Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/DvFoE9eQcmaY9cfgHPWGq1B4Y0o.roa
File: DvFoE9eQcmaY9cfgHPWGq1B4Y0o.roa (raw, json)
Hash identifier: 2frlwVf7B3+tlGK0l62bvwlFXmOnTN/JdBfNROmaTaE=
Subject key identifier: 0E:F1:68:13:D7:90:72:66:98:F5:C7:E0:1C:F5:86:AB:50:78:63:4A
Certificate issuer: /CN=ac0fd4686b6c10a5e37f0a018f550b671d68c908
Certificate serial: 019F236874D237F1F1027C62E2FBDA598635
Authority key identifier: AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/DvFoE9eQcmaY9cfgHPWGq1B4Y0o.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41037
IP address blocks: 195.95.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:74:d2:37:f1:f1:02:7c:62:e2:fb:da:59:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0fd4686b6c10a5e37f0a018f550b671d68c908
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ef16813d790726698f5c7e01cf586ab5078634a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b6:3b:f2:1e:92:17:61:79:e1:2d:c6:44:71:
56:99:e6:9a:e8:34:11:f2:5f:7e:b7:2a:30:30:e4:
06:d8:52:ae:cf:d3:c2:2a:dd:55:70:5c:e8:ae:95:
51:c1:3f:d7:88:04:0f:3a:50:da:42:38:a6:74:3d:
c0:9b:42:cd:4e:4d:9c:1b:be:db:c0:45:44:8f:ff:
9c:9f:c3:d7:d1:77:8f:39:41:ad:bf:05:de:a9:ee:
e5:bc:e7:d9:90:af:98:56:3e:e7:fd:2c:88:16:44:
05:c9:e2:63:9f:b7:01:4c:26:30:f9:c7:2f:a6:f9:
11:a2:78:dd:3c:57:cb:6a:e0:47:44:ae:2f:70:88:
14:27:1c:60:e1:12:4a:21:78:07:24:72:5b:82:a6:
0f:94:38:39:15:e8:54:4a:17:cf:c5:c9:8b:66:e9:
9e:43:0b:14:f5:fa:a1:7b:0d:bf:43:a9:29:61:cc:
2b:c0:16:cb:de:23:83:e0:1d:91:32:0a:21:b5:34:
e5:dc:35:0b:47:9a:b5:65:3c:d0:af:95:3c:9d:92:
18:be:40:53:32:6b:43:a6:e5:11:c2:3d:5e:5b:17:
54:38:2d:49:87:92:93:56:5d:e5:0b:86:85:87:08:
29:36:cd:a7:e1:90:ce:b6:11:e2:21:46:db:4d:f9:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F1:68:13:D7:90:72:66:98:F5:C7:E0:1C:F5:86:AB:50:78:63:4A
X509v3 Authority Key Identifier:
keyid:AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/DvFoE9eQcmaY9cfgHPWGq1B4Y0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.174.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e3:0c:e1:d2:ce:b9:6f:c5:c7:a4:55:81:cb:02:36:88:92:
0a:08:4a:9e:70:d1:0b:31:df:d8:11:90:67:8f:54:1c:80:b9:
e7:df:3a:e3:9d:27:98:a3:aa:71:5b:89:e8:2d:1c:5c:66:da:
f6:68:b1:9d:f5:a5:84:3a:f5:29:41:8b:92:9b:45:3e:13:35:
7d:8b:f0:fc:70:a6:42:fb:05:e8:6e:d2:ae:33:8a:0e:fd:26:
f8:97:fc:29:4e:a5:1b:af:51:09:5b:6d:85:27:ce:57:5b:e5:
98:b2:e3:db:3e:41:67:5a:1a:95:38:6c:5b:e6:5b:4b:c0:19:
66:48:c1:4b:c7:d0:a9:4b:f5:a4:65:53:3b:df:48:36:cc:81:
4a:27:cc:be:67:fc:36:85:fc:56:a5:9d:7a:3d:61:28:1b:5a:
35:ce:f1:f3:51:b3:45:45:36:14:09:f0:e4:8a:fe:0a:23:a8:
8b:20:9d:8e:bb:44:a5:cb:76:cc:f4:49:39:db:a2:90:a8:cc:
b7:40:fc:79:ad:bc:14:9f:78:c1:b3:ea:ac:45:8e:5f:36:13:
34:25:e6:62:f9:b3:e5:13:e7:25:d8:8f:28:10:c4:05:c6:55:
a7:34:3f:a9:05:13:56:5c:ab:6d:77:7b:18:5c:da:1f:1a:a7:
04:2e:65:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaHTSN/HxAnxi4vvaWYY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGZkNDY4NmI2YzEwYTVlMzdmMGEwMThmNTUwYjY3MWQ2
OGM5MDgwHhcNMjYwNzAyMTUxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWYxNjgxM2Q3OTA3MjY2OThmNWM3ZTAxY2Y1ODZhYjUwNzg2MzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rY78h6SF2F54S3GRHFWmeaa6DQR
8l9+tyowMOQG2FKuz9PCKt1VcFzorpVRwT/XiAQPOlDaQjimdD3Am0LNTk2cG77b
wEVEj/+cn8PX0XePOUGtvwXeqe7lvOfZkK+YVj7n/SyIFkQFyeJjn7cBTCYw+ccv
pvkRonjdPFfLauBHRK4vcIgUJxxg4RJKIXgHJHJbgqYPlDg5FehUShfPxcmLZume
QwsU9fqhew2/Q6kpYcwrwBbL3iOD4B2RMgohtTTl3DULR5q1ZTzQr5U8nZIYvkBT
MmtDpuURwj1eWxdUOC1Jh5KTVl3lC4aFhwgpNs2n4ZDOthHiIUbbTfmZkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA7xaBPXkHJmmPXH4Bz1hqtQeGNKMB8GA1UdIwQY
MBaAFKwP1GhrbBCl438KAY9VC2cdaMkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFfVWFHdHNFS1hqZndvQmoxVUxaeDFveVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQt
YzZiZGIxODMwNjk0LzEvRHZGb0U5ZVFjbWFZOWNmZ0hQV0dxMUI0WTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQtYzZiZGIxODMwNjk0
LzEvckFfVWFHdHNFS1hqZndvQmoxVUxaeDFveVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1+uMA0G
CSqGSIb3DQEBCwUAA4IBAQAH4wzh0s65b8XHpFWBywI2iJIKCEqecNELMd/YEZBn
j1QcgLnn3zrjnSeYo6pxW4noLRxcZtr2aLGd9aWEOvUpQYuSm0U+EzV9i/D8cKZC
+wXobtKuM4oO/Sb4l/wpTqUbr1EJW22FJ85XW+WYsuPbPkFnWhqVOGxb5ltLwBlm
SMFLx9CpS/WkZVM730g2zIFKJ8y+Z/w2hfxWpZ16PWEoG1o1zvHzUbNFRTYUCfDk
iv4KI6iLIJ2Ou0Sly3bM9Ek526KQqMy3QPx5rbwUn3jBs+qsRY5fNhM0JeZi+bPl
E+cl2I8oEMQFxlWnND+pBRNWXKttd3sYXNofGqcELmWe
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:52 2026 by rpki-client