Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Jq3acz_hBhrHtZx5bb6Y6dh2vYM.roa
File: Jq3acz_hBhrHtZx5bb6Y6dh2vYM.roa (raw, json)
Hash identifier: a4MqmLbwl8dd+oqdpAg1lvxCeP8+zJpXyDmE3tuEBrQ=
Subject key identifier: 26:AD:DA:73:3F:E1:06:1A:C7:B5:9C:79:6D:BE:98:E9:D8:76:BD:83
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 01A0E4377350865272C85BB16275E39DDA2B
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Jq3acz_hBhrHtZx5bb6Y6dh2vYM.roa
Signing time: Sun 27 Sep 2026 18:53:54 +0000
ROA not before: Sun 27 Sep 2026 18:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.62.0/24 maxlen: 24
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.78.0/24 maxlen: 24
95.38.79.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:37:73:50:86:52:72:c8:5b:b1:62:75:e3:9d:da:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Sep 27 18:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26adda733fe1061ac7b59c796dbe98e9d876bd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:39:9c:b3:cf:3f:f8:cd:fe:8f:5c:60:dd:
96:20:bb:46:23:74:10:a9:8e:7e:61:eb:75:a6:e9:
31:4b:73:a7:4b:8c:15:fd:df:a5:a1:48:a8:1f:45:
12:3b:35:c4:c7:44:43:a0:c5:25:e1:a1:40:d1:58:
06:bb:14:cf:e0:08:7d:ba:9c:d7:b8:77:bc:c6:37:
44:b4:74:47:3a:28:c4:45:f6:22:64:22:75:82:56:
54:a7:b5:02:25:0b:60:a0:a0:74:7c:53:68:47:53:
fb:28:c2:f8:fa:88:90:40:4e:67:62:29:c9:fe:46:
61:62:5f:25:9f:dd:f5:95:81:f7:f8:55:13:ca:63:
a0:2a:8f:b6:07:86:90:e4:c5:82:7c:23:8c:0a:1b:
c2:2a:18:e2:dc:0c:0a:85:dc:2c:b5:8f:d1:37:51:
83:00:fe:da:1d:df:59:b8:91:1d:1a:ac:8d:0a:68:
2a:30:d5:40:18:7b:bb:3d:f5:00:a0:72:24:ee:44:
1f:33:d1:60:b4:21:14:67:81:cd:82:82:d8:6b:21:
07:7d:fc:db:82:03:54:16:9e:b8:a8:8b:68:68:22:
54:e5:64:c4:3c:33:90:d4:e1:a6:d1:53:9f:9b:47:
e3:ab:2b:c8:27:2d:32:f5:c0:8e:4a:8b:1f:b9:fb:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AD:DA:73:3F:E1:06:1A:C7:B5:9C:79:6D:BE:98:E9:D8:76:BD:83
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Jq3acz_hBhrHtZx5bb6Y6dh2vYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.53.255
95.38.56.0-95.38.111.255
95.38.120.0-95.38.143.255
95.38.160.0/20
95.38.192.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
58:e4:bf:4d:8a:a1:1d:1a:42:33:16:08:14:c7:29:e7:e8:09:
60:fb:81:90:66:cb:82:2d:57:c4:31:c3:98:ed:42:6d:a0:9c:
0f:89:4a:78:38:de:82:6d:1d:ab:6d:bf:f8:93:06:89:05:b6:
eb:86:b4:0b:21:f1:a7:1f:a2:c6:22:d5:e1:7c:17:5c:fc:78:
d4:a9:a5:c2:8a:3a:4b:d9:08:2a:4f:ea:49:0e:99:93:fd:c1:
70:0c:b9:de:60:6b:66:27:27:ce:b4:79:b2:9f:72:b5:e5:96:
fb:5d:f0:46:83:5d:02:30:f7:a1:52:c4:ef:35:8b:67:32:69:
bf:79:bc:c8:47:ec:e6:36:4f:9e:7d:42:0b:94:98:b1:42:17:
f6:7c:2d:e9:e8:9e:8e:a2:51:27:6a:9b:90:e3:72:4f:7b:68:
a7:ad:e0:39:96:b7:92:d8:2a:a3:0c:cf:d2:0d:d9:34:98:83:
f9:fc:10:cb:e4:63:2a:23:45:d6:7a:44:52:de:89:23:b3:81:
1e:0a:45:02:c4:b7:b4:3c:49:45:93:a0:34:fc:37:27:18:e4:
cd:09:1f:f4:ab:a3:e7:28:81:86:a0:42:36:7b:99:7c:dd:ba:
ec:63:57:d4:43:8f:1c:6d:14:b8:42:23:4d:eb:b2:77:88:a3:
26:45:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:27:41 2026 by rpki-client