Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Cmua0yPNEROUYE9gWO0boVFBqqI.roa
File: Cmua0yPNEROUYE9gWO0boVFBqqI.roa (raw, json)
Hash identifier: QtNaoAAFNyuhV0lOAnmbW4QSviWCbgXg1PPnGvF92BA=
Subject key identifier: 0A:6B:9A:D3:23:CD:11:13:94:60:4F:60:58:ED:1B:A1:51:41:AA:A2
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019C59020F232081C4A61DB16AAF9DF1F7D0
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Cmua0yPNEROUYE9gWO0boVFBqqI.roa
Signing time: Fri 13 Feb 2026 21:57:12 +0000
ROA not before: Fri 13 Feb 2026 21:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 95.181.160.0/24 maxlen: 24
95.181.162.0/24 maxlen: 24
95.181.167.0/24 maxlen: 24
95.181.173.0/24 maxlen: 24
95.181.174.0/24 maxlen: 24
95.181.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:59:02:0f:23:20:81:c4:a6:1d:b1:6a:af:9d:f1:f7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Feb 13 21:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a6b9ad323cd111394604f6058ed1ba15141aaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:a6:ea:dc:b8:9a:7b:fd:28:6f:68:fc:b1:
ec:ec:9c:db:22:ed:ad:0f:52:ee:48:6a:19:f7:15:
00:b1:1d:54:e9:bf:a2:e0:8a:69:74:8f:98:e3:10:
cd:15:46:61:e0:7a:fc:ec:d6:21:c7:6c:92:85:ce:
8c:7d:97:58:66:39:94:8b:33:ed:e5:32:cf:47:2d:
06:1b:a9:a1:c5:4a:90:a0:9d:e2:2a:a4:38:45:77:
56:12:e0:9b:32:69:69:9b:ba:d8:e6:aa:34:27:37:
e8:72:04:4c:f2:81:ce:b9:94:37:fb:08:e3:e7:1a:
d2:57:31:d6:2c:8f:9c:fe:56:aa:2b:86:b0:31:fb:
16:31:bf:2d:8a:8e:bc:f7:45:ae:97:ed:e9:18:df:
03:12:73:ba:44:c1:41:ec:0b:7a:67:f9:c0:1c:4c:
0e:c8:72:41:46:ba:8e:77:bb:53:f1:6b:a2:66:1f:
12:fb:d0:88:60:04:e5:e3:dd:94:84:8d:4f:4d:1d:
ca:69:8b:9c:36:4d:75:7a:79:c5:e2:6d:fc:c9:95:
e0:12:57:1c:ae:d3:7d:ff:53:d6:57:5d:81:68:47:
3d:03:32:01:bf:af:d9:c1:bb:56:3c:68:0b:73:5e:
98:3f:4b:75:32:6b:0f:4b:7e:d9:7b:8e:ac:0d:11:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:9A:D3:23:CD:11:13:94:60:4F:60:58:ED:1B:A1:51:41:AA:A2
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Cmua0yPNEROUYE9gWO0boVFBqqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.160.0/24
95.181.162.0/24
95.181.167.0/24
95.181.173.0-95.181.175.255
Signature Algorithm: sha256WithRSAEncryption
04:99:2a:d4:14:cc:98:2f:27:c9:86:89:54:94:84:d1:a6:f6:
c4:f3:18:71:f9:b2:1a:c5:a8:76:15:87:e3:ac:b4:a5:0f:af:
79:92:5d:b7:d2:40:50:22:ac:7f:70:70:5b:62:0f:e2:5d:c9:
58:61:f8:4a:c7:e2:bf:11:d4:70:ea:e1:59:d4:80:79:f2:75:
85:94:91:be:a9:6d:19:c0:bb:b9:66:f5:de:9b:f0:50:a1:ba:
5b:1d:0b:6b:1c:20:09:4d:ef:f3:98:81:5c:f3:b3:bb:11:75:
80:09:94:3c:f7:7a:00:95:e5:22:26:02:62:d8:2d:d4:92:8f:
8f:02:0b:fc:32:a1:a7:71:97:15:c6:30:a7:98:25:89:5b:c6:
0a:1d:84:f8:b0:66:43:37:ec:d5:ba:fd:41:29:fa:00:ed:fc:
52:a6:bb:df:1d:58:b1:0a:3d:3e:5e:98:f9:0b:95:db:9a:07:
ac:94:eb:de:4c:60:57:be:b2:6b:44:81:55:6c:33:a5:68:0b:
c3:49:aa:b2:60:7f:cc:4d:25:32:3f:9a:fd:b6:36:94:ea:bf:
6b:ae:e4:b2:2e:8b:3e:74:28:1b:23:31:12:6e:31:8e:5c:b8:
55:38:e0:14:96:41:59:ba:12:59:1a:78:75:c7:21:38:4f:42:
56:7c:64:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:01:21 2026 by rpki-client