Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/DY3LJ9rpgUEoEYblIPLq2JAi2Kg.roa
File: DY3LJ9rpgUEoEYblIPLq2JAi2Kg.roa (raw, json)
Hash identifier: l616iMZGtt3jwaHjNLEard9F/X5woUP9jyhBneyax3A=
Subject key identifier: 0D:8D:CB:27:DA:E9:81:41:28:11:86:E5:20:F2:EA:D8:90:22:D8:A8
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019E8D3D057027B63745B86B28F822459CF8
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/DY3LJ9rpgUEoEYblIPLq2JAi2Kg.roa
Signing time: Wed 03 Jun 2026 11:27:26 +0000
ROA not before: Wed 03 Jun 2026 11:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.62.0/24 maxlen: 24
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.78.0/24 maxlen: 24
95.38.79.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:3d:05:70:27:b6:37:45:b8:6b:28:f8:22:45:9c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jun 3 11:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d8dcb27dae98141281186e520f2ead89022d8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:81:f5:f7:62:a5:e4:e8:3b:58:30:f5:85:
ca:4e:da:74:43:7a:ad:53:ec:fb:1a:d3:93:7f:e3:
46:f6:e9:b5:9d:c7:14:be:71:27:e3:9f:a8:b7:98:
dc:e5:f8:76:c7:e5:13:0d:3e:3d:f2:b2:de:24:5b:
73:8b:f4:84:dd:7f:4b:59:02:0b:5f:f7:66:25:75:
c3:bf:7e:f3:9b:f7:0a:a8:e1:e4:0f:e0:e2:8b:e4:
92:68:a8:94:61:66:df:3d:4b:8f:84:69:af:9d:06:
3a:7e:ef:64:04:f2:6c:55:9f:51:c6:4b:66:1e:1d:
56:32:de:2e:08:b9:04:4a:d9:cc:d7:4c:ea:58:94:
73:76:6e:bf:fa:57:9b:13:2a:a7:33:07:52:4b:f5:
ad:68:65:cd:09:f1:a1:6d:53:03:2e:ab:c5:a7:1a:
0a:83:c5:d5:7e:51:e0:71:3a:89:35:ee:37:dc:61:
63:f2:15:b6:ed:be:79:23:31:c6:0f:32:a8:3a:9f:
db:fe:ac:4c:6b:3a:e3:80:d1:49:23:ea:15:7c:c4:
21:12:54:f4:8e:6c:f0:aa:a2:12:77:f6:e6:cd:32:
49:7e:19:f0:36:e9:06:da:37:c3:b1:de:08:a3:b8:
85:e8:c4:69:d7:be:ff:0e:05:1f:9b:c1:a3:d8:cf:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:CB:27:DA:E9:81:41:28:11:86:E5:20:F2:EA:D8:90:22:D8:A8
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/DY3LJ9rpgUEoEYblIPLq2JAi2Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.53.255
95.38.56.0-95.38.111.255
95.38.120.0-95.38.143.255
95.38.160.0/20
95.38.192.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
01:1b:45:d2:13:3f:ec:b9:e5:44:81:49:13:99:ed:0d:c7:70:
e4:a1:c3:ca:65:a3:f2:c8:a0:ba:6b:18:39:55:57:65:ae:26:
70:c7:d5:42:0d:63:c0:e5:f7:fd:bb:dc:97:f1:bb:31:19:91:
17:88:a2:26:ee:26:dd:23:17:3e:14:b5:4d:98:e4:a6:44:0b:
fd:cd:0c:9e:78:ab:3c:26:49:5f:3d:04:ac:d0:94:86:e6:06:
fa:90:f7:5a:59:bf:10:1f:a1:13:0a:2d:97:81:bc:00:bf:d7:
1c:54:49:74:5c:d5:b5:f8:f7:c9:cf:a5:10:cd:db:c2:dd:e0:
03:97:33:47:37:8e:fd:1e:c7:70:b9:b4:c2:da:f3:2e:51:b2:
5c:31:d9:55:ff:2d:3a:c0:2d:86:a7:46:76:80:38:5a:ff:15:
b6:8e:38:ab:ca:5b:35:87:aa:5a:93:4e:a9:82:db:f2:32:47:
75:84:1c:17:31:b0:b9:62:be:76:8e:14:75:1a:95:62:8b:0b:
95:77:9d:31:91:87:6c:c9:94:e1:a6:da:6d:92:52:be:9d:22:
61:20:ce:9a:ee:c1:a0:37:ed:8c:84:8d:75:ee:b9:15:ed:7c:
28:95:d8:ac:42:a9:f3:92:b2:fa:1f:c1:21:d3:f9:99:8e:cc:
29:89:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:25 2026 by rpki-client