Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Pt7PIIWOf0Ns_r9GZ5qHjXJMM_M.roa
File: Pt7PIIWOf0Ns_r9GZ5qHjXJMM_M.roa (raw, json)
Hash identifier: 1BJkjJJzRJsgJ9P5xD0C2TGUD819GX/LrEbI55Wb35Y=
Subject key identifier: 3E:DE:CF:20:85:8E:7F:43:6C:FE:BF:46:67:9A:87:8D:72:4C:33:F3
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019FA3F1B4FBDD0A069BF9B05DDD1BFDFFB0
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Pt7PIIWOf0Ns_r9GZ5qHjXJMM_M.roa
Signing time: Mon 27 Jul 2026 14:19:14 +0000
ROA not before: Mon 27 Jul 2026 14:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6204
IP address blocks: 95.133.244.0/24 maxlen: 24
95.133.246.0/24 maxlen: 24
103.246.249.0/24 maxlen: 24
205.237.108.0/24 maxlen: 24
2a12:3200:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:f1:b4:fb:dd:0a:06:9b:f9:b0:5d:dd:1b:fd:ff:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jul 27 14:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3edecf20858e7f436cfebf46679a878d724c33f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:ab:4a:bc:a1:07:2f:dd:fd:d2:cf:72:95:
12:4a:c6:72:9f:a7:81:28:b0:00:fc:fe:26:7c:bc:
ef:4b:c2:80:ac:07:0d:d2:40:d7:bf:d9:ba:93:7e:
d3:95:13:69:f6:62:ac:4e:fb:fc:b8:bc:55:cb:69:
25:af:79:26:d0:57:0b:c0:63:fd:b8:1a:0b:ea:60:
57:53:c0:2e:76:83:80:f4:59:fa:e0:ee:82:59:ba:
0e:7c:12:e7:62:44:72:06:d4:a9:f0:87:78:b5:22:
5a:5b:39:56:0c:6f:27:1f:6c:c2:81:6a:6e:b0:d8:
b0:4c:b8:2a:34:7d:0f:7b:7d:ed:89:bb:03:92:5a:
0a:4f:ae:6b:74:83:90:a1:b2:2b:57:be:b8:0c:3b:
c9:be:f8:9c:e7:45:ef:a8:f2:7b:c0:70:14:ca:ee:
a0:cc:be:8b:7f:e8:ec:f8:42:3e:66:63:b2:5e:3e:
1b:4b:b7:6e:b8:82:aa:ad:45:84:8d:d8:22:b1:f3:
ae:ab:86:3c:8a:2b:0d:c8:69:40:83:93:a8:a6:cd:
50:5f:73:e3:e9:7c:c0:bd:35:71:d9:30:3f:ff:24:
6f:d4:b3:11:ba:76:96:b1:47:d6:2d:5b:13:cf:65:
10:ac:7b:cd:f5:36:6b:4b:b0:12:25:81:d0:a8:05:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DE:CF:20:85:8E:7F:43:6C:FE:BF:46:67:9A:87:8D:72:4C:33:F3
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Pt7PIIWOf0Ns_r9GZ5qHjXJMM_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.133.244.0/24
95.133.246.0/24
103.246.249.0/24
205.237.108.0/24
IPv6:
2a12:3200:f000::/36
Signature Algorithm: sha256WithRSAEncryption
54:e4:6d:34:46:cd:ea:d7:0a:b0:9b:56:63:4a:29:dd:cb:e4:
e4:66:00:0a:e7:60:28:59:02:f4:4a:de:95:d5:57:87:dc:96:
d9:de:77:15:ba:01:f9:fd:23:a7:5a:63:76:06:f9:ac:85:db:
fa:c3:d3:99:08:fb:79:30:16:54:80:2b:61:b0:68:1e:1f:28:
2f:30:a6:bd:74:9c:ec:bd:67:16:05:1b:98:af:a7:54:ab:f7:
df:a6:7d:2c:c7:25:23:4e:04:c3:e0:5f:ec:3b:a1:b4:f9:94:
31:10:01:e2:01:38:43:a1:91:d7:dd:7c:0d:38:52:1d:76:ef:
b6:fe:03:b5:ba:fa:b0:73:fc:5e:5f:84:e2:24:62:8b:dc:76:
f6:94:60:7b:76:8d:2a:cd:cf:1e:88:12:25:89:cf:7e:94:8a:
5d:86:9a:92:bf:73:9c:66:5b:01:52:2d:09:d4:44:bf:4f:f1:
b0:08:f2:7f:0c:ee:45:77:33:83:33:20:76:d8:18:e4:ff:1f:
84:e6:56:80:3d:f1:48:cb:5f:c7:ae:ba:98:de:7a:6d:15:22:
c3:f3:ea:2e:0e:c0:33:d0:bd:4a:75:27:94:82:cd:e8:68:3e:
57:75:40:c4:55:50:18:34:f9:03:79:6b:4b:1e:88:74:e8:dd:
d2:ae:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:36 2026 by rpki-client