Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/daqjoUQutGPSPWpp1MBlnqMi5s0.roa
File: daqjoUQutGPSPWpp1MBlnqMi5s0.roa (raw, json)
Hash identifier: dLUynKpTq26uEi3G0kNMPoVLBPgdqfEJFefVyZLupvY=
Subject key identifier: 75:AA:A3:A1:44:2E:B4:63:D2:3D:6A:69:D4:C0:65:9E:A3:22:E6:CD
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019C9480112F4E736D5406E72E773E8C6D75
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/daqjoUQutGPSPWpp1MBlnqMi5s0.roa
Signing time: Wed 25 Feb 2026 11:12:26 +0000
ROA not before: Wed 25 Feb 2026 11:12:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 95.128.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:80:11:2f:4e:73:6d:54:06:e7:2e:77:3e:8c:6d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Feb 25 11:12:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75aaa3a1442eb463d23d6a69d4c0659ea322e6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:04:80:d9:bc:f0:fc:75:7f:9e:c1:d9:fc:
fc:2e:a5:cb:42:4a:0f:68:8b:da:56:3e:dc:50:35:
d4:ae:58:71:a2:b9:a5:15:d3:e5:61:74:08:cb:dc:
4c:94:8b:5b:6a:94:65:7b:0f:ab:c8:ae:c7:c5:4c:
91:1a:4f:d4:35:1f:31:5e:13:e9:5f:1c:26:95:e2:
34:08:b0:e2:28:89:c7:02:f1:46:40:1f:db:a0:0d:
03:9c:ea:e9:51:34:c8:cb:df:6e:2f:c8:a0:14:06:
e1:5e:45:3d:2e:35:a5:c2:95:89:1c:80:42:68:b2:
ca:25:cc:d3:97:90:50:49:fd:67:12:f7:64:7b:b6:
cb:8e:e9:87:61:82:47:f3:46:26:4d:70:6a:ed:9d:
f7:34:75:b8:dd:97:a9:1b:17:4e:ec:7b:f4:da:65:
a5:09:6d:fd:d6:fd:44:25:1a:8d:a4:9f:96:f8:c1:
41:b0:e3:63:d5:98:f8:75:76:16:b0:d5:7b:27:3b:
9d:71:da:79:ec:2a:58:5f:86:5a:7f:4d:ae:a9:07:
77:0d:77:88:5e:49:a6:db:89:9f:6e:e0:a8:5f:f3:
12:10:2a:56:33:79:42:be:1b:7d:d7:ab:fd:67:18:
a0:e6:d4:1b:b2:6f:08:01:b9:b8:c4:dd:25:06:81:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AA:A3:A1:44:2E:B4:63:D2:3D:6A:69:D4:C0:65:9E:A3:22:E6:CD
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/daqjoUQutGPSPWpp1MBlnqMi5s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.195.0/24
Signature Algorithm: sha256WithRSAEncryption
42:80:c1:f6:da:d5:21:4c:47:c6:75:bf:3a:29:d5:4e:31:d3:
19:94:e6:a7:73:b2:26:d8:27:69:b5:5f:84:6e:b7:21:ca:22:
98:fa:77:b9:8b:cc:9c:0c:68:13:cd:9f:38:58:cf:0d:50:d4:
ae:f9:72:6f:5f:41:c9:80:dc:cf:a6:a9:1b:d6:8b:ba:a7:76:
40:34:a6:f9:84:11:3b:ca:0f:96:2c:60:f0:c2:7c:f8:c5:e5:
b3:c7:30:55:79:e6:48:78:86:37:c3:0c:2f:73:5b:36:c1:dd:
0e:e5:3f:64:25:f5:9c:4a:b5:2b:99:d9:1a:9d:83:59:18:0f:
36:19:00:13:dc:84:34:4d:ff:ee:c7:05:53:4c:b0:52:f7:b3:
05:ea:70:54:6f:a6:bc:99:f6:da:0f:59:6e:ae:88:a1:2c:33:
e2:81:de:c9:e7:f2:37:65:79:db:26:79:12:1c:fb:a5:41:28:
a7:83:17:79:dc:0b:e7:0d:31:65:13:a9:e2:bc:de:cf:21:b4:
0c:1c:3d:6d:42:df:38:7c:be:19:5c:29:a2:cc:0e:84:67:7a:
cc:8c:6f:63:b6:06:8f:f5:dc:fb:fa:60:2b:7a:e2:3d:28:54:
e0:f6:be:2f:29:e1:a6:71:e1:63:b7:51:63:a5:90:e0:0e:6d:
f6:95:ff:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyUgBEvTnNtVAbnLnc+jG11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh
OWU5MjEwHhcNMjYwMjI1MTExMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWFhYTNhMTQ0MmViNDYzZDIzZDZhNjlkNGMwNjU5ZWEzMjJlNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+AEgNm88Px1f57B2fz8LqXLQkoP
aIvaVj7cUDXUrlhxormlFdPlYXQIy9xMlItbapRlew+ryK7HxUyRGk/UNR8xXhPp
XxwmleI0CLDiKInHAvFGQB/boA0DnOrpUTTIy99uL8igFAbhXkU9LjWlwpWJHIBC
aLLKJczTl5BQSf1nEvdke7bLjumHYYJH80YmTXBq7Z33NHW43ZepGxdO7Hv02mWl
CW391v1EJRqNpJ+W+MFBsONj1Zj4dXYWsNV7Jzudcdp57CpYX4Zaf02uqQd3DXeI
Xkmm24mfbuCoX/MSECpWM3lCvht916v9Zxig5tQbsm8IAbm4xN0lBoGhMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHWqo6FELrRj0j1qadTAZZ6jIubNMB8GA1UdIwQY
MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt
NWViYjYzNzgwMDllLzEvZGFxam9VUXV0R1BTUFdwcDFNQmxucU1pNXMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll
LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DDMA0G
CSqGSIb3DQEBCwUAA4IBAQBCgMH22tUhTEfGdb86KdVOMdMZlOanc7Im2CdptV+E
brchyiKY+ne5i8ycDGgTzZ84WM8NUNSu+XJvX0HJgNzPpqkb1ou6p3ZANKb5hBE7
yg+WLGDwwnz4xeWzxzBVeeZIeIY3wwwvc1s2wd0O5T9kJfWcSrUrmdkanYNZGA82
GQAT3IQ0Tf/uxwVTTLBS97MF6nBUb6a8mfbaD1luroihLDPigd7J5/I3ZXnbJnkS
HPulQSingxd53AvnDTFlE6nivN7PIbQMHD1tQt84fL4ZXCmizA6EZ3rMjG9jtgaP
9dz7+mAreuI9KFTg9r4vKeGmceFjt1FjpZDgDm32lf9v
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:15 2026 by rpki-client