Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/0_aFekBMdFqNOphj1MEzPKVtmT0.roa
File: 0_aFekBMdFqNOphj1MEzPKVtmT0.roa (raw, json)
Hash identifier: YB/bN3AAooYOfmHTAnQ/FECmO0TWzvsn8QhVsoUQzUY=
Subject key identifier: D3:F6:85:7A:40:4C:74:5A:8D:3A:98:63:D4:C1:33:3C:A5:6D:99:3D
Certificate issuer: /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial: 019F2368A3AEEF5C606D3B9DC17332CE52EA
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/0_aFekBMdFqNOphj1MEzPKVtmT0.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215487
IP address blocks: 95.85.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a3:ae:ef:5c:60:6d:3b:9d:c1:73:32:ce:52:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3f6857a404c745a8d3a9863d4c1333ca56d993d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:06:77:88:c1:f5:31:81:f5:24:11:b3:b3:
20:b3:31:61:b2:e1:45:85:e0:07:ba:01:4f:05:bb:
9d:b0:94:ff:d7:fc:aa:e0:b1:e7:6d:a0:fc:8a:f3:
37:b0:94:97:c6:88:ff:cd:98:72:30:32:99:71:2d:
a2:77:34:d1:97:99:23:de:d9:f7:e7:33:bf:07:bd:
21:c8:e5:e9:09:32:43:8f:98:22:cd:7b:9e:e0:67:
f2:31:c6:66:73:4a:f8:56:81:21:6d:86:2d:03:ad:
d1:da:0f:bd:73:47:95:fc:84:d3:89:b4:e2:02:5e:
e8:a4:93:35:8d:f9:2a:58:b5:ae:16:cb:7f:d9:a5:
0c:2d:fd:cf:03:19:59:21:65:f0:3d:a5:3b:28:87:
7f:30:e2:ee:67:0c:ce:d7:03:81:08:64:b8:33:bd:
e9:48:7e:09:fa:08:f3:f7:ad:df:fa:3a:2b:cf:cd:
5d:69:d3:bb:ab:a1:b1:70:f2:7f:88:e2:37:4d:9c:
3c:46:7f:f6:80:f5:bc:3b:6b:94:c0:3a:c9:57:1f:
a1:65:50:17:2a:d0:27:b1:6e:9d:4c:cd:3a:55:dc:
c8:48:ae:3b:e0:74:e5:7e:1a:26:a4:35:3b:50:aa:
ec:1a:e3:b9:52:2f:b5:ea:b0:49:9e:8d:e9:09:2a:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:85:7A:40:4C:74:5A:8D:3A:98:63:D4:C1:33:3C:A5:6D:99:3D
X509v3 Authority Key Identifier:
keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/0_aFekBMdFqNOphj1MEzPKVtmT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:90:a7:e7:e2:d2:69:c4:bc:aa:37:80:25:6c:eb:c3:3d:f3:
58:c3:66:e8:e1:0b:a9:2b:6c:d6:ae:28:70:80:e2:4f:bc:fa:
eb:ca:97:0c:9a:a5:51:85:6e:c3:77:5b:fa:bf:49:ef:61:16:
50:ea:1e:11:ae:bc:38:9d:58:8f:a6:48:51:e5:d4:ac:f6:b4:
aa:22:6a:a9:91:e4:ed:52:1b:0b:57:06:9d:1a:1c:0c:09:eb:
ec:f1:91:89:7e:3a:74:e5:6b:23:da:44:ee:2f:24:a4:f5:5b:
41:0b:c1:4d:5c:27:e7:4e:65:e5:9b:b7:a2:26:63:9a:03:6a:
ab:60:f9:7a:e5:70:7b:02:fb:0c:72:76:fe:16:ed:6b:8b:a6:
1d:8f:ae:7d:69:23:97:5d:6c:18:db:87:64:b5:e8:34:ec:d9:
3b:c3:74:8e:a1:8b:b3:d9:ec:4b:af:4c:6a:ad:4a:a7:72:15:
81:6b:83:51:e5:69:97:f2:11:ce:5a:0e:42:8c:09:11:4a:08:
15:1f:5b:45:d2:f6:b3:02:73:89:a2:87:d7:15:63:6c:f1:ba:
35:ae:d9:8a:21:a7:76:79:04:58:87:48:3b:e5:9f:e1:da:c3:
4a:50:e5:ac:ba:47:e4:68:63:6e:29:65:e3:77:b9:c7:15:53:
06:76:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:42:04 2026 by rpki-client