Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/I8Hue8lEbabGztqv_8ECCOfbowQ.roa
File: I8Hue8lEbabGztqv_8ECCOfbowQ.roa (raw, json)
Hash identifier: qsfljU1Qf3zFHgPf10kPhrD3xEr0o6CMAk3FUEcAMhs=
Subject key identifier: 23:C1:EE:7B:C9:44:6D:A6:C6:CE:DA:AF:FF:C1:02:08:E7:DB:A3:04
Certificate issuer: /CN=f3f19bf3053ee713d5e873b5c1cbf92afb937dae
Certificate serial: 019F23693186A0A920D5A1A14F4F4D467B26
Authority key identifier: F3:F1:9B:F3:05:3E:E7:13:D5:E8:73:B5:C1:CB:F9:2A:FB:93:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_Gb8wU-5xPV6HO1wcv5KvuTfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/I8Hue8lEbabGztqv_8ECCOfbowQ.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34975
IP address blocks: 95.129.56.0/21 maxlen: 21
95.129.56.0/24 maxlen: 24
95.129.57.0/24 maxlen: 24
95.129.58.0/24 maxlen: 24
95.129.59.0/24 maxlen: 24
95.129.60.0/22 maxlen: 22
95.143.16.0/20 maxlen: 20
95.143.16.0/24 maxlen: 24
95.143.17.0/24 maxlen: 24
95.143.18.0/24 maxlen: 24
95.143.19.0/24 maxlen: 24
95.143.20.0/24 maxlen: 24
95.143.21.0/24 maxlen: 24
95.143.22.0/24 maxlen: 24
95.143.23.0/24 maxlen: 24
95.143.24.0/21 maxlen: 21
185.18.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/8_Gb8wU-5xPV6HO1wcv5KvuTfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/8_Gb8wU-5xPV6HO1wcv5KvuTfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_Gb8wU-5xPV6HO1wcv5KvuTfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:31:86:a0:a9:20:d5:a1:a1:4f:4f:4d:46:7b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f19bf3053ee713d5e873b5c1cbf92afb937dae
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23c1ee7bc9446da6c6cedaafffc10208e7dba304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:53:0e:7c:26:54:c4:70:1b:84:d3:23:de:
66:0d:93:99:ff:9f:99:e9:5f:f8:f5:a4:f8:8a:30:
9a:30:96:a4:2b:0f:0d:89:af:4c:83:f8:dd:19:bd:
26:00:62:14:5d:8d:12:c9:69:c0:ef:14:60:98:1c:
6e:d6:22:2e:ed:4c:36:83:86:f3:95:08:18:79:7e:
2e:d9:e0:09:6a:50:41:41:1c:2c:77:43:44:0f:ce:
33:db:e7:24:38:aa:e8:b7:d2:e3:54:5e:11:1d:b0:
a2:d9:2d:31:57:d2:5d:69:0f:21:27:23:aa:a0:b0:
5f:ae:ec:e0:bc:79:03:3b:76:fe:f2:48:61:f9:a8:
0e:1a:f9:8a:93:f3:d6:29:c1:e0:44:33:3c:6e:86:
7d:49:dc:ee:4a:68:50:56:8a:44:fa:47:38:b0:f8:
6b:52:1b:f1:fa:7d:44:10:53:8f:10:25:1c:83:63:
45:b4:00:49:27:7d:d7:85:a0:11:9a:ae:61:4f:52:
19:17:2f:f8:49:18:94:aa:96:cb:48:26:12:47:38:
c2:15:77:16:25:ba:da:8b:48:19:75:bf:34:08:31:
19:66:e7:06:3d:94:4c:95:4c:47:c0:98:14:79:a4:
05:ce:c3:d9:21:7d:38:a6:53:1f:8e:23:22:9c:bf:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:EE:7B:C9:44:6D:A6:C6:CE:DA:AF:FF:C1:02:08:E7:DB:A3:04
X509v3 Authority Key Identifier:
keyid:F3:F1:9B:F3:05:3E:E7:13:D5:E8:73:B5:C1:CB:F9:2A:FB:93:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_Gb8wU-5xPV6HO1wcv5KvuTfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/I8Hue8lEbabGztqv_8ECCOfbowQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/8_Gb8wU-5xPV6HO1wcv5KvuTfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.56.0/21
95.143.16.0/20
185.18.20.0/22
Signature Algorithm: sha256WithRSAEncryption
43:ec:d3:eb:f8:94:19:ac:a4:96:e0:5b:37:3b:46:0b:83:71:
50:8d:76:1a:ce:82:63:7e:40:3e:0f:da:82:77:c6:96:44:be:
62:b7:82:4c:5d:cf:99:f2:a9:98:de:e4:ea:6a:95:27:d9:7d:
78:72:76:b3:22:52:a9:0d:2e:28:a0:86:48:c9:b0:48:f8:1d:
c0:7c:3f:ce:3c:4b:1e:24:15:8b:bd:06:f2:c7:eb:68:a9:33:
92:c1:a2:9d:d3:22:25:fc:58:80:4d:93:59:ce:2d:78:b9:26:
e5:23:b6:54:86:d6:af:37:58:df:c0:30:21:36:7f:85:9c:9f:
2e:63:c1:e5:eb:3a:21:a6:5c:95:29:33:8f:82:f4:1f:9b:3e:
7a:df:bf:82:dc:be:d4:b8:aa:1f:8d:1b:1b:90:24:27:2d:91:
9e:6a:c0:9e:5f:44:c9:9a:1d:74:62:c3:3e:1f:ee:1b:19:4f:
90:7f:d4:2b:32:8c:97:41:1b:e1:19:75:36:2b:0c:56:28:bb:
b5:c1:42:05:71:30:82:e9:d4:e0:99:0c:85:4e:13:c8:39:11:
f4:79:a9:51:59:f0:ce:72:11:a9:ec:05:04:13:c8:6f:c9:45:
f3:82:ce:ce:8e:0a:c1:9f:eb:72:aa:a1:67:03:a6:fa:1c:da:
50:d6:4c:f6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8jaTGGoKkg1aGhT09NRnsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZjE5YmYzMDUzZWU3MTNkNWU4NzNiNWMxY2JmOTJhZmI5
MzdkYWUwHhcNMjYwNzAyMTUxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2MxZWU3YmM5NDQ2ZGE2YzZjZWRhYWZmZmMxMDIwOGU3ZGJhMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm39TDnwmVMRwG4TTI95mDZOZ/5+Z
6V/49aT4ijCaMJakKw8Nia9Mg/jdGb0mAGIUXY0SyWnA7xRgmBxu1iIu7Uw2g4bz
lQgYeX4u2eAJalBBQRwsd0NED84z2+ckOKrot9LjVF4RHbCi2S0xV9JdaQ8hJyOq
oLBfruzgvHkDO3b+8khh+agOGvmKk/PWKcHgRDM8boZ9SdzuSmhQVopE+kc4sPhr
Uhvx+n1EEFOPECUcg2NFtABJJ33XhaARmq5hT1IZFy/4SRiUqpbLSCYSRzjCFXcW
Jbrai0gZdb80CDEZZucGPZRMlUxHwJgUeaQFzsPZIX04plMfjiMinL8KBQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCPB7nvJRG2mxs7ar//BAgjn26MEMB8GA1UdIwQY
MBaAFPPxm/MFPucT1ehztcHL+Sr7k32uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9HYjh3VS01eFBWNkhPMXdjdjVLdnVUZmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMt
NjY4MmY3ODI3ZGYwLzEvSThIdWU4bEViYWJHenRxdl84RUNDT2Zib3dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMtNjY4MmY3ODI3ZGYw
LzEvOF9HYjh3VS01eFBWNkhPMXdjdjVLdnVUZmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDX4E4AwQE
X48QAwQCuRIUMA0GCSqGSIb3DQEBCwUAA4IBAQBD7NPr+JQZrKSW4Fs3O0YLg3FQ
jXYazoJjfkA+D9qCd8aWRL5it4JMXc+Z8qmY3uTqapUn2X14cnazIlKpDS4ooIZI
ybBI+B3AfD/OPEseJBWLvQbyx+toqTOSwaKd0yIl/FiATZNZzi14uSblI7ZUhtav
N1jfwDAhNn+FnJ8uY8Hl6zohplyVKTOPgvQfmz5637+C3L7UuKofjRsbkCQnLZGe
asCeX0TJmh10YsM+H+4bGU+Qf9QrMoyXQRvhGXU2KwxWKLu1wUIFcTCC6dTgmQyF
ThPIORH0ealRWfDOchGp7AUEE8hvyUXzgs7OjgrBn+tyqqFnA6b6HNpQ1kz2
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:13 2026 by rpki-client