Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/2SMZS8VMHrEl29cUMXXJO64Oo2k.roa
File: 2SMZS8VMHrEl29cUMXXJO64Oo2k.roa (raw, json)
Hash identifier: 6HKKF3Wx6pWV2x9mCTL5UO2Qp9xcvjxO08nHGlBvDlY=
Subject key identifier: D9:23:19:4B:C5:4C:1E:B1:25:DB:D7:14:31:75:C9:3B:AE:0E:A3:69
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 01A1BB0FF8B8B308795501841A30ACE85774
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/2SMZS8VMHrEl29cUMXXJO64Oo2k.roa
Signing time: Sun 08 Nov 2026 12:09:08 +0000
ROA not before: Sun 08 Nov 2026 12:09:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50214
IP address blocks: 95.181.154.0/24 maxlen: 24
95.181.169.0/24 maxlen: 24
95.181.171.0/24 maxlen: 24
185.12.124.0/24 maxlen: 24
185.12.125.0/24 maxlen: 24
185.12.126.0/24 maxlen: 24
185.12.127.0/24 maxlen: 24
2a12:9c0::/29 maxlen: 29
2a12:2d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:0f:f8:b8:b3:08:79:55:01:84:1a:30:ac:e8:57:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Nov 8 12:09:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d923194bc54c1eb125dbd7143175c93bae0ea369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:9e:3d:75:23:df:ef:08:0f:d3:b5:59:c6:
30:97:79:0d:de:97:3f:6d:9e:aa:58:76:83:22:cf:
a1:d8:a8:dc:8e:32:4a:41:98:59:3d:96:85:45:61:
5b:43:a9:d7:25:79:23:87:19:77:9e:87:a1:64:9e:
b4:06:c8:c1:b0:ee:1d:a3:9f:6c:75:65:82:55:a8:
d4:67:1b:0e:c8:db:09:18:22:ae:de:74:8a:68:6d:
0a:ee:08:69:8d:61:3b:7b:d1:e4:7c:3a:90:60:e7:
f4:e5:76:11:85:4f:40:41:f0:dc:59:3a:07:47:43:
41:4a:c5:2e:57:df:cc:7f:5d:bb:f9:07:5d:7c:d7:
d5:cf:0d:5f:3e:88:1b:71:c3:7f:b7:f7:9f:9b:77:
7a:d7:39:fe:c0:29:2a:46:76:a9:61:4d:59:62:b8:
eb:ac:53:58:ec:43:84:60:d2:90:3b:5f:6a:b3:8c:
8d:6d:50:17:9e:ea:98:de:87:5e:7d:90:ca:d7:c9:
1d:c7:52:e5:49:4e:c2:3f:9d:d3:51:52:2f:75:f9:
fd:d2:ae:d1:3e:72:44:f8:b7:bc:5d:ea:2d:27:81:
85:3b:0b:88:83:43:6b:f1:c3:19:b0:4d:42:14:8a:
9c:a8:08:54:fa:3f:b7:ef:ba:80:66:55:ee:c5:5c:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:23:19:4B:C5:4C:1E:B1:25:DB:D7:14:31:75:C9:3B:AE:0E:A3:69
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/2SMZS8VMHrEl29cUMXXJO64Oo2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.154.0/24
95.181.169.0/24
95.181.171.0/24
185.12.124.0/22
IPv6:
2a12:9c0::/29
2a12:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
9b:7a:93:52:bc:e0:6c:13:93:c2:bf:fd:52:76:c6:f4:f1:ec:
b2:d3:7c:24:a7:64:b9:5e:0c:b7:46:16:7d:f7:b6:f2:ec:c4:
fb:71:57:ab:a8:a0:f7:5f:07:d6:92:fe:df:1b:4d:73:49:28:
d3:54:fb:e4:46:30:74:29:03:c4:93:9b:aa:5e:bf:d3:86:8b:
a3:9a:a4:2d:d3:a2:2b:a0:1b:36:6e:02:2b:16:d5:df:b0:ba:
4c:2f:cc:30:1c:e1:9e:64:47:d6:c8:c0:27:33:46:2f:39:52:
38:a9:40:7b:82:85:7e:2c:cf:1e:a1:34:a4:ed:a2:7f:fa:09:
51:36:1c:2b:24:20:aa:f2:bc:63:f8:8f:27:c5:e5:bf:d7:74:
ef:37:14:ea:2f:db:4c:77:21:f1:05:5f:ae:42:67:c9:1f:78:
f5:78:ee:4a:cf:e3:2e:7f:4c:53:82:c6:f0:de:14:c5:96:68:
d1:4e:33:e8:1f:30:71:14:b3:30:b5:20:b3:89:39:0d:28:0e:
80:35:4c:73:c5:b0:48:0f:b3:ef:ed:10:ed:d4:33:d8:34:5f:
02:cf:d1:39:76:74:44:04:8a:96:1d:48:4e:9e:71:54:67:13:
bd:97:f3:f9:e0:5d:b1:71:ac:e9:62:17:64:96:38:17:a4:64:
3b:15:1a:2c
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAaG7D/i4swh5VQGEGjCs6Fd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0
MTc0ODAwHhcNMjYxMTA4MTIwOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTIzMTk0YmM1NGMxZWIxMjVkYmQ3MTQzMTc1YzkzYmFlMGVhMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGmePXUj3+8ID9O1WcYwl3kN3pc/
bZ6qWHaDIs+h2KjcjjJKQZhZPZaFRWFbQ6nXJXkjhxl3noehZJ60BsjBsO4do59s
dWWCVajUZxsOyNsJGCKu3nSKaG0K7ghpjWE7e9HkfDqQYOf05XYRhU9AQfDcWToH
R0NBSsUuV9/Mf127+QddfNfVzw1fPogbccN/t/efm3d61zn+wCkqRnapYU1ZYrjr
rFNY7EOEYNKQO19qs4yNbVAXnuqY3odefZDK18kdx1LlSU7CP53TUVIvdfn90q7R
PnJE+Le8XeotJ4GFOwuIg0Nr8cMZsE1CFIqcqAhU+j+377qAZlXuxVyMNQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFNkjGUvFTB6xJdvXFDF1yTuuDqNpMB8GA1UdIwQY
MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvMlNNWlM4Vk1IckVsMjljVU1YWEpPNjRPbzJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQAX7WaAwQA
X7WpAwQAX7WrAwQCuQx8MBQEAgACMA4DBQMqEgnAAwUDKhItQDANBgkqhkiG9w0B
AQsFAAOCAQEAm3qTUrzgbBOTwr/9UnbG9PHsstN8JKdkuV4Mt0YWffe28uzE+3FX
q6ig918H1pL+3xtNc0ko01T75EYwdCkDxJObql6/04aLo5qkLdOiK6AbNm4CKxbV
37C6TC/MMBzhnmRH1sjAJzNGLzlSOKlAe4KFfizPHqE0pO2if/oJUTYcKyQgqvK8
Y/iPJ8Xlv9d07zcU6i/bTHch8QVfrkJnyR949XjuSs/jLn9MU4LG8N4UxZZo0U4z
6B8wcRSzMLUgs4k5DSgOgDVMc8WwSA+z7+0Q7dQz2DRfAs/ROXZ0RASKlh1ITp5x
VGcTvZfz+eBdsXGs6WIXZJY4F6RkOxUaLA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:33:59 2026 by rpki-client