Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/HOSYfejR0x8lG5i09pW5Yg6DVoc.roa
File: HOSYfejR0x8lG5i09pW5Yg6DVoc.roa (raw, json)
Hash identifier: znBdthxkSZxdG7e3CKAjtPuT4Q9QNEHKi3IOf39HX3Q=
Subject key identifier: 1C:E4:98:7D:E8:D1:D3:1F:25:1B:98:B4:F6:95:B9:62:0E:83:56:87
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01A061418A873EA8E4FC09995BE09E923969
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/HOSYfejR0x8lG5i09pW5Yg6DVoc.roa
Signing time: Wed 02 Sep 2026 08:34:40 +0000
ROA not before: Wed 02 Sep 2026 08:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 195.95.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:41:8a:87:3e:a8:e4:fc:09:99:5b:e0:9e:92:39:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Sep 2 08:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ce4987de8d1d31f251b98b4f695b9620e835687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:33:b9:ce:5c:96:71:b8:01:5e:7c:b2:b4:
e4:55:60:74:06:75:94:ed:f9:84:a7:05:96:0b:67:
53:3e:c9:5a:f7:79:77:bd:3f:92:cd:57:36:3e:30:
31:42:81:63:f8:68:12:48:74:e4:0b:17:18:f0:25:
43:4a:59:65:db:06:f4:34:b2:61:93:28:f1:87:70:
11:1d:e5:5a:49:ca:b0:a6:b2:56:45:a1:89:d3:6b:
2f:2a:a8:4f:0d:09:55:c5:48:5b:ea:20:3d:63:1f:
71:28:cb:3e:09:6d:af:9b:f9:83:96:b4:aa:00:c6:
aa:ef:32:43:83:c6:77:c6:6f:d0:6f:0e:96:df:99:
8e:59:55:53:17:7a:6b:52:24:ff:97:be:d9:a9:ba:
1b:a7:47:6a:ba:ee:9c:a8:60:3d:be:87:33:97:1a:
b8:60:3f:c8:34:58:cd:56:71:5e:87:2a:3e:78:b8:
56:f4:af:75:73:02:70:9f:58:1d:27:ce:ff:fd:4d:
9c:0f:7c:8a:7c:96:0c:9b:f6:75:20:1b:b9:2b:b5:
12:fe:14:cf:c6:13:ff:a2:fa:4e:10:4c:ab:86:0a:
df:c6:be:b9:c2:74:bb:10:6d:dc:a6:b8:a5:3f:9a:
3d:1e:e4:ed:03:0e:4d:fb:78:d1:2b:ce:6f:b4:9d:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E4:98:7D:E8:D1:D3:1F:25:1B:98:B4:F6:95:B9:62:0E:83:56:87
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/HOSYfejR0x8lG5i09pW5Yg6DVoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.204.0/24
Signature Algorithm: sha256WithRSAEncryption
be:44:69:d6:19:51:92:7e:4f:c3:7c:dc:8c:9e:d7:e3:73:04:
52:c0:d9:ba:21:ed:64:50:e6:e5:30:86:bc:2a:4b:85:8e:ca:
4d:f6:1f:6f:37:db:09:e9:f8:32:1b:96:a8:d9:65:da:b2:36:
77:4d:e9:00:73:3d:45:c0:9b:05:47:81:94:d5:4a:42:2c:3a:
ff:4d:f0:a6:db:a9:a8:51:55:70:a0:8a:dc:9f:43:08:d3:da:
01:a1:4d:58:bb:cb:8a:68:df:b2:62:5f:e0:90:ae:1a:26:2c:
71:88:26:dd:3a:f4:be:17:7f:b5:14:3b:a3:46:0e:9a:93:40:
3b:94:f0:6a:53:ca:82:25:97:20:d3:0d:97:27:a6:21:38:65:
c3:23:ed:a6:d5:9a:04:d8:3f:b0:65:e3:25:06:4a:67:5f:bc:
c2:83:a5:83:21:8b:b9:b6:79:a8:da:71:19:c8:3b:91:d5:6b:
49:de:b4:2b:10:9f:1b:2d:21:b3:4f:05:ad:2a:d4:88:c5:f4:
10:26:13:47:25:87:b5:11:d3:47:42:d4:b2:ce:2d:7c:63:e1:
29:3e:f5:8d:02:05:cf:10:f3:5a:b9:cc:e5:2a:eb:20:23:c5:
2a:7a:e6:2e:ca:07:24:cf:f0:f3:63:e2:a8:e6:82:8e:65:99:
e0:0d:c0:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBhQYqHPqjk/AmZW+CekjlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk
NmNlNTEwHhcNMjYwOTAyMDgzNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2U0OTg3ZGU4ZDFkMzFmMjUxYjk4YjRmNjk1Yjk2MjBlODM1Njg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbEzuc5clnG4AV58srTkVWB0BnWU
7fmEpwWWC2dTPsla93l3vT+SzVc2PjAxQoFj+GgSSHTkCxcY8CVDSlll2wb0NLJh
kyjxh3ARHeVaScqwprJWRaGJ02svKqhPDQlVxUhb6iA9Yx9xKMs+CW2vm/mDlrSq
AMaq7zJDg8Z3xm/Qbw6W35mOWVVTF3prUiT/l77Zqbobp0dquu6cqGA9voczlxq4
YD/INFjNVnFehyo+eLhW9K91cwJwn1gdJ87//U2cD3yKfJYMm/Z1IBu5K7US/hTP
xhP/ovpOEEyrhgrfxr65wnS7EG3cprilP5o9HuTtAw5N+3jRK85vtJ2+oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzkmH3o0dMfJRuYtPaVuWIOg1aHMB8GA1UdIwQY
MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt
ZGY2NGYwZTgyMzYwLzEvSE9TWWZlalIweDhsRzVpMDlwVzVZZzZEVm9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw
LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/MMA0G
CSqGSIb3DQEBCwUAA4IBAQC+RGnWGVGSfk/DfNyMntfjcwRSwNm6Ie1kUOblMIa8
KkuFjspN9h9vN9sJ6fgyG5ao2WXasjZ3TekAcz1FwJsFR4GU1UpCLDr/TfCm26mo
UVVwoIrcn0MI09oBoU1Yu8uKaN+yYl/gkK4aJixxiCbdOvS+F3+1FDujRg6ak0A7
lPBqU8qCJZcg0w2XJ6YhOGXDI+2m1ZoE2D+wZeMlBkpnX7zCg6WDIYu5tnmo2nEZ
yDuR1WtJ3rQrEJ8bLSGzTwWtKtSIxfQQJhNHJYe1EdNHQtSyzi18Y+EpPvWNAgXP
EPNauczlKusgI8UqeuYuygckz/DzY+Ko5oKOZZngDcDc
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:07 2026 by rpki-client