Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/xTqndtOYNNxGOKliN2NcyMFkix8.roa
File: xTqndtOYNNxGOKliN2NcyMFkix8.roa (raw, json)
Hash identifier: 7wOPiKD57FwmTf2UKEcrkMSUmvstWjxFYMSq5+S7Psw=
Subject key identifier: C5:3A:A7:76:D3:98:34:DC:46:38:A9:62:37:63:5C:C8:C1:64:8B:1F
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019C9F9BB2F7EEF34CE7425D65471D6B69F8
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/xTqndtOYNNxGOKliN2NcyMFkix8.roa
Signing time: Fri 27 Feb 2026 14:58:27 +0000
ROA not before: Fri 27 Feb 2026 14:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198605
IP address blocks: 95.142.112.0/24 maxlen: 24
95.142.115.0/24 maxlen: 24
95.142.116.0/24 maxlen: 24
95.142.118.0/24 maxlen: 24
95.142.121.0/24 maxlen: 24
95.142.124.0/24 maxlen: 24
95.142.127.0/24 maxlen: 24
159.242.227.0/24 maxlen: 24
159.242.234.0/24 maxlen: 24
159.242.239.0/24 maxlen: 24
185.54.230.0/24 maxlen: 24
194.99.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:9b:b2:f7:ee:f3:4c:e7:42:5d:65:47:1d:6b:69:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Feb 27 14:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c53aa776d39834dc4638a96237635cc8c1648b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:fd:bb:e0:6e:c8:1a:1c:2c:3b:2c:c6:ca:
04:8c:21:81:3c:c9:48:85:78:bd:7a:a6:8d:fb:81:
cc:4a:9c:ee:05:90:f0:ec:73:8c:f8:59:26:51:2c:
c8:9d:fd:4b:4f:fe:96:0b:cf:9c:24:34:40:ed:b6:
91:4a:36:4e:13:3d:5a:9a:e1:20:e2:0d:c6:a9:0d:
61:e4:63:e7:eb:c6:68:d7:17:13:41:cc:d4:8c:b1:
11:13:bd:89:1e:14:b8:0d:7f:c9:f6:d6:cc:c5:9d:
ac:63:5b:81:e8:10:0e:db:88:29:cc:e1:0e:f2:f1:
bd:b3:46:5e:98:48:23:4c:a1:ff:1a:fe:4c:86:18:
ea:d9:e8:04:18:49:92:11:ae:6d:0f:09:94:8e:3b:
d1:ab:d2:77:51:32:8d:16:76:38:93:b8:ef:6f:91:
8f:81:09:0f:c3:10:e3:3f:64:21:6e:fa:cd:90:6d:
df:80:50:0d:74:f1:78:2c:c8:9d:74:bd:79:8a:e6:
65:07:8d:7d:07:2c:c5:86:54:37:1b:b2:b7:54:19:
22:af:f8:bf:8b:08:69:36:e7:22:5e:90:2e:80:d4:
b3:aa:32:17:6d:51:31:ab:c3:40:36:57:63:45:5e:
c4:f9:d9:88:e7:4d:b6:44:21:30:03:8a:22:a4:2b:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3A:A7:76:D3:98:34:DC:46:38:A9:62:37:63:5C:C8:C1:64:8B:1F
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/xTqndtOYNNxGOKliN2NcyMFkix8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.112.0/24
95.142.115.0-95.142.116.255
95.142.118.0/24
95.142.121.0/24
95.142.124.0/24
95.142.127.0/24
159.242.227.0/24
159.242.234.0/24
159.242.239.0/24
185.54.230.0/24
194.99.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:ab:32:46:c5:ec:f7:73:7d:c9:c0:fe:9d:0f:cf:f0:74:9e:
10:84:25:c5:9f:05:b4:6d:b6:bc:1f:3b:12:e7:a9:c1:91:98:
b2:f5:b6:4f:f6:65:b4:e2:12:3b:e2:00:6d:93:bd:94:c1:0a:
a2:88:11:3b:dd:20:96:cd:96:1e:d9:b0:ea:3d:f8:02:d3:83:
3b:72:4c:2d:29:6c:b1:bb:4e:9a:8e:38:d2:17:93:a7:4b:a8:
19:6c:eb:8e:44:b0:d3:41:91:f3:4a:d9:df:7e:b2:3b:0c:da:
9c:31:a5:5b:58:ef:3b:37:0a:22:c8:f5:ec:c2:c0:7e:56:eb:
47:c1:16:de:b6:32:d4:96:ad:f7:fd:00:d3:2e:5c:a8:eb:00:
7e:29:b4:7a:66:28:32:ca:7a:6e:15:b0:be:d7:6d:43:6d:f2:
1f:d6:37:a2:b6:39:e1:aa:07:cc:dd:02:c0:58:c5:3e:fe:85:
77:58:33:2b:56:29:fc:ba:09:4e:fb:84:db:25:32:19:17:99:
7b:74:9b:ae:5e:41:7b:76:87:f2:7b:11:58:04:c5:ba:95:e9:
05:a1:0b:a4:95:8e:a4:9d:82:aa:43:41:3c:f3:ce:e8:60:f7:
eb:78:46:31:2a:0c:b6:29:fa:43:2e:cd:b4:b2:37:b3:9a:db:
aa:fa:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:04 2026 by rpki-client