Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/FX3QzUkxt_bOZJMEd68NoBa6xjw.roa
File: FX3QzUkxt_bOZJMEd68NoBa6xjw.roa (raw, json)
Hash identifier: Aeuem70DTwxuRaSzC0M0X4yGLZRf049S8H5di9SwmV0=
Subject key identifier: 15:7D:D0:CD:49:31:B7:F6:CE:64:93:04:77:AF:0D:A0:16:BA:C6:3C
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019F69D4E0F576204CC439890A18B2B221C7
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/FX3QzUkxt_bOZJMEd68NoBa6xjw.roa
Signing time: Thu 16 Jul 2026 07:29:46 +0000
ROA not before: Thu 16 Jul 2026 07:29:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 95.170.12.0/24 maxlen: 24
95.170.19.0/24 maxlen: 24
95.170.20.0/24 maxlen: 24
95.170.25.0/24 maxlen: 24
95.170.27.0/24 maxlen: 24
95.170.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:d4:e0:f5:76:20:4c:c4:39:89:0a:18:b2:b2:21:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jul 16 07:29:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=157dd0cd4931b7f6ce64930477af0da016bac63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:7c:4f:ba:23:3e:50:0f:db:ec:40:b5:dd:
43:a0:c9:88:03:9b:ad:ab:0b:a9:53:df:9d:4a:d3:
3b:61:5f:9d:99:21:e6:7d:af:95:81:06:1d:d5:21:
52:4e:02:72:18:64:f3:db:a5:78:d9:21:da:71:de:
63:31:a7:ad:b0:a0:72:0d:43:3a:1e:69:5c:b8:51:
b1:87:bd:4d:3e:e5:6e:52:16:10:51:50:d7:d2:6d:
7a:69:d9:c2:ce:03:12:c5:95:d0:6f:a2:f3:a6:65:
be:fc:bc:44:1e:38:81:33:3d:52:05:87:64:ac:01:
1e:f4:b6:0e:d5:a0:9e:dc:7f:28:c4:81:e9:73:60:
bc:e6:b7:bc:0c:bc:44:16:65:93:9a:8c:19:66:c1:
b3:a8:ef:4b:f5:8c:a6:4c:69:07:97:e3:8d:28:56:
90:6a:b8:96:4e:a7:bb:ce:a1:c9:5e:a5:f3:04:04:
c2:4b:2b:b8:ae:27:74:74:ca:1a:b0:a6:cb:75:4e:
a6:ed:23:84:59:ef:cc:32:a4:33:38:c2:2d:34:1b:
44:ce:3d:90:bf:d2:08:fb:cc:a5:b1:fe:48:9a:d5:
0d:dd:7e:7a:b0:24:57:f6:fa:87:9b:4a:7b:93:2a:
11:16:72:c9:da:94:40:15:ac:8b:44:17:fc:1e:2a:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:D0:CD:49:31:B7:F6:CE:64:93:04:77:AF:0D:A0:16:BA:C6:3C
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/FX3QzUkxt_bOZJMEd68NoBa6xjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0/24
95.170.19.0-95.170.20.255
95.170.25.0/24
95.170.27.0-95.170.28.255
Signature Algorithm: sha256WithRSAEncryption
15:3b:0a:08:b3:77:72:a6:28:f1:e1:ac:79:c0:7a:ee:2e:65:
e4:ad:95:ae:ae:6c:fe:74:d3:5d:55:cd:c2:07:77:d8:00:1e:
db:cd:ef:32:fc:99:a4:2e:5b:75:aa:8b:4f:d4:2d:a5:db:12:
df:ce:34:aa:dc:ea:29:9d:70:de:71:8f:68:e8:9e:ee:d7:17:
5f:16:df:85:f0:9f:ba:2b:96:0b:c5:3c:f7:2c:bd:fc:5b:e6:
06:95:85:87:32:21:ba:5a:2c:90:a4:ef:df:43:b0:8c:25:d6:
b7:d9:37:93:aa:cc:f4:18:8b:43:3c:26:d4:fd:4d:ab:9b:b9:
d1:fd:9f:d2:d3:54:71:3c:0b:54:7e:b7:4e:3e:2d:ce:b2:c3:
8a:34:9f:57:a2:21:59:42:b7:9a:31:37:0b:48:7e:4d:7f:02:
38:a9:e9:7d:78:ba:1e:18:92:73:d7:4b:af:d7:36:99:eb:53:
d0:fc:34:59:25:10:c3:4f:51:b6:df:dc:60:02:02:a8:df:ad:
88:72:08:07:74:98:e8:4b:38:da:1b:5e:d7:11:88:55:1a:0b:
6e:46:70:47:83:63:52:8f:c6:a3:18:f7:a1:db:08:70:43:13:
7a:93:61:48:e0:b1:ec:d3:29:d8:c7:fa:e8:ba:23:8a:49:4d:
6c:c9:dd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:41 2026 by rpki-client