Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa
File: OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa (raw, json)
Hash identifier: tRxB0SccSN5sh50OIxV7iRImD06pzo5OWnyES6cYcyc=
Subject key identifier: 38:45:40:BF:0A:D2:1C:D5:7E:BA:FA:F9:E6:8C:5D:17:1E:F1:C7:14
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019F23C94FC81F05DC5F9A8136CA4A508571
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa
Signing time: Thu 02 Jul 2026 17:03:43 +0000
ROA not before: Thu 02 Jul 2026 17:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212080
IP address blocks: 95.215.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:c9:4f:c8:1f:05:dc:5f:9a:81:36:ca:4a:50:85:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jul 2 17:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=384540bf0ad21cd57ebafaf9e68c5d171ef1c714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:95:73:96:ea:0d:26:36:37:dd:1a:0f:01:
84:3c:22:06:ec:bd:11:fc:99:69:c2:95:0d:f6:62:
5e:05:0a:b4:4f:81:a7:05:7d:16:3c:54:e2:94:58:
a4:f6:fd:25:5e:bd:cd:84:53:e9:5d:00:4c:ca:23:
9d:44:7d:11:86:89:f4:b7:1a:f5:5b:80:e4:5f:69:
44:27:85:85:5a:c8:6d:fb:81:5f:6e:6f:6e:1c:ab:
f3:76:a3:28:c0:bb:5d:23:5b:47:e7:74:ea:9b:bb:
a0:5d:df:97:84:66:f8:21:8d:2a:0b:4c:58:9b:af:
4f:69:f7:0f:2b:be:bb:7b:c6:da:78:aa:7c:f8:bd:
55:c9:fe:16:2b:ea:bb:3c:f0:33:26:a7:e1:31:c1:
86:97:b6:e5:58:73:9b:cf:f0:e8:69:37:1a:77:a5:
6a:6c:9a:57:ab:77:f8:31:99:62:a2:b4:94:99:a3:
fc:80:3e:a2:06:1d:42:54:c9:d4:3e:bb:f8:5e:c2:
56:c7:15:5a:72:93:b8:c4:e4:a9:0f:96:15:c7:b6:
25:05:1f:37:a4:e6:fa:5f:54:f5:78:d2:9d:e2:a0:
c0:b0:0a:43:3a:f3:7d:b8:2e:ce:1f:61:69:ca:cb:
f8:53:07:32:82:35:e0:b7:ec:56:bd:df:02:e0:22:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:45:40:BF:0A:D2:1C:D5:7E:BA:FA:F9:E6:8C:5D:17:1E:F1:C7:14
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.173.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f4:02:80:f9:26:d0:83:e4:fe:68:50:ba:78:b1:83:0d:16:
06:96:ad:a7:6e:f9:5a:26:b9:9a:fc:91:f6:70:84:f7:7e:8a:
17:97:52:11:fc:6b:36:9f:89:02:b5:2a:cd:1c:37:3a:98:df:
18:a4:ea:96:5b:02:2e:a0:35:c6:f5:f2:0d:ee:6d:c9:3e:69:
08:af:7a:22:4f:b5:39:33:5c:bf:70:8b:44:6a:f3:4d:81:fd:
38:8f:d4:07:25:10:57:ab:e0:51:05:ec:2e:bb:7a:30:21:e0:
f9:96:c2:cf:4f:04:66:7b:bb:60:62:46:5c:c9:22:dc:bb:2c:
8d:8d:3b:98:c8:42:53:bd:04:7b:e3:42:91:4d:88:65:38:69:
dd:48:20:d2:86:75:8b:66:17:7b:b4:76:9d:88:f2:57:a2:b2:
41:e9:bf:ff:6d:af:0a:11:85:74:ce:dd:17:c3:95:9e:4a:24:
16:b6:80:38:3a:33:da:62:b8:49:f0:e5:22:98:b0:92:9e:24:
0d:55:54:cf:b7:cf:58:90:8f:98:c6:a0:65:b3:f5:16:b4:f4:
8d:08:a7:e7:2e:17:10:93:0f:4b:38:49:6f:1d:bf:66:dc:6b:
c3:f7:f5:d6:ae:f7:ed:c1:ba:39:e8:9c:29:a0:e8:34:6b:7b:
42:7d:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:14:58 2026 by rpki-client