Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/5KLfHwA9gtPS399yPjor3mqDiAo.roa
File: 5KLfHwA9gtPS399yPjor3mqDiAo.roa (raw, json)
Hash identifier: w+O1FsGEFOCgkoRAwRqV0tExWzm4TVFGRPZDSnhV7ro=
Subject key identifier: E4:A2:DF:1F:00:3D:82:D3:D2:DF:DF:72:3E:3A:2B:DE:6A:83:88:0A
Certificate issuer: /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial: 019FEB62F357402DC24C0679822F320C6B5C
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/5KLfHwA9gtPS399yPjor3mqDiAo.roa
Signing time: Mon 10 Aug 2026 11:15:58 +0000
ROA not before: Mon 10 Aug 2026 11:15:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34876
IP address blocks: 95.86.128.0/24 maxlen: 24
95.86.129.0/24 maxlen: 24
95.86.130.0/24 maxlen: 24
95.86.131.0/24 maxlen: 24
95.86.132.0/24 maxlen: 24
95.86.133.0/24 maxlen: 24
95.86.134.0/24 maxlen: 24
95.86.135.0/24 maxlen: 24
95.86.137.0/24 maxlen: 24
95.86.138.0/24 maxlen: 24
95.86.139.0/24 maxlen: 24
95.86.140.0/24 maxlen: 24
95.86.141.0/24 maxlen: 24
95.86.142.0/24 maxlen: 24
95.86.143.0/24 maxlen: 24
95.86.144.0/21 maxlen: 21
95.86.152.0/24 maxlen: 24
95.86.153.0/24 maxlen: 24
95.86.154.0/24 maxlen: 24
95.86.155.0/24 maxlen: 24
95.86.156.0/24 maxlen: 24
95.86.157.0/24 maxlen: 24
95.86.158.0/24 maxlen: 24
95.86.159.0/24 maxlen: 24
95.86.160.0/24 maxlen: 24
95.86.161.0/24 maxlen: 24
193.8.62.0/23 maxlen: 23
193.8.62.0/24 maxlen: 24
193.8.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:62:f3:57:40:2d:c2:4c:06:79:82:2f:32:0c:6b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
Validity
Not Before: Aug 10 11:15:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4a2df1f003d82d3d2dfdf723e3a2bde6a83880a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:bb:9b:f7:b6:fa:e8:b1:1b:2f:a8:17:92:
89:44:5d:8a:2b:a0:31:db:04:50:60:86:bd:f2:c5:
19:14:86:21:40:51:a9:a9:1e:13:60:6b:8d:df:c6:
a4:76:fa:c7:78:1f:15:98:5f:f5:0e:2b:d5:47:8a:
86:83:87:29:01:fd:cb:94:5f:f5:0c:9a:21:a7:1a:
15:46:29:2c:af:83:23:eb:96:4c:65:24:12:c4:eb:
5b:01:5b:46:29:a3:bf:f2:5a:d7:67:4d:f2:43:d5:
e5:4d:90:b1:f2:0e:1a:3b:88:94:78:e4:e4:c5:5c:
2c:1c:2b:b3:24:8e:eb:f9:e2:2c:42:2c:7c:5e:dd:
81:16:ff:3f:ec:f7:25:74:9d:fb:87:67:c8:e4:af:
6b:9a:fb:00:5b:46:fe:fd:e8:75:a2:ea:96:a8:1a:
2d:09:f1:1e:c6:eb:dd:88:e3:e9:0b:04:99:1c:ea:
38:af:af:a9:d0:ea:3b:ed:86:7c:e6:60:81:28:ca:
57:aa:da:e6:1f:50:fb:ab:60:46:dc:ca:d3:6a:88:
1b:13:b0:dc:79:4f:37:26:84:77:04:e1:88:f1:ce:
4c:14:5c:85:b6:51:07:d3:bd:d1:3e:b3:57:ab:05:
56:13:3c:4f:78:a2:8b:58:b9:0a:6d:59:e6:54:56:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A2:DF:1F:00:3D:82:D3:D2:DF:DF:72:3E:3A:2B:DE:6A:83:88:0A
X509v3 Authority Key Identifier:
keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/5KLfHwA9gtPS399yPjor3mqDiAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.128.0/21
95.86.137.0-95.86.161.255
193.8.62.0/23
Signature Algorithm: sha256WithRSAEncryption
79:8a:30:99:6b:98:cc:1b:84:98:51:c0:40:bd:a0:62:f6:79:
e5:16:13:f3:36:3c:f7:69:e3:76:84:c6:0e:1c:46:04:3f:ba:
b2:87:04:9d:4a:59:9b:d2:9e:ec:3a:29:fb:b5:87:40:d3:0e:
94:84:8c:e0:30:e1:d4:c2:57:32:48:17:d5:fe:47:79:bf:53:
de:84:0a:af:86:69:be:1b:c9:46:2a:a1:01:3c:20:a0:fa:36:
be:bd:db:68:b2:51:2b:7a:53:08:f5:29:78:87:fc:d6:74:79:
7f:ec:b6:3f:6d:41:7a:99:14:3c:82:0e:00:ef:f2:a0:37:d6:
73:08:d8:d2:cb:b9:ed:63:bc:07:bc:dd:18:ab:ba:56:82:08:
88:31:77:df:b3:9a:2c:0a:ee:1b:d1:48:f9:a3:15:d8:e0:6e:
b4:50:83:80:12:e9:f2:e3:79:ee:68:d5:48:13:9f:42:c3:d4:
4a:c7:e1:c2:d3:05:1d:65:bd:46:cc:88:60:fd:88:b1:91:64:
ee:81:c6:f0:07:8d:0d:52:66:ec:84:9f:17:d2:6c:4e:d7:67:
2c:57:cf:b4:7b:c5:7b:95:df:0b:c0:e3:ef:11:45:a3:e2:49:
36:1d:62:93:13:16:5f:a2:7b:22:90:14:09:5e:0b:6d:85:cf:
dd:11:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:47:09 2026 by rpki-client