Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/fAookbJg7v_4goZOuM03kh2aIFo.roa
File: fAookbJg7v_4goZOuM03kh2aIFo.roa (raw, json)
Hash identifier: GLQCdiLTv/QzuzozlLAT8cknURwYXn2Qux/2wYuMsDI=
Subject key identifier: 7C:0A:28:91:B2:60:EE:FF:F8:82:86:4E:B8:CD:37:92:1D:9A:20:5A
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 01A1A3405ACB09C99CFE11967BA3B6EFD7C8
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/fAookbJg7v_4goZOuM03kh2aIFo.roa
Signing time: Tue 03 Nov 2026 21:11:06 +0000
ROA not before: Tue 03 Nov 2026 21:11:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 95.181.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:40:5a:cb:09:c9:9c:fe:11:96:7b:a3:b6:ef:d7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Nov 3 21:11:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c0a2891b260eefff882864eb8cd37921d9a205a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:ff:d4:22:45:23:21:2c:7e:d2:ae:cf:55:
0a:ef:ad:58:7d:37:72:e3:5c:60:b0:cd:6e:3b:47:
95:d5:08:2d:4b:ee:ba:49:b3:03:c5:3f:8a:83:7d:
fe:78:bc:c7:22:39:02:f8:7b:bc:ac:5a:53:d4:ca:
ee:6d:14:bb:af:23:53:82:e3:37:ca:bd:50:e2:d2:
ca:e6:1e:3b:1a:be:9d:c9:85:2c:e1:a1:a8:f6:09:
96:b0:8d:e4:98:66:99:8d:31:b7:d5:49:f0:16:72:
12:54:89:03:ca:f4:58:dd:38:71:c4:aa:c0:4b:ea:
6e:1c:ed:f9:91:90:0b:36:93:f2:5b:01:c5:54:a8:
ed:71:76:94:fc:e2:88:2d:86:98:b6:b6:f6:07:35:
e4:ef:2e:0c:6e:2a:a2:df:35:30:f8:d5:1b:57:a1:
e3:0e:fe:93:f2:a0:43:ad:02:d5:ce:6e:c9:41:d1:
89:19:27:66:43:95:f3:fd:cf:4f:02:fc:54:b9:e8:
8d:83:f7:76:8d:39:f4:07:ea:9e:17:6a:2f:d9:b5:
77:1e:0c:f3:f1:81:1d:79:38:6e:46:43:c7:d4:14:
c4:27:55:48:e4:e0:00:44:b2:83:a5:6a:64:25:84:
21:25:f8:d3:64:c5:da:de:ff:c4:49:f8:af:8a:fc:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0A:28:91:B2:60:EE:FF:F8:82:86:4E:B8:CD:37:92:1D:9A:20:5A
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/fAookbJg7v_4goZOuM03kh2aIFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.173.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7f:6c:04:65:03:ba:a5:c6:2e:ff:38:c8:c5:79:e2:be:0b:
1e:c8:37:6e:17:e6:3c:86:29:e3:cc:6c:b2:08:df:e1:28:e6:
59:6a:1c:4d:03:06:98:87:81:fd:63:e3:e3:9d:d4:ff:4b:78:
67:81:54:8c:7d:83:10:67:90:37:54:40:db:eb:ed:1e:3e:e6:
e4:15:c1:9c:26:b4:e1:09:b8:3e:e1:9c:6c:28:ee:47:bc:64:
78:ac:e0:04:5a:c8:fd:36:4c:d1:80:b1:72:f8:02:f2:e8:4e:
3f:e8:00:7c:2f:9b:4d:aa:da:d0:12:ac:94:e2:76:b9:7a:c0:
6b:3f:4f:af:c5:75:a2:0f:ab:bd:0b:e6:f8:7b:bd:70:bb:fb:
c9:f2:9e:74:b4:d3:65:ea:92:f0:b8:d2:d3:11:89:71:6c:b8:
65:65:ae:e7:c1:31:d8:63:6e:d3:7e:4d:6c:93:7e:6f:61:87:
b4:a1:e9:b0:4c:91:56:48:31:52:7f:49:64:e2:03:6c:e2:b1:
b0:24:94:4f:fb:2b:0d:fa:b0:c7:04:18:fc:96:97:ce:ee:de:
6f:30:90:be:35:cb:ce:37:ac:b8:b3:73:84:24:c3:4a:7e:d0:
a8:b0:ed:96:ab:9b:b4:0f:4d:bd:11:98:a9:06:89:54:95:ad:
e4:82:89:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:13 2026 by rpki-client