Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/tsx8IaUiol5aGQE_5fvb4QRYVCk.roa
File: tsx8IaUiol5aGQE_5fvb4QRYVCk.roa (raw, json)
Hash identifier: EQ3UGW8iR9OOou5q3KThnsbjTkXAxDIJCHWGzU7UsrE=
Subject key identifier: B6:CC:7C:21:A5:22:A2:5E:5A:19:01:3F:E5:FB:DB:E1:04:58:54:29
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01A153DA9F064AA6803A876BEA45C71BD163
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/tsx8IaUiol5aGQE_5fvb4QRYVCk.roa
Signing time: Mon 19 Oct 2026 11:09:58 +0000
ROA not before: Mon 19 Oct 2026 11:09:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 95.214.188.0/22 maxlen: 24
109.104.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:da:9f:06:4a:a6:80:3a:87:6b:ea:45:c7:1b:d1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Oct 19 11:09:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6cc7c21a522a25e5a19013fe5fbdbe104585429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:2b:bd:43:5f:36:b4:a5:0a:f1:49:06:d1:
81:46:38:90:c5:d9:75:7a:2b:41:e0:ef:4d:f6:c4:
05:cf:04:bd:93:41:27:7b:51:28:d7:2f:b1:6c:4e:
14:1f:36:22:6f:90:a9:04:56:13:96:7b:4c:e4:d7:
3a:c8:a4:05:57:95:82:4a:6c:e3:36:5d:e3:98:28:
32:63:df:5c:d9:ae:c9:75:d4:37:fe:13:28:71:42:
2c:94:4c:27:2e:e2:3a:1a:ff:a3:37:93:06:5a:1c:
8f:af:af:c4:80:f4:39:0f:49:7c:e7:5f:37:56:08:
e5:34:0f:20:03:88:bd:c4:59:14:50:6e:1b:4f:44:
bb:0d:3b:09:8e:c6:e0:af:be:c0:20:c5:ce:33:81:
d3:e8:21:29:f4:c0:91:d3:33:77:c5:48:90:7f:66:
59:d3:de:ac:ed:08:90:40:8e:85:47:b7:1e:5c:46:
69:ee:3f:2f:15:c3:8d:30:43:c9:1d:ab:1f:fb:72:
47:d0:22:4c:e9:32:8c:02:5d:0d:f0:50:3c:49:45:
69:79:8c:9a:83:cf:e0:63:ad:5a:cc:56:0f:42:b3:
28:f6:64:57:0f:eb:8f:01:3e:96:59:f6:64:5e:66:
2b:52:00:80:71:b9:ff:c8:47:7b:78:39:3a:db:1f:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CC:7C:21:A5:22:A2:5E:5A:19:01:3F:E5:FB:DB:E1:04:58:54:29
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/tsx8IaUiol5aGQE_5fvb4QRYVCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.188.0/22
109.104.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ea:38:27:3e:56:39:47:59:c0:06:8d:9b:ce:02:d2:f9:7c:
6d:25:fb:0b:3b:04:ab:5b:0b:a0:0c:e5:8d:a4:27:f6:5a:79:
21:11:18:66:24:69:1b:27:16:b0:17:93:0e:90:fb:cc:14:d3:
88:98:22:83:fb:3c:7f:2c:7b:2e:29:e1:3f:85:ac:10:45:dc:
6e:70:25:dc:d3:c1:c1:f8:7f:86:21:54:de:03:5f:38:5c:24:
ab:cd:b2:fb:11:d9:98:58:22:9b:ce:b9:c5:d5:89:cd:95:78:
69:bb:10:d1:53:ef:34:61:01:60:24:00:98:5f:e0:08:58:1d:
22:da:48:64:d5:8c:5d:c0:4e:e8:4b:0e:c0:f5:38:87:dd:57:
e0:5b:b6:51:ca:c4:b0:24:6e:57:59:84:e1:f2:0b:25:25:84:
82:bd:9a:95:e3:fe:16:98:62:50:f3:e2:c7:d7:4a:f2:23:d3:
2b:6c:e0:86:3c:07:25:45:a8:f8:01:8f:a4:a1:35:68:e9:12:
db:12:53:ca:ee:12:20:a2:15:a1:56:41:ff:f4:e2:5d:2d:b8:
dd:03:f4:5c:1d:6b:32:ae:12:91:07:11:cd:97:d6:f0:bb:7e:
e6:a0:50:1e:ef:a6:ac:08:78:be:f3:e3:49:5d:a7:8c:d9:2d:
3e:7c:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:52:20 2026 by rpki-client