Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/hvCy6itlcbw0LZpoMyhJNOt9Jls.roa
File: hvCy6itlcbw0LZpoMyhJNOt9Jls.roa (raw, json)
Hash identifier: TpGAs/u5rXzQyRCzeXlTRIgwiiJyCQidA7eo1ei3vgY=
Subject key identifier: 86:F0:B2:EA:2B:65:71:BC:34:2D:9A:68:33:28:49:34:EB:7D:26:5B
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019E1B26EE6F386C166B9C1A9F5392B70DB0
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/hvCy6itlcbw0LZpoMyhJNOt9Jls.roa
Signing time: Tue 12 May 2026 07:46:36 +0000
ROA not before: Tue 12 May 2026 07:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 95.170.20.0/24 maxlen: 24
95.170.25.0/24 maxlen: 24
95.170.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:26:ee:6f:38:6c:16:6b:9c:1a:9f:53:92:b7:0d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: May 12 07:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86f0b2ea2b6571bc342d9a6833284934eb7d265b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:fb:e6:05:6a:0a:6c:1d:41:8c:42:49:f5:
53:f3:b2:35:91:11:c8:58:02:97:a4:d4:58:da:5e:
48:24:ce:16:59:35:2c:77:46:e4:b3:c9:27:5a:85:
92:ec:a6:f9:fc:90:1a:e2:74:3d:0b:df:c7:78:f8:
70:4b:88:5f:b5:60:a4:b3:da:22:48:ae:df:c2:a9:
a9:71:3d:a1:ea:99:69:62:63:5b:53:6f:93:49:56:
68:cc:9b:43:bf:34:29:45:93:2d:bb:23:35:5b:61:
d5:7b:22:16:7a:27:f0:8a:e1:1f:6f:9b:3e:e6:45:
d3:5d:d5:96:73:1c:6b:94:c5:3d:f5:fd:d3:b9:5c:
a7:05:6e:cd:d5:98:d6:71:02:25:47:dc:4b:98:ff:
c2:c4:6b:23:0f:43:3c:d7:ce:27:21:59:96:6e:7f:
82:ab:55:13:0f:d7:1e:e3:4f:8c:08:bc:cd:89:e5:
5e:7a:2b:51:28:60:05:16:6b:fb:22:50:26:27:4f:
12:53:ad:71:57:11:28:c5:80:a2:27:cd:da:27:0e:
59:b4:3f:29:fd:ba:19:55:99:42:2f:44:0a:0c:87:
fb:17:61:66:d3:b9:b8:68:30:c0:bf:c3:9f:6a:94:
53:94:1f:22:76:43:45:04:81:ba:03:cc:43:0f:23:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:B2:EA:2B:65:71:BC:34:2D:9A:68:33:28:49:34:EB:7D:26:5B
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/hvCy6itlcbw0LZpoMyhJNOt9Jls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.20.0/24
95.170.25.0/24
95.170.27.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6c:ff:d0:bb:05:cb:35:16:a6:71:f1:01:e6:bb:b4:6d:a6:
7d:2b:96:a0:11:7a:e6:4d:25:6d:6b:89:b5:c9:05:2d:32:75:
b9:4b:11:46:3e:b2:e9:6e:9f:1e:51:46:61:20:af:7e:4b:62:
9a:c6:28:88:b2:07:dd:34:96:8d:92:39:0f:7d:5a:b7:0b:3a:
e3:3f:85:57:7f:5e:0b:da:07:e6:ed:0d:9b:2e:6f:53:17:50:
d0:19:e0:a5:e6:b1:d6:f7:52:ba:94:31:b3:34:83:ba:d1:f1:
a7:33:e7:cd:63:0b:52:80:7e:f9:b7:59:0a:d9:99:60:b8:83:
d4:f2:5f:18:4a:a6:81:8e:d0:a2:f2:be:26:9f:5a:a2:5c:bd:
af:be:e6:2f:88:83:db:0f:c8:eb:1e:14:07:f1:9c:58:2a:73:
f4:50:34:a1:45:06:8d:2a:f8:2e:95:a6:5d:83:43:1f:ed:42:
a4:c1:f1:b9:8c:7f:88:32:d7:5c:b3:6b:ed:ff:3e:32:6e:8c:
26:e6:d3:de:3e:5b:8b:ae:df:38:be:10:6d:d8:21:95:0a:05:
b5:de:07:40:52:d7:22:65:e1:34:a7:36:fa:ce:40:ec:ac:a2:
79:ce:03:2d:33:d6:14:a7:06:89:95:18:13:0e:bf:d9:5d:77:
75:b5:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:42 2026 by rpki-client