Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/t8SQMGrl26r1gRo4N2MntzBn8Fo.roa
File: t8SQMGrl26r1gRo4N2MntzBn8Fo.roa (raw, json)
Hash identifier: KLhgVuuIFKpUzDmtTgaR/z7BuurCfK28TIL8+NxxxH8=
Subject key identifier: B7:C4:90:30:6A:E5:DB:AA:F5:81:1A:38:37:63:27:B7:30:67:F0:5A
Certificate issuer: /CN=95699316424960711c2e8ecb536bdd02bc724fad
Certificate serial: 019B797E59081D6F980060D3BAC65F6F4010
Authority key identifier: 95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/t8SQMGrl26r1gRo4N2MntzBn8Fo.roa
Signing time: Thu 01 Jan 2026 12:18:01 +0000
ROA not before: Thu 01 Jan 2026 12:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215094
IP address blocks: 95.141.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:59:08:1d:6f:98:00:60:d3:ba:c6:5f:6f:40:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95699316424960711c2e8ecb536bdd02bc724fad
Validity
Not Before: Jan 1 12:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7c490306ae5dbaaf5811a38376327b73067f05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:53:67:2e:48:71:08:c6:f2:c7:f6:13:c3:c7:
ca:8d:df:e5:0c:d4:e8:33:52:6d:85:d1:bf:1a:3e:
6a:49:67:18:0f:a9:b3:e5:fb:32:79:da:84:e7:91:
a0:20:4f:06:f5:7e:61:1c:fa:ee:75:6e:46:21:11:
25:33:e4:f6:68:8b:d6:d4:42:17:55:30:0a:91:9e:
02:02:2c:2e:1a:a1:64:57:e7:d4:59:6e:d0:a8:75:
2b:c7:4e:0d:e4:9b:dd:1d:77:d4:5d:09:2a:ac:66:
68:e2:b2:cf:8f:36:a5:7b:fd:67:3d:62:f1:0d:e7:
16:df:16:b0:59:ca:ae:3c:dd:03:11:d6:e1:15:3b:
db:e5:c1:ba:e0:93:c4:22:da:0a:ec:f4:4e:fa:7e:
d3:49:b2:a2:ff:7f:8d:9d:9b:1e:c0:80:f1:1c:81:
24:47:f1:dd:89:be:02:d1:76:21:06:48:01:69:a5:
6c:d6:6d:32:0f:35:b9:a9:e4:ed:72:83:10:05:df:
41:01:b6:15:b4:06:c1:77:6c:6b:c7:a9:56:f6:1e:
eb:e6:0d:e8:b8:09:ca:7b:3b:46:48:66:12:9a:ce:
ab:98:e5:2e:49:11:3a:e3:74:c1:55:7b:1e:22:34:
c4:ed:8b:b4:d1:1d:c5:ca:3e:9e:7f:11:c1:01:bb:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C4:90:30:6A:E5:DB:AA:F5:81:1A:38:37:63:27:B7:30:67:F0:5A
X509v3 Authority Key Identifier:
keyid:95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/t8SQMGrl26r1gRo4N2MntzBn8Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a2:ca:09:08:01:c2:bf:86:51:bb:f1:70:4e:d0:84:a3:ad:
68:de:7f:56:7f:f4:73:13:0f:21:48:62:31:af:ec:84:76:99:
33:8a:06:de:72:10:11:c7:7f:c2:4b:44:b5:4e:98:8e:67:c9:
79:db:ce:45:fb:5f:47:92:cf:7b:bd:1c:0e:2b:86:90:b3:e3:
ec:4d:39:81:df:c9:21:9c:f5:ea:1b:5e:9f:62:ce:28:35:7a:
d3:c9:16:a2:11:98:39:c9:cb:16:ae:67:59:da:f1:28:9e:8d:
a4:29:d7:38:25:dd:af:ad:5c:7e:10:9b:34:c2:10:de:ab:3a:
ee:33:31:d7:6c:37:49:bb:5e:0a:98:90:cb:ec:61:ff:4e:f4:
ff:54:5a:4a:2c:dc:fd:57:98:53:5f:de:2d:ba:a6:03:49:91:
49:5d:9e:c9:2f:10:f8:71:3b:47:4a:8b:58:15:bc:4c:9c:13:
57:f6:a6:86:58:0d:46:7d:9e:b5:d9:19:10:cd:a7:ae:76:5e:
a7:92:b9:14:d3:c7:98:1d:e5:b2:52:90:e5:ef:5e:0c:c6:ad:
2f:3d:03:65:88:83:d9:09:b7:88:a5:ee:3c:ad:74:54:09:ba:
10:3c:5a:f3:a1:d7:d9:7e:d6:c7:ba:9a:ea:5d:5b:6b:8c:6b:
cd:48:24:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:23:10 2026 by rpki-client