Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cuhuA15slbiHKR4EhxOPm4w5OXs.roa
File: cuhuA15slbiHKR4EhxOPm4w5OXs.roa (raw, json)
Hash identifier: BH6wtjXlgltASDicSgINYisyX3ada7tsHMhtHfxTjQ0=
Subject key identifier: 72:E8:6E:03:5E:6C:95:B8:87:29:1E:04:87:13:8F:9B:8C:39:39:7B
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A0F1A1AF51BE5F76B888388572366E150D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cuhuA15slbiHKR4EhxOPm4w5OXs.roa
Signing time: Wed 30 Sep 2026 09:25:00 +0000
ROA not before: Wed 30 Sep 2026 09:25:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132104
IP address blocks: 95.82.10.0/23 maxlen: 24
178.236.36.0/23 maxlen: 24
195.96.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:a1:af:51:be:5f:76:b8:88:38:85:72:36:6e:15:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 30 09:25:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72e86e035e6c95b887291e0487138f9b8c39397b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:17:59:01:99:8a:ac:18:90:59:a7:98:5c:
66:d5:80:e4:32:17:96:2c:7a:49:45:78:64:81:b9:
44:21:a8:e5:c7:90:5b:39:62:bb:c9:06:93:80:aa:
8e:a0:77:1e:0c:3f:9f:67:b4:95:e9:77:d3:90:2b:
6f:65:09:ab:c0:a3:55:a0:2a:46:59:46:9d:f6:86:
92:64:c2:66:94:8b:d6:0d:a4:40:09:99:b2:ab:2b:
f9:97:6f:c6:52:0d:0f:bc:88:35:b5:1d:ea:41:4a:
eb:20:73:a7:60:97:fd:09:ec:4a:8a:80:3d:7e:07:
f1:66:4a:ce:47:0c:a3:bc:6b:e0:ce:4b:68:71:9a:
17:38:7e:fb:74:35:7e:ba:e5:cf:d1:53:86:0b:d0:
df:5a:92:03:9c:fc:b2:db:10:80:c4:2d:82:1f:30:
7b:3f:9d:3f:68:eb:07:83:50:55:04:83:e4:77:2b:
db:8d:e3:ab:66:ac:3b:e3:e0:58:10:5f:18:4b:b1:
2c:03:b8:3b:92:86:69:65:d9:51:da:f7:93:0e:36:
fc:1d:59:67:da:61:4c:20:ea:ba:43:d7:80:5f:8f:
d3:d1:b4:e4:58:47:b5:b3:97:cf:e8:21:d0:95:c1:
af:e2:39:ea:33:6a:a9:75:17:69:08:a2:fa:94:0a:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E8:6E:03:5E:6C:95:B8:87:29:1E:04:87:13:8F:9B:8C:39:39:7B
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cuhuA15slbiHKR4EhxOPm4w5OXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.10.0/23
178.236.36.0/23
195.96.135.0/24
Signature Algorithm: sha256WithRSAEncryption
43:45:72:26:a6:e6:bc:3c:6b:1e:ff:cf:d0:31:39:ee:83:b3:
76:f9:4b:07:01:31:7f:de:05:1b:9d:db:d6:f1:b1:d9:5e:c2:
72:14:05:14:c7:76:1d:69:6c:6e:e0:88:ed:63:c3:2b:7b:c5:
4b:35:38:11:59:3a:23:75:4b:05:1b:38:e8:9f:70:ff:5f:8b:
fe:a8:1e:ff:cc:63:8e:2c:da:c7:2c:54:c3:36:8a:4d:5d:a3:
4b:35:60:c2:0b:a8:dc:f7:95:a1:26:de:9b:88:49:dd:de:ca:
0e:f1:f3:97:a0:55:89:d0:17:91:f2:fe:ab:df:4b:e8:61:94:
fb:28:b6:81:29:0d:04:99:7d:ed:16:a9:60:47:bc:d1:81:2a:
61:27:7d:39:27:45:b3:ae:d8:e4:22:6f:aa:7c:5f:f9:d8:04:
f6:ce:f0:5c:9a:75:b6:b5:a8:63:aa:6e:db:48:c3:d0:e3:f1:
fb:81:31:7d:e2:d6:29:3b:ae:c2:9f:d0:59:c2:2c:31:dc:f5:
0e:bc:22:11:2b:38:3f:d6:36:a3:14:23:bb:13:db:81:a0:49:
a3:a6:eb:3a:d8:a0:5b:2e:e3:8d:91:d8:fe:df:b7:b3:16:98:
15:fe:7d:48:c7:05:6a:3b:c2:9c:8b:93:45:4c:6a:08:57:5a:
b6:b6:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:10 2026 by rpki-client