Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/cchuMiAwTdP7712IVa-5EwuoTbA.roa
File: cchuMiAwTdP7712IVa-5EwuoTbA.roa (raw, json)
Hash identifier: WntKm32ijw/Zst8nMPt2C0CBnjs1jMpSXp57ZJLNvM0=
Subject key identifier: 71:C8:6E:32:20:30:4D:D3:FB:EF:5D:88:55:AF:B9:13:0B:A8:4D:B0
Certificate issuer: /CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Certificate serial: 019F288E82FC5EA282ACEC2731F46B037A43
Authority key identifier: F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/cchuMiAwTdP7712IVa-5EwuoTbA.roa
Signing time: Fri 03 Jul 2026 15:17:36 +0000
ROA not before: Fri 03 Jul 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204224
IP address blocks: 95.130.217.0/24 maxlen: 24
207.241.179.0/24 maxlen: 24
2a10:b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:8e:82:fc:5e:a2:82:ac:ec:27:31:f4:6b:03:7a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Validity
Not Before: Jul 3 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c86e3220304dd3fbef5d8855afb9130ba84db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:8a:6a:bd:45:50:e6:19:6b:f4:6a:f3:83:
2b:f5:a7:8e:12:4e:a3:c5:47:82:39:5e:de:82:05:
c9:03:4f:14:ba:cb:36:d6:a2:2b:80:63:a1:70:7a:
6a:44:22:94:ff:10:0c:03:3c:51:50:4d:3c:3e:bb:
17:a3:a5:85:02:b2:ce:61:20:b9:9b:49:7e:54:d8:
5f:1f:a1:35:6b:56:49:c8:28:89:76:22:3b:c0:41:
6a:86:93:3d:0d:f8:47:6c:89:99:5b:23:89:92:cb:
17:55:5c:e8:74:45:10:bf:b4:a2:81:1d:b5:2f:7c:
97:c8:22:40:5f:bd:0e:ca:2b:62:e8:43:5a:f0:c6:
bb:c3:83:a9:42:f2:14:71:12:55:e8:2f:6b:70:49:
6c:e1:ad:85:2d:e3:e9:aa:68:80:81:73:41:00:8e:
5f:37:5c:1a:94:fb:59:0c:92:c8:da:db:8d:dd:02:
42:82:3b:e8:de:1b:f3:b5:70:59:33:a7:56:26:f1:
e9:61:8c:84:54:a5:07:03:1e:f7:d7:89:1d:72:6d:
5f:b6:2b:7d:50:6c:9e:e5:57:07:39:29:d6:0a:61:
9c:e8:d1:95:a3:c7:c2:f3:3b:df:ee:5d:cf:4b:83:
12:68:2e:22:f2:ee:9b:09:0c:98:e7:1d:e5:48:99:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:6E:32:20:30:4D:D3:FB:EF:5D:88:55:AF:B9:13:0B:A8:4D:B0
X509v3 Authority Key Identifier:
keyid:F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/cchuMiAwTdP7712IVa-5EwuoTbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.217.0/24
207.241.179.0/24
IPv6:
2a10:b80::/29
Signature Algorithm: sha256WithRSAEncryption
9d:b8:91:7b:3e:18:75:39:8b:53:31:c9:58:ba:09:b7:38:28:
c0:10:9a:47:f8:87:1a:4e:42:8d:43:f8:f5:76:65:96:eb:cd:
f0:34:f8:3d:65:4c:e3:e9:07:bb:87:09:29:1a:03:a1:c5:a8:
9e:6c:c0:c8:72:4e:57:90:e0:eb:51:62:e3:a2:f9:6b:63:1a:
a0:18:2d:5d:93:72:f4:cd:27:c4:55:c4:bf:01:35:bd:0f:6c:
00:08:85:19:99:52:db:ce:09:f1:72:de:c0:33:35:d1:7f:16:
07:90:09:49:6c:a8:a4:e9:fa:cf:09:24:79:04:44:05:24:7d:
31:70:04:b9:15:42:b3:cc:f8:bf:67:d6:8a:c2:e4:62:98:ea:
5a:16:d4:4e:3c:f3:06:ca:84:7d:e8:82:83:8e:77:0d:e1:f2:
09:7a:74:db:7a:bc:c7:da:bd:38:00:c8:15:16:c0:c8:5b:32:
37:f3:a4:71:cd:34:02:5a:3f:2d:a4:08:58:ad:3e:fc:e8:17:
63:05:53:b7:9d:82:da:29:be:f7:9d:28:b8:60:68:1d:3d:68:
c9:3e:01:c2:3c:49:27:30:09:05:29:8e:73:e0:3e:de:44:3f:
86:73:51:e1:2f:41:b4:5b:8c:91:88:c9:4c:c7:63:72:30:3f:
5c:18:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:41 2026 by rpki-client