Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/0rJSCVJcNuE9Gj8yeKqLbu6nlbs.roa
File: 0rJSCVJcNuE9Gj8yeKqLbu6nlbs.roa (raw, json)
Hash identifier: YC/UAX15SVftaglV+VnY5RgZVX1KqqrfW0tsy2D1Wa0=
Subject key identifier: D2:B2:52:09:52:5C:36:E1:3D:1A:3F:32:78:AA:8B:6E:EE:A7:95:BB
Certificate issuer: /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial: 01A01947730A80F98156F1AB77CD75F5A0FB
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/0rJSCVJcNuE9Gj8yeKqLbu6nlbs.roa
Signing time: Wed 19 Aug 2026 09:08:27 +0000
ROA not before: Wed 19 Aug 2026 09:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34876
IP address blocks: 95.86.128.0/24 maxlen: 24
95.86.129.0/24 maxlen: 24
95.86.130.0/24 maxlen: 24
95.86.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:47:73:0a:80:f9:81:56:f1:ab:77:cd:75:f5:a0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
Validity
Not Before: Aug 19 09:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2b25209525c36e13d1a3f3278aa8b6eeea795bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:66:9e:7f:7b:5b:04:c4:10:47:c5:58:5b:
24:5a:ff:5b:74:12:ef:32:b8:e3:e8:9d:50:31:9c:
83:4f:5c:b2:12:bf:29:f9:a7:4c:86:a6:8f:1d:5e:
4e:5c:8b:04:e0:e6:f2:30:4a:80:f7:8d:26:5a:65:
1c:78:85:fd:08:c4:e2:54:73:bc:38:df:5f:e0:7c:
79:9c:8c:13:93:70:e3:21:d3:11:58:85:78:2d:65:
f1:20:25:5c:d4:f2:a4:47:4c:8a:ef:e4:5f:17:fe:
8a:7b:b6:1b:ec:ad:62:36:a7:30:b4:9e:6a:e8:6f:
10:7e:9b:0b:d8:48:3f:d8:7b:7d:4b:8a:a5:9d:eb:
09:2a:70:12:7b:80:08:b1:08:03:11:54:d2:2a:63:
d8:99:1c:21:bf:58:e5:8c:7d:38:fe:1c:cf:43:e2:
1f:77:1e:3a:06:68:8e:e0:b1:b6:c1:7a:97:48:36:
86:bf:ce:49:6a:d4:02:e4:44:09:38:3e:40:99:0d:
17:3c:df:36:df:e8:64:17:76:f0:1b:ce:68:4a:84:
3b:cd:0f:f1:3e:9d:26:e1:e2:98:1f:c0:a7:7f:ae:
5f:09:16:ac:e1:f0:a3:af:1d:92:51:5f:0f:2f:a9:
a7:72:8c:01:87:7e:32:c6:36:e6:3f:ea:83:43:d0:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:52:09:52:5C:36:E1:3D:1A:3F:32:78:AA:8B:6E:EE:A7:95:BB
X509v3 Authority Key Identifier:
keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/0rJSCVJcNuE9Gj8yeKqLbu6nlbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.128.0/22
Signature Algorithm: sha256WithRSAEncryption
01:9e:3e:49:aa:08:a4:b5:2f:b1:c2:33:e3:fc:62:b1:ac:ee:
ae:84:0d:1d:29:14:6a:0d:22:b9:57:11:9a:b2:47:42:ee:13:
db:c7:5a:cc:95:7d:96:38:ae:74:51:97:61:6b:37:83:e4:88:
94:f6:c1:00:ec:a8:94:f5:de:83:0d:8b:2a:06:5f:af:3b:8a:
de:fe:90:b3:08:51:2b:c0:67:78:97:b3:6e:ef:40:b6:63:ea:
0b:46:1b:bf:2f:bc:07:a0:b9:78:7d:21:07:f4:dd:3c:5b:96:
9e:c3:82:05:cd:60:62:bf:3f:1e:76:4c:a6:0c:b0:de:7c:55:
a4:0a:53:aa:29:c1:fc:c0:08:7a:04:cd:77:b6:0b:0c:6f:8d:
ac:39:6d:18:f8:8b:a6:f4:75:d2:0c:66:dc:85:70:1a:24:d5:
56:6c:6f:37:ce:7f:92:bc:e2:0f:0f:15:01:c1:11:40:01:05:
13:b5:af:c6:82:82:f6:7b:65:4b:85:91:ae:27:95:c8:0e:f7:
1b:23:62:2f:e6:36:4f:6e:b4:5e:50:74:68:97:1b:35:1b:1b:
f1:78:fb:52:2a:c7:f1:a0:15:8c:e3:62:db:09:89:cf:5d:82:
be:74:96:1e:b1:de:23:7e:0d:e0:0b:c9:6d:cf:fe:c3:a2:eb:
2b:d9:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:41 2026 by rpki-client