4:a7:7d:a0:33:8e:66:ef:ee:64:dd:
63:d5:d6:d9:3c:db:0c:a0:60:8b:6a:60:42:99:59:2d:98:60:
bf:c5:be:01:8b:b2:5b:13:b2:45:ed:b1:84:2a:07:17:f0:4f:
1b:e1:6b:df:cd:f8:2c:92:d1:cf:bb:12:e4:fc:1e:64:ef:9d:
54:04:b4:25:8f:f4:d1:98:57:6c:f3:1f:57:f7:96:56:ac:60:
c8:b5:b2:b0:b6:18:b9:b4:53:f4:eb:09:3f:93:5f:81:95:0c:
b3:ec:d8:b8:7f:a0:5f:62:4c:9c:7c:f7:2b:bf:a1:07:40:75:
45:f5:ce:78:b2:88:a1:9b:81:ed:d2:2b:ed:38:33:87:60:9f:
1a:3f:ca:7c:77:68:d4:96:09:f1:9a:29:0b:18:fd:2e:50:aa:
65:66:5f:ac:78:3d:92:e3:13:97:3a:b9:fc:9b:7c:58:30:0c:
58:19:34:99:03:31:e2:e3:f1:ad:b2:5e:80:63:6e:3a:3c:d1:
81:8c:a4:31:0a:ec:66:71:d8:8e:3e:9e:26:b3:3a:19:a4:a8:
1a:0d:97:95:97:10:14:9b:48:50:37:3d:72:16:23:7b:67:35:
0a:59:b7:f2:2f:ed:45:24:2a:3d:b7:65:0d:02:b9:31:91:81:
8b:ac:24:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyL+ImKNWtQyDS20XLhCVOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjYwMjIzMTkyNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjNiOTZmNzMxZWU3MDhjNDc2OWQ4YWYxOGY2Y2Y3NTk1ZDlmZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD4/zgOKXccdB9H/YyyLpEdwhN9w
g1Mb1Y/ajoNoYQqurEG85txgBx5ZzP0Sve2wB9r5Zzo63bHjSFf+rB7wHMf31PBy
Gt/EkN6VrD6hqA6FHU3AUG9bYWrPBioDUm8ys1WRejU/G4JQkFOVRj1Qp3epHOts
RYp9uOBfiCdEZIy2/S6BMCIrBfos1VdSODLL23Ybt7qg+HK6/CdjHqplBGEceY3P
Tjp0iHqZg8hLwxc3qLQwFfTZWfrcqZRe1e2hjyAcelMiSk0LguwJnc+ktc6MM5Bh
bpFCPbocaTv0SHArVk5fKAq/AOkLCMi3hVwaAxanXhbJDQsLnNRcprTi/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHI7lvcx7nCMR2nYrxj2z3WV2f+fMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvY2p1Vzl6SHVjSXhIYWRpdkdQYlBkWlhaXzU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX2+WMA0G
CSqGSIb3DQEBCwUAA4IBAQBqmVwEuokbxKd9oDOOZu/uZN1j1dbZPNsMoGCLamBC
mVktmGC/xb4Bi7JbE7JF7bGEKgcX8E8b4WvfzfgsktHPuxLk/B5k751UBLQlj/TR
mFds8x9X95ZWrGDItbKwthi5tFP06wk/k1+BlQyz7Ni4f6BfYkycfPcrv6EHQHVF
9c54soihm4Ht0ivtODOHYJ8aP8p8d2jUlgnxmikLGP0uUKplZl+seD2S4xOXOrn8
m3xYMAxYGTSZAzHi4/Gtsl6AY246PNGBjKQxCuxmcdiOPp4mszoZpKgaDZeVlxAU
m0hQNz1yFiN7ZzUKWbfyL+1FJCo9t2UNArkxkYGLrCTf
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:16:08 2026 by rpki-client