
Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/eVy__iI-9ySOngwDzUBN71-Ayac.roa
File: eVy__iI-9ySOngwDzUBN71-Ayac.roa (raw, json)
Hash identifier: sQfgzmMEgtZkNZ5Un5eGJAS1xbUCrXGRvzgFWs23Plc=
Subject key identifier: 79:5C:BF:FE:22:3E:F7:24:8E:9E:0C:03:CD:40:4D:EF:5F:80:C9:A7
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 019FCECE0264193CB01F3C970F6ABCA07EC9
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/eVy__iI-9ySOngwDzUBN71-Ayac.roa
Signing time: Tue 04 Aug 2026 22:03:55 +0000
ROA not before: Tue 04 Aug 2026 22:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43019
IP address blocks: 95.214.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:ce:02:64:19:3c:b0:1f:3c:97:0f:6a:bc:a0:7e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Aug 4 22:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=795cbffe223ef7248e9e0c03cd404def5f80c9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:a7:e2:fd:fc:39:01:bc:c6:48:83:a1:24:
2a:1a:1c:63:fd:f0:ba:81:ff:21:40:ca:11:5d:a2:
ae:65:26:f7:ad:cf:cd:27:aa:19:ae:c8:9d:1a:9d:
07:f0:a0:53:f5:76:cb:e5:56:a1:27:fe:b8:f5:3b:
26:8c:c4:6b:cb:a1:11:62:cd:0e:c4:20:01:9c:16:
a2:bb:4c:bd:bf:78:bf:a1:ab:45:73:dd:11:f8:12:
b8:fc:93:ce:05:b5:04:3b:ec:a7:fe:7b:9b:8d:94:
d4:70:e3:f9:62:d8:27:bc:2b:88:fd:62:34:a6:6b:
bf:17:e6:98:53:f5:bd:e1:dd:42:fa:28:7b:99:4a:
6d:6d:ee:86:ef:57:30:58:ee:f2:1e:ae:60:59:6f:
8b:f9:c5:1c:03:77:09:3d:fc:86:88:1d:8c:1f:30:
82:98:af:93:d3:b6:49:77:e1:e1:18:e0:7d:94:be:
ac:78:2a:cb:ba:68:96:f2:91:f7:87:39:09:ce:8a:
d5:ba:58:2c:6f:73:e8:d7:c0:91:aa:89:e7:fb:59:
cf:e3:a7:b4:5f:0c:ef:de:d5:d6:16:5e:50:f6:9e:
6f:1c:51:13:9d:3a:63:ff:7e:2a:12:5b:48:03:2d:
df:63:d7:70:ec:ef:89:60:95:76:0e:70:b2:fd:42:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:BF:FE:22:3E:F7:24:8E:9E:0C:03:CD:40:4D:EF:5F:80:C9:A7
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/eVy__iI-9ySOngwDzUBN71-Ayac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.214.0/24
Signature Algorithm: sha256WithRSAEncryption
96:22:de:5f:f8:1f:7d:22:49:0a:ad:67:d8:bf:b6:ef:85:47:
68:f7:12:88:3f:07:50:57:bf:6a:e1:2d:36:f9:9c:f2:d2:16:
e3:29:c4:b7:34:5a:e2:92:17:52:30:1d:70:a8:98:5d:f4:14:
12:84:5e:82:2f:5c:a6:c4:69:3e:f1:e3:62:6d:47:5d:05:71:
03:59:ae:d0:58:8d:f8:d6:5c:41:9b:2c:90:68:fb:16:60:4b:
79:f3:6a:8c:a3:ac:be:4d:63:fc:92:a9:df:b0:66:5b:3e:13:
b6:7e:08:b6:a6:57:82:b6:fb:22:b1:56:5e:66:7e:0b:21:c3:
02:f6:12:31:c0:d8:cb:21:85:d9:5e:01:27:db:86:ed:90:6a:
d8:b9:bf:cb:1f:cd:ca:68:4e:df:78:20:29:65:27:94:ee:74:
6a:56:f2:9e:d4:78:d3:75:e7:aa:48:a9:59:cf:b1:90:28:d5:
28:42:33:b6:15:3a:71:28:4b:84:b8:8e:a5:4b:fa:4a:bc:ab:
73:99:ba:60:60:b2:5e:33:75:78:f2:a8:08:d7:67:2b:a4:11:
7c:71:d0:07:31:d6:46:95:c7:f7:3d:83:35:da:18:1a:c2:1f:
a4:8a:c2:70:c7:fa:47:5d:d1:2e:f6:e9:2b:01:12:fe:19:f0:
e5:6e:6c:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/OzgJkGTywHzyXD2q8oH7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy
ZGYzODQwHhcNMjYwODA0MjIwMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTVjYmZmZTIyM2VmNzI0OGU5ZTBjMDNjZDQwNGRlZjVmODBjOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9On4v38OQG8xkiDoSQqGhxj/fC6
gf8hQMoRXaKuZSb3rc/NJ6oZrsidGp0H8KBT9XbL5VahJ/649TsmjMRry6ERYs0O
xCABnBaiu0y9v3i/oatFc90R+BK4/JPOBbUEO+yn/nubjZTUcOP5YtgnvCuI/WI0
pmu/F+aYU/W94d1C+ih7mUptbe6G71cwWO7yHq5gWW+L+cUcA3cJPfyGiB2MHzCC
mK+T07ZJd+HhGOB9lL6seCrLumiW8pH3hzkJzorVulgsb3Po18CRqonn+1nP46e0
Xwzv3tXWFl5Q9p5vHFETnTpj/34qEltIAy3fY9dw7O+JYJV2DnCy/UJC+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlcv/4iPvckjp4MA81ATe9fgMmnMB8GA1UdIwQY
MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt
ODlmZjA2Zjc5NjM1LzEvZVZ5X19pSS05eVNPbmd3RHpVQk43MS1BeWFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1
LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9bWMA0G
CSqGSIb3DQEBCwUAA4IBAQCWIt5f+B99IkkKrWfYv7bvhUdo9xKIPwdQV79q4S02
+Zzy0hbjKcS3NFrikhdSMB1wqJhd9BQShF6CL1ymxGk+8eNibUddBXEDWa7QWI34
1lxBmyyQaPsWYEt582qMo6y+TWP8kqnfsGZbPhO2fgi2pleCtvsisVZeZn4LIcMC
9hIxwNjLIYXZXgEn24btkGrYub/LH83KaE7feCApZSeU7nRqVvKe1HjTdeeqSKlZ
z7GQKNUoQjO2FTpxKEuEuI6lS/pKvKtzmbpgYLJeM3V48qgI12crpBF8cdAHMdZG
lcf3PYM12hgawh+kisJwx/pHXdEu9ukrARL+GfDlbmxl
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:40 2026 by rpki-client