Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/95NE-7mtqEWW-M5sF3vciFd_-fA.roa
File: 95NE-7mtqEWW-M5sF3vciFd_-fA.roa (raw, json)
Hash identifier: wFJ9AHngub9JavjwLHqJxsBZi+ZdeHZvuLnF0PBHCH8=
Subject key identifier: F7:93:44:FB:B9:AD:A8:45:96:F8:CE:6C:17:7B:DC:88:57:7F:F9:F0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0A12282151168FC279DC5DBB1DF278467
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/95NE-7mtqEWW-M5sF3vciFd_-fA.roa
Signing time: Mon 14 Sep 2026 18:16:28 +0000
ROA not before: Mon 14 Sep 2026 18:16:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36007
IP address blocks: 89.144.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:22:82:15:11:68:fc:27:9d:c5:db:b1:df:27:84:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 14 18:16:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f79344fbb9ada84596f8ce6c177bdc88577ff9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:63:3b:20:70:0e:6b:8b:71:19:6b:e8:ba:
e6:28:aa:b2:94:04:47:23:59:e7:27:de:c7:31:88:
65:1a:f8:0e:99:d2:0f:3c:0e:f6:da:89:f2:c6:5d:
9b:43:ec:16:54:e5:66:47:b9:a5:73:ef:75:c7:11:
58:bc:4a:2b:d6:a1:55:c2:82:88:92:d1:f2:8e:91:
3f:d9:5f:c5:f8:5e:d5:7e:e2:02:93:3d:a6:4b:60:
8c:e4:48:32:d9:24:53:dc:85:a1:48:7d:88:a1:a2:
ec:fa:e0:26:02:a7:78:a4:69:dc:80:78:58:f1:d8:
1b:47:a6:27:3e:cc:8e:d4:aa:4d:8e:b9:97:36:12:
d9:ad:a2:a9:ef:4a:d3:59:d7:96:b3:bc:72:e2:19:
3a:56:72:20:47:7c:2c:e2:33:3b:24:5d:09:27:bd:
43:b2:a4:a0:13:1d:19:a1:d3:61:7f:21:b0:45:e9:
79:ef:0c:c2:26:ee:e1:a2:20:f6:0f:25:83:cf:45:
31:4a:b1:0f:3d:a2:92:52:82:c0:d5:72:98:90:be:
24:89:49:15:8f:75:12:ab:58:a3:5a:d4:31:45:f7:
de:15:ee:4b:f8:a2:b8:a7:11:2d:fa:a9:b8:fb:5d:
c2:cb:04:87:72:69:d6:0d:5f:e9:ed:07:ef:99:06:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:44:FB:B9:AD:A8:45:96:F8:CE:6C:17:7B:DC:88:57:7F:F9:F0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/95NE-7mtqEWW-M5sF3vciFd_-fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9f:1f:b3:21:78:e2:b1:4f:66:a0:7d:cb:96:6c:49:5e:19:
7e:79:3a:89:d1:fa:45:bb:7d:be:70:62:d5:02:7f:fc:8a:f0:
00:39:a2:54:5a:6a:11:3f:30:fc:cc:07:f0:92:1d:66:14:31:
e9:f2:4a:9f:d3:4d:85:07:5b:0e:02:7f:6b:47:c1:87:1a:ce:
46:76:c8:4a:46:eb:db:18:10:32:84:e0:9d:d5:3b:40:8a:81:
8c:2c:4a:b4:92:ff:b8:a3:f4:85:a5:c9:fc:52:08:f7:67:f0:
12:14:f8:7b:f5:e8:40:38:51:ce:50:18:ca:5e:3b:06:29:1e:
e6:df:53:1f:cf:6f:0b:1f:24:a4:d7:2e:ae:26:39:5b:cf:7c:
3b:a1:7e:0e:31:a1:28:0f:73:33:0a:9d:a7:58:ad:92:3e:9e:
e0:8d:68:24:59:42:18:0c:a8:1e:c1:77:f3:b1:02:5e:24:de:
5c:de:af:c3:8d:99:77:6e:2e:e6:2a:76:dd:b4:dc:e0:3f:7c:
7d:e0:3f:ca:5e:7e:40:83:92:8b:ff:9c:aa:c1:fa:e7:0a:f7:
8c:eb:4c:ba:24:a0:25:5e:72:48:ad:96:d0:ea:2f:c1:3c:77:
67:2c:c4:ab:91:3b:df:f1:b8:0c:7c:4b:e2:65:24:46:42:52:
25:49:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:24 2026 by rpki-client