Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/niGcWz0ThxJygz-PLbVysx_sLZE.roa
File: niGcWz0ThxJygz-PLbVysx_sLZE.roa (raw, json)
Hash identifier: g18PU3cPKMc6/2ma47ogKuHWzJTyComhxOWTfFk6wlA=
Subject key identifier: 9E:21:9C:5B:3D:13:87:12:72:83:3F:8F:2D:B5:72:B3:1F:EC:2D:91
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A04C03CCC77C4BD47970D3A4AA7DDCD429
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/niGcWz0ThxJygz-PLbVysx_sLZE.roa
Signing time: Sat 29 Aug 2026 05:35:12 +0000
ROA not before: Sat 29 Aug 2026 05:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 95.173.40.0/24 maxlen: 24
95.173.42.0/24 maxlen: 24
95.173.44.0/24 maxlen: 24
95.173.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:03:cc:c7:7c:4b:d4:79:70:d3:a4:aa:7d:dc:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 29 05:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e219c5b3d13871272833f8f2db572b31fec2d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:45:dd:f5:dc:dd:91:ec:b3:46:6f:fc:f9:
eb:5d:1c:f7:27:ae:8d:1a:06:a4:14:98:fc:35:65:
8c:b8:f7:bd:d2:68:ad:c1:f8:70:47:ba:00:81:89:
bf:f4:d5:89:1a:16:b6:15:36:01:75:14:94:95:a6:
77:f4:05:73:cf:4a:85:88:c1:98:2f:41:1c:93:4f:
6d:19:09:8b:3b:51:67:6d:c8:36:42:97:8c:77:63:
3f:67:e7:cd:96:87:9e:73:69:2f:a3:d6:b5:9a:9a:
9f:4f:46:6d:53:6d:b9:fb:a4:0c:4d:48:ce:93:ee:
35:7a:78:b5:7b:cb:01:bd:d2:5e:61:62:4d:0a:8f:
d5:af:bd:61:78:d0:3f:6a:f8:2b:9c:04:fc:fa:68:
74:bb:eb:a3:90:00:43:89:5d:9e:97:65:94:28:3c:
ee:8a:73:0f:bc:9f:ec:8b:ef:e7:29:72:de:64:da:
e1:3b:48:ac:2f:53:ca:8f:9e:73:d9:c6:eb:6b:97:
08:99:95:19:09:6b:b2:b5:b4:eb:0a:50:29:3c:2a:
7a:77:9a:52:38:6d:3d:79:b4:ce:b3:f7:6e:92:69:
0d:f2:a2:9c:38:27:29:63:59:10:52:42:11:e7:e7:
57:b2:59:b2:d4:e0:f5:81:2c:70:09:19:c2:7f:aa:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:21:9C:5B:3D:13:87:12:72:83:3F:8F:2D:B5:72:B3:1F:EC:2D:91
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/niGcWz0ThxJygz-PLbVysx_sLZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.40.0/24
95.173.42.0/24
95.173.44.0/23
Signature Algorithm: sha256WithRSAEncryption
95:ea:c2:50:8a:ae:c8:a6:80:3b:cd:d3:0a:22:4c:a2:72:10:
3b:8a:7b:9b:5c:19:b1:39:b2:59:1e:6d:ba:ae:52:86:c4:71:
04:37:9f:56:11:f2:12:db:59:aa:6e:5e:5f:55:70:27:22:8e:
4c:7c:6f:89:11:b4:51:db:2f:d1:1d:e8:2c:0b:00:05:1b:29:
46:1e:75:a1:6b:32:b3:7d:92:34:80:9f:df:6b:e4:57:af:f3:
50:cb:bc:d5:7d:f2:53:cb:42:2b:48:63:03:e1:ea:c4:44:64:
bc:f8:e8:0b:41:79:b5:a0:54:26:cb:fb:93:4f:69:8f:a8:dc:
fa:90:aa:ba:4c:e9:2b:39:86:3e:eb:4c:07:83:87:55:af:57:
91:68:3d:20:dc:d6:29:d6:5a:33:a2:c1:79:de:83:8f:72:65:
e9:a4:41:dd:9a:91:2d:49:93:a3:63:dd:9b:94:00:95:87:a1:
2c:78:a5:c1:c0:33:7e:92:36:4a:7a:da:c9:24:7e:a1:e2:24:
22:44:79:fe:fd:1b:91:2b:01:53:21:e6:a4:de:87:07:fd:01:
3d:9d:4e:d8:cb:96:2f:0f:1a:06:8f:38:47:93:af:9f:bb:a8:
c0:3f:a6:8d:ae:fa:8b:59:61:60:4c:c4:c0:82:1a:e2:57:f7:
10:09:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:22:00 2026 by rpki-client