Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/LSv85TytJIoQEWmVbakWmpSzsXg.roa
File: LSv85TytJIoQEWmVbakWmpSzsXg.roa (raw, json)
Hash identifier: OKx3aDH8rGZoQUqJkmp0PYp64vZE196GR3ZKNSKRsgo=
Subject key identifier: 2D:2B:FC:E5:3C:AD:24:8A:10:11:69:95:6D:A9:16:9A:94:B3:B1:78
Certificate issuer: /CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
Certificate serial: 019F2368F6C24BFE4EC1E736CA0967A9188C
Authority key identifier: 4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/LSv85TytJIoQEWmVbakWmpSzsXg.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35645
IP address blocks: 95.66.128.0/19 maxlen: 19
95.66.160.0/19 maxlen: 19
95.66.192.0/22 maxlen: 22
95.66.196.0/23 maxlen: 23
95.66.200.0/23 maxlen: 23
95.66.202.0/23 maxlen: 23
95.66.204.0/23 maxlen: 23
95.66.206.0/23 maxlen: 23
95.66.208.0/22 maxlen: 22
95.66.212.0/22 maxlen: 22
95.66.216.0/22 maxlen: 22
95.66.220.0/23 maxlen: 23
95.66.222.0/23 maxlen: 23
95.66.224.0/23 maxlen: 23
95.66.227.0/24 maxlen: 24
95.66.228.0/23 maxlen: 23
95.66.230.0/23 maxlen: 23
95.66.237.0/24 maxlen: 24
95.66.238.0/23 maxlen: 23
95.66.240.0/22 maxlen: 22
95.66.244.0/24 maxlen: 24
95.66.245.0/24 maxlen: 24
95.66.246.0/23 maxlen: 23
95.66.248.0/23 maxlen: 23
95.66.250.0/23 maxlen: 23
95.66.252.0/23 maxlen: 23
95.66.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f6:c2:4b:fe:4e:c1:e7:36:ca:09:67:a9:18:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d2bfce53cad248a101169956da9169a94b3b178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:f9:de:a8:cd:d4:48:c9:c4:8e:f5:53:01:
9e:0e:77:dc:92:84:ba:1c:59:71:c2:dd:2a:6e:df:
44:c2:af:c6:02:09:b1:eb:61:db:df:7d:a0:bd:3e:
c6:c6:11:62:05:ca:2c:6e:8c:a0:7d:53:f1:9b:e4:
4f:01:3c:2a:0c:1d:e8:64:e4:1a:84:8d:62:a6:73:
40:80:f3:08:f2:72:a0:ee:e5:76:75:e4:41:b0:40:
c5:a1:a1:52:1a:0b:f1:d1:a4:dd:ee:4a:ea:7b:ea:
3a:26:54:f8:3e:fa:86:b9:7e:a5:84:1d:0b:7d:26:
f4:af:3c:87:2b:d4:21:91:a3:2e:0a:a7:78:a5:3b:
0b:b4:60:02:f6:e3:8b:6c:b9:45:18:08:8b:60:7a:
d1:9c:72:51:75:21:59:45:91:6f:59:46:db:31:7c:
a0:9f:1c:1e:3a:ec:14:fb:3a:d0:d1:b9:25:9b:93:
11:7e:3d:af:94:f1:20:f1:8c:35:54:57:44:10:5a:
18:f6:55:dc:c8:86:45:fd:62:01:2e:c0:ba:da:aa:
77:ed:3f:d3:64:be:4c:4d:5a:b2:69:30:09:ff:61:
23:a9:93:73:10:dc:34:b5:a6:54:ff:12:f6:c8:73:
d3:7e:f1:c5:e8:43:27:af:5c:27:ed:b7:f1:34:8d:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:FC:E5:3C:AD:24:8A:10:11:69:95:6D:A9:16:9A:94:B3:B1:78
X509v3 Authority Key Identifier:
keyid:4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/LSv85TytJIoQEWmVbakWmpSzsXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.128.0-95.66.197.255
95.66.200.0-95.66.225.255
95.66.227.0-95.66.231.255
95.66.237.0-95.66.255.255
Signature Algorithm: sha256WithRSAEncryption
04:54:f7:f9:2c:13:ad:25:fd:9b:ad:a9:ff:ff:2b:e8:37:63:
b2:dd:77:c1:73:6e:7c:8c:49:e6:23:eb:05:ef:8b:77:d1:ed:
31:fa:8b:6a:c4:c1:5b:c2:f7:b5:1c:5e:f5:75:dd:02:16:87:
bc:98:61:01:44:25:fd:3b:2c:43:2f:5b:8f:d0:48:12:7e:36:
e0:9c:ce:7c:12:64:c3:3f:55:94:96:43:4c:d4:2c:48:d2:30:
af:90:9c:af:bf:d2:45:94:93:87:47:3e:ad:51:0a:4c:41:ad:
12:f9:fa:62:bc:e5:63:93:62:55:64:d9:c9:88:1c:93:48:2b:
76:f9:7b:98:63:21:0f:62:a5:65:14:33:37:dc:fb:c0:7e:ce:
a9:fb:c6:53:2d:14:52:7f:a6:a5:d3:46:b8:76:d6:70:aa:1f:
69:69:d6:5d:2b:2c:17:3d:33:09:fd:81:8f:ce:65:0d:3c:7f:
6d:6b:c8:54:17:f5:c0:ac:ff:22:ce:79:f3:3f:36:9f:62:60:
f3:01:69:04:6a:d6:a5:0f:ff:3d:74:d4:95:cb:ac:b6:fe:96:
25:42:2a:86:32:a7:f8:0d:ec:1e:e4:6e:eb:da:e2:2f:13:db:
0a:b5:86:0e:d1:09:15:ca:2d:b3:3d:27:b7:3e:76:0c:43:65:
2e:1b:77:8b
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZ8jaPbCS/5Owec2yglnqRiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYmRhOWE2ODQyZDQzZDI2YjdlN2Q4NTJmMTc0NzM5MWVh
ODNlZDkwHhcNMjYwNzAyMTUxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDJiZmNlNTNjYWQyNDhhMTAxMTY5OTU2ZGE5MTY5YTk0YjNiMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrL53qjN1EjJxI71UwGeDnfckoS6
HFlxwt0qbt9Ewq/GAgmx62Hb332gvT7GxhFiBcosboygfVPxm+RPATwqDB3oZOQa
hI1ipnNAgPMI8nKg7uV2deRBsEDFoaFSGgvx0aTd7krqe+o6JlT4PvqGuX6lhB0L
fSb0rzyHK9QhkaMuCqd4pTsLtGAC9uOLbLlFGAiLYHrRnHJRdSFZRZFvWUbbMXyg
nxweOuwU+zrQ0bklm5MRfj2vlPEg8Yw1VFdEEFoY9lXcyIZF/WIBLsC62qp37T/T
ZL5MTVqyaTAJ/2EjqZNzENw0taZU/xL2yHPTfvHF6EMnr1wn7bfxNI3qeQIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFC0r/OU8rSSKEBFplW2pFpqUs7F4MB8GA1UdIwQY
MBaAFEu9qaaELUPSa359hS8XRzkeqD7ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzcycHBvUXRROUpyZm4yRkx4ZEhPUjZvUHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGIt
MTI3OGE0MmUwOTJhLzEvTFN2ODVUeXRKSW9RRVdtVmJha1dtcFN6c1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGItMTI3OGE0MmUwOTJh
LzEvUzcycHBvUXRROUpyZm4yRkx4ZEhPUjZvUHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAATA3MAwDBAdfQoAD
BAFfQsQwDAMEA19CyAMEAV9C4DAMAwQAX0LjAwQDX0LgMAsDBABfQu0DAwBfQjAN
BgkqhkiG9w0BAQsFAAOCAQEABFT3+SwTrSX9m62p//8r6Ddjst13wXNufIxJ5iPr
Be+Ld9HtMfqLasTBW8L3tRxe9XXdAhaHvJhhAUQl/TssQy9bj9BIEn424JzOfBJk
wz9VlJZDTNQsSNIwr5Ccr7/SRZSTh0c+rVEKTEGtEvn6YrzlY5NiVWTZyYgck0gr
dvl7mGMhD2KlZRQzN9z7wH7OqfvGUy0UUn+mpdNGuHbWcKofaWnWXSssFz0zCf2B
j85lDTx/bWvIVBf1wKz/Is558z82n2Jg8wFpBGrWpQ//PXTUlcustv6WJUIqhjKn
+A3sHuRu69riLxPbCrWGDtEJFcotsz0ntz52DENlLht3iw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:38:53 2026 by rpki-client