Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/Pd2rMwFiHNfo8LsVySgeVLzTGq0.roa
File: Pd2rMwFiHNfo8LsVySgeVLzTGq0.roa (raw, json)
Hash identifier: sdAzHA/hidfaS5zNstJ0MbK05F4160hrzBGMOr4TmYo=
Subject key identifier: 3D:DD:AB:33:01:62:1C:D7:E8:F0:BB:15:C9:28:1E:54:BC:D3:1A:AD
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019F70E578F4B0A5F62630B4676C71FF5CF7
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/Pd2rMwFiHNfo8LsVySgeVLzTGq0.roa
Signing time: Fri 17 Jul 2026 16:25:14 +0000
ROA not before: Fri 17 Jul 2026 16:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60441
IP address blocks: 95.169.208.0/24 maxlen: 24
95.169.209.0/24 maxlen: 24
95.169.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:e5:78:f4:b0:a5:f6:26:30:b4:67:6c:71:ff:5c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jul 17 16:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dddab3301621cd7e8f0bb15c9281e54bcd31aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:88:f3:5b:d3:a0:b9:67:4a:2f:b0:14:17:
a5:60:8b:6f:4d:13:ca:e7:b9:49:ce:87:97:d3:b8:
b8:35:11:33:6e:15:82:1b:bf:50:a2:11:9a:5b:59:
bb:15:c9:13:fc:63:bc:bf:06:01:47:4e:c2:21:98:
d6:6e:b0:1b:5e:56:c9:e9:28:c3:b9:94:f9:4f:38:
d9:09:c9:d4:78:d0:eb:04:4d:6f:6d:01:10:2e:3e:
18:3d:12:b5:28:1b:5a:31:c5:8c:c4:a6:d7:a8:f8:
ee:75:26:ff:98:9e:a6:b4:56:48:e2:ec:af:0b:1d:
c8:a9:58:b5:23:07:cc:3a:a3:0c:7d:6e:76:6e:19:
ff:03:6a:91:81:e0:65:68:73:df:95:53:65:20:81:
7e:c6:84:8b:f2:69:84:a2:97:87:70:89:a4:73:e1:
57:92:22:df:ca:0b:0d:07:76:41:42:83:da:a1:14:
bf:e9:2c:a2:fc:07:50:dc:7c:a5:26:6e:b6:1c:6d:
b8:a8:c5:4b:e6:ca:8f:52:d0:9c:7c:d1:50:1c:59:
3f:ea:f6:40:e5:cc:9c:b3:29:d0:05:5c:44:14:b6:
e9:4c:13:3d:09:f9:75:3c:9b:7f:de:21:65:df:77:
02:7e:8d:b2:35:9e:c7:2c:4d:0e:e7:a9:3a:41:85:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DD:AB:33:01:62:1C:D7:E8:F0:BB:15:C9:28:1E:54:BC:D3:1A:AD
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/Pd2rMwFiHNfo8LsVySgeVLzTGq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.208.0/23
95.169.211.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:59:ea:84:11:e0:5a:b7:1c:12:c8:e2:9c:b3:14:ac:0d:ca:
9a:03:17:14:b2:ca:9d:34:2e:9b:b3:5e:34:cc:70:57:c3:cf:
4a:0c:c9:a6:92:9a:44:0b:57:fb:54:5c:88:b9:ab:0a:67:ec:
a9:55:90:bb:67:4d:10:85:fe:8a:b0:1e:73:b3:66:ea:be:ac:
47:dc:c3:50:77:e8:56:1e:fa:04:bb:b3:43:61:33:a8:c8:cb:
75:65:0c:79:4b:cd:a3:1d:8d:da:a5:69:b1:c3:c1:3a:8b:e7:
28:d9:e1:f6:4a:05:9e:3a:63:46:47:8c:8a:c6:bd:14:6a:5b:
cd:51:34:db:f4:0a:fa:28:d6:c1:05:b8:a3:05:2f:30:f3:f5:
c3:b3:7e:c5:ee:b9:70:f1:dc:4a:37:d0:95:56:2c:7f:7c:45:
d4:a5:9a:89:9d:ed:b0:23:e5:b0:75:28:00:26:77:f4:b3:94:
3a:fd:f5:d5:d0:7a:c9:d4:c0:f7:a6:d9:6c:de:b6:b6:d3:4e:
b3:bb:2f:e4:8c:a6:f6:7a:be:8d:0f:7f:4d:17:fd:49:cf:f5:
3f:13:da:9f:13:2a:d5:3a:b4:7b:1b:ad:0f:60:62:05:a9:7c:
c4:65:eb:26:e4:d1:f5:d1:58:c7:ba:7c:32:da:c9:a3:bc:aa:
db:ac:e3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:42 2026 by rpki-client