Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/rDUifGekk8qVhQiSXv8_kmhjei8.roa
File: rDUifGekk8qVhQiSXv8_kmhjei8.roa (raw, json)
Hash identifier: 72Tx5XdGphLCZt+gBuxxEvQiHolN3IZYceUsTAMmbFQ=
Subject key identifier: AC:35:22:7C:67:A4:93:CA:95:85:08:92:5E:FF:3F:92:68:63:7A:2F
Certificate issuer: /CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
Certificate serial: 019F2368FA06014B78C5A883C4574017402D
Authority key identifier: 4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/rDUifGekk8qVhQiSXv8_kmhjei8.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210894
IP address blocks: 95.66.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fa:06:01:4b:78:c5:a8:83:c4:57:40:17:40:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac35227c67a493ca958508925eff3f9268637a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:ce:8f:d8:78:b4:41:83:04:c7:91:0c:8c:
64:fc:b8:f1:60:c1:f0:49:ef:3d:d0:f3:a6:e4:2f:
65:5a:5c:27:09:8b:64:dc:fb:ec:37:2f:bc:f7:e5:
df:2c:fd:70:5e:29:b3:6b:8e:7d:90:c4:df:87:5f:
e3:4a:35:8b:0b:a6:d4:70:5c:21:32:a6:10:ec:61:
3f:77:54:36:8f:39:89:6c:26:54:27:8a:7e:33:f6:
63:5b:ef:8b:7b:e9:91:be:da:0b:0f:dd:3b:eb:b9:
60:01:cc:17:22:92:c9:01:45:3b:ee:b6:84:48:2b:
35:66:ef:f0:63:d9:35:03:ae:25:2d:51:34:13:bd:
9d:9b:45:9b:c7:43:2a:48:62:4b:5f:58:1f:76:4a:
57:f6:57:e9:b0:70:58:20:2c:8b:1a:78:5d:83:a7:
15:b7:7d:7f:2c:11:e8:09:ca:18:3e:5f:0b:03:22:
ef:25:20:0e:07:76:5e:0a:b1:bd:a2:ff:42:35:23:
1d:67:86:f1:b0:e3:73:19:0a:a9:51:f4:e4:98:aa:
17:1a:8d:2c:97:a4:43:b5:04:39:06:08:34:1a:c6:
52:41:48:10:df:bc:73:6e:f6:12:fe:ca:ee:eb:43:
86:3f:db:91:8c:a3:c6:a0:5b:b8:f3:1f:f5:dd:7e:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:22:7C:67:A4:93:CA:95:85:08:92:5E:FF:3F:92:68:63:7A:2F
X509v3 Authority Key Identifier:
keyid:4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/rDUifGekk8qVhQiSXv8_kmhjei8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.198.0/23
Signature Algorithm: sha256WithRSAEncryption
06:ea:47:2f:c0:ab:0f:d1:bb:16:f8:5b:35:e7:ac:90:43:c4:
0a:a9:5d:35:a3:34:13:c3:5b:58:7e:07:ca:50:5c:be:53:68:
a5:1e:63:ec:8a:0f:53:b1:81:34:6d:17:c8:6c:ac:cc:2d:af:
32:88:0a:96:59:e1:57:8a:13:a8:d2:3f:ff:5c:54:fd:11:bf:
22:d0:7e:b3:fe:a0:cc:a8:2b:dc:00:c8:57:c8:90:da:d1:76:
6f:30:75:d4:28:9d:aa:f7:ac:99:60:56:07:a0:53:b7:6e:f1:
32:2a:30:24:80:cd:83:30:67:8c:f3:8f:f1:80:9b:cd:e6:c6:
ff:3e:50:b3:58:6c:e4:5a:d3:bb:c4:0f:c7:34:37:3d:53:08:
47:02:16:75:8f:9d:b8:f2:92:19:34:50:15:ad:64:66:d0:6b:
44:35:bc:b2:9d:57:f8:84:b0:50:ea:50:37:f1:72:d6:ef:84:
1d:10:4c:9c:12:b9:9b:33:81:70:e0:06:ca:c1:2d:52:08:74:
e5:44:6f:69:9a:a0:07:f9:ed:88:dd:49:3f:14:52:d8:39:c5:
b7:41:58:e8:80:48:68:67:ab:59:26:ba:81:46:49:94:da:e2:
bf:5d:21:9e:37:44:ba:34:4c:1b:38:3c:46:f8:2e:79:6d:20:
1b:8c:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:25 2026 by rpki-client