Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/64dQ7wuxDD-Gyrchphsdtk6oJ_8.roa
File: 64dQ7wuxDD-Gyrchphsdtk6oJ_8.roa (raw, json)
Hash identifier: BeGDi5VESth0C9pJC6qZlN6Zb8k5M9gWJV+LnTk4B3Y=
Subject key identifier: EB:87:50:EF:0B:B1:0C:3F:86:CA:B7:21:A6:1B:1D:B6:4E:A8:27:FF
Certificate issuer: /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial: 019F23689FA4ED090169708E849F161D7884
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/64dQ7wuxDD-Gyrchphsdtk6oJ_8.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20661
IP address blocks: 95.85.96.0/19 maxlen: 24
95.85.96.0/24 maxlen: 24
95.85.98.0/24 maxlen: 24
95.85.99.0/24 maxlen: 24
95.85.100.0/22 maxlen: 22
95.85.100.0/24 maxlen: 24
95.85.101.0/24 maxlen: 24
95.85.104.0/22 maxlen: 22
95.85.104.0/24 maxlen: 24
95.85.121.0/24 maxlen: 24
103.220.0.0/22 maxlen: 22
119.235.112.0/20 maxlen: 20
177.93.143.0/24 maxlen: 24
185.69.184.0/24 maxlen: 24
216.250.8.0/21 maxlen: 21
217.174.224.0/20 maxlen: 24
217.174.224.0/24 maxlen: 24
217.174.225.0/24 maxlen: 24
217.174.227.0/24 maxlen: 24
2a05:2180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9f:a4:ed:09:01:69:70:8e:84:9f:16:1d:78:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb8750ef0bb10c3f86cab721a61b1db64ea827ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:45:6f:69:7b:46:a0:92:6c:15:2c:6f:19:
ce:b5:b1:32:0c:93:9f:4b:79:d6:4e:6a:4d:ce:af:
07:44:ba:39:f3:d6:2a:4f:f8:2d:c3:a1:0d:d6:90:
a5:92:47:cb:32:72:37:05:48:22:3d:8f:ed:39:01:
0b:27:4e:26:1b:d5:bd:e0:fd:04:54:28:aa:57:88:
24:bb:2d:38:5f:44:91:76:e9:fe:9e:35:57:0d:a6:
d7:08:65:19:8a:fc:08:a1:ee:23:53:95:66:11:da:
f6:6b:13:ba:c4:69:73:3d:6f:63:e5:a0:a4:7f:61:
a4:cd:8c:c6:03:a4:df:6a:dc:5f:e7:70:27:b5:f7:
a3:c2:85:34:04:df:dd:31:11:6c:ef:0d:2c:f2:56:
73:ac:a4:fd:d3:65:6d:d4:ca:78:d2:79:c2:a2:56:
5d:73:56:59:24:b7:e6:44:91:4f:10:e3:81:ce:1b:
3b:9c:d1:3a:2d:ae:aa:7a:1a:8c:58:a0:fd:d5:31:
9c:e9:29:70:9e:75:39:b2:1c:cd:11:44:50:db:2c:
f9:86:9f:fd:68:d1:28:12:d2:d8:db:8e:60:48:65:
be:9a:12:80:36:35:86:ea:20:d5:58:f3:eb:7d:c4:
86:a9:b5:cf:eb:77:95:c5:66:d6:14:c5:61:b1:62:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:87:50:EF:0B:B1:0C:3F:86:CA:B7:21:A6:1B:1D:B6:4E:A8:27:FF
X509v3 Authority Key Identifier:
keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/64dQ7wuxDD-Gyrchphsdtk6oJ_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.96.0/19
103.220.0.0/22
119.235.112.0/20
177.93.143.0/24
185.69.184.0/24
216.250.8.0/21
217.174.224.0/20
IPv6:
2a05:2180::/29
Signature Algorithm: sha256WithRSAEncryption
43:22:f7:7e:9e:4a:1a:e7:cf:e1:4d:06:2a:5b:ba:c3:5c:7f:
8d:c0:1f:5a:8c:47:c6:26:06:4e:c9:28:6a:ac:0a:65:4d:cc:
f6:85:41:99:94:e8:39:03:dd:b4:fe:ea:b5:63:fd:8f:83:99:
25:41:05:54:41:a5:21:a5:72:57:7c:b2:d2:62:cf:f4:f9:f8:
c3:ad:1a:c9:37:d6:bd:68:7c:c8:a0:00:e8:6e:76:c5:53:97:
94:89:37:fb:26:8f:8c:18:74:93:24:fd:e8:b8:61:45:bf:82:
ed:88:70:1d:ce:38:09:96:3e:0c:4b:ec:99:94:75:d3:b1:01:
70:ca:68:0c:ac:68:03:eb:d6:ce:29:a6:b1:15:c6:d9:f2:8a:
71:cb:d5:d6:3b:a5:7a:56:ad:e9:70:76:5c:24:e7:16:37:7f:
c9:43:82:3d:e7:64:6f:b7:2c:0c:51:aa:68:f6:d2:f4:76:3b:
6c:d7:6a:05:d2:89:1b:ef:8c:35:35:c3:ec:cd:23:18:04:d3:
bd:a1:9e:6e:16:ea:1e:61:7f:ca:26:9a:a1:a0:6b:9a:5a:1e:
32:61:03:3f:c8:a4:73:c3:18:5e:d1:ba:71:61:08:88:74:1e:
22:62:88:0d:d8:bf:f7:18:22:7f:2d:f8:36:74:a9:d0:67:f9:
ec:e8:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:11 2026 by rpki-client