Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/eViUm1Gf3TdOuP55AzoO_xDskII.roa
File: eViUm1Gf3TdOuP55AzoO_xDskII.roa (raw, json)
Hash identifier: xHKcKUYZsn/x6E58RZ2DzEoVQ9VF+es2q7cEjBDdRy8=
Subject key identifier: 79:58:94:9B:51:9F:DD:37:4E:B8:FE:79:03:3A:0E:FF:10:EC:90:82
Certificate issuer: /CN=d2fab64b0168e072bfaa3b24b97040fbfc1b7aaa
Certificate serial: 019FB7A07A5774A6E5C7C65D0CBFE2049E32
Authority key identifier: D2:FA:B6:4B:01:68:E0:72:BF:AA:3B:24:B9:70:40:FB:FC:1B:7A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vq2SwFo4HK_qjskuXBA-_wbeqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/eViUm1Gf3TdOuP55AzoO_xDskII.roa
Signing time: Fri 31 Jul 2026 10:02:55 +0000
ROA not before: Fri 31 Jul 2026 10:02:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199597
IP address blocks: 95.130.112.0/22 maxlen: 22
95.130.116.0/24 maxlen: 24
95.130.117.0/24 maxlen: 24
95.130.118.0/24 maxlen: 24
95.130.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vq2SwFo4HK_qjskuXBA-_wbeqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:a0:7a:57:74:a6:e5:c7:c6:5d:0c:bf:e2:04:9e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fab64b0168e072bfaa3b24b97040fbfc1b7aaa
Validity
Not Before: Jul 31 10:02:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7958949b519fdd374eb8fe79033a0eff10ec9082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:9e:6a:e2:a5:a7:43:44:81:4f:b3:7d:cf:
a4:95:58:51:65:f3:6a:59:18:95:45:c2:99:d4:27:
08:d4:58:a9:89:ba:9a:ee:f4:1f:e4:c2:fc:b8:d3:
9c:43:98:b7:54:4a:6e:1c:55:45:5d:c9:43:65:6b:
d7:a7:fd:c2:5f:80:56:e4:12:b2:32:c4:85:0f:07:
8e:45:3b:b5:e6:6e:bc:9c:c1:0b:51:1d:6e:5b:36:
20:91:79:7a:37:8f:b8:4c:14:73:1c:64:3b:c3:93:
ef:a3:6b:6b:b0:2c:ee:8b:24:d6:49:cf:2f:59:55:
80:67:d9:a6:7d:79:e8:da:78:99:19:4a:80:8b:43:
cb:4b:b9:5e:02:0c:7e:4e:17:93:c1:e6:9a:fc:64:
61:fe:d3:91:9d:f8:b2:48:6e:33:d5:a1:37:58:27:
ec:04:a1:07:40:d4:2d:e3:4d:68:9a:ed:61:93:45:
d2:1d:da:6c:72:0a:54:c9:b1:db:c2:56:dc:f0:89:
e4:1a:4d:5c:59:8d:d6:d2:7a:5e:a5:a7:ea:84:a7:
01:d0:e9:f1:1d:b0:05:df:70:84:b1:d8:ec:f3:76:
7a:ec:34:d3:17:d7:4d:61:7f:5a:34:bc:46:b2:c3:
84:1d:b3:2d:c0:dd:21:26:03:32:3f:75:5f:26:ea:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:94:9B:51:9F:DD:37:4E:B8:FE:79:03:3A:0E:FF:10:EC:90:82
X509v3 Authority Key Identifier:
keyid:D2:FA:B6:4B:01:68:E0:72:BF:AA:3B:24:B9:70:40:FB:FC:1B:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vq2SwFo4HK_qjskuXBA-_wbeqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/eViUm1Gf3TdOuP55AzoO_xDskII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.112.0/21
Signature Algorithm: sha256WithRSAEncryption
63:99:02:ca:4d:27:d2:6e:32:8a:4e:b3:88:e6:d5:1a:8a:b6:
eb:99:96:ef:b8:89:dc:a4:12:20:1a:71:ef:90:e2:46:d3:e3:
5e:34:73:64:17:3e:a6:a5:c2:0c:21:4c:15:29:c0:e3:70:1d:
e7:d0:f9:0d:7d:0a:ac:a3:f5:82:7a:23:95:e9:90:7b:ea:5f:
35:b2:da:fb:50:f8:f4:0b:4f:8b:a8:86:23:0e:10:65:fb:ac:
63:69:a6:82:e9:eb:f5:ea:08:79:1b:55:c1:c8:f2:73:e9:7c:
1d:03:31:c7:1c:b2:78:7c:c2:23:21:07:7c:00:cf:b9:5c:36:
f6:c2:1c:28:81:d4:6c:82:16:17:64:b8:3f:ad:2a:d6:2b:88:
18:c2:94:5b:97:f7:c8:c3:b0:fd:ec:f5:23:9a:c7:57:e6:2c:
f5:9f:ba:e4:db:52:b4:c1:1a:30:2e:d3:98:d8:33:a1:0c:96:
7f:66:5c:fd:c1:e0:4a:dc:68:dd:07:53:4b:94:65:0f:10:1a:
81:30:28:30:a4:a4:69:ea:74:70:d2:15:08:dd:54:75:6c:20:
2f:67:d9:fb:5d:df:19:cf:57:96:d9:32:a0:e2:f0:76:47:77:
d9:eb:7c:da:dd:78:81:12:83:69:34:24:7b:0f:e2:fe:57:3e:
65:a7:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:45:33 2026 by rpki-client