Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/scipXrLku0FsLTMhFiRQqW2YNNI.roa
File: scipXrLku0FsLTMhFiRQqW2YNNI.roa (raw, json)
Hash identifier: 27jUzZWoywelCKzQdsVleudIQaMJ5nu6JvgSeIJacw8=
Subject key identifier: B1:C8:A9:5E:B2:E4:BB:41:6C:2D:33:21:16:24:50:A9:6D:98:34:D2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019DAF06B9DCA82D6EF34B2E21FF3138E189
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/scipXrLku0FsLTMhFiRQqW2YNNI.roa
Signing time: Tue 21 Apr 2026 07:52:26 +0000
ROA not before: Tue 21 Apr 2026 07:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1099991
IP address blocks: 95.111.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:06:b9:dc:a8:2d:6e:f3:4b:2e:21:ff:31:38:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Apr 21 07:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1c8a95eb2e4bb416c2d3321162450a96d9834d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d2:ac:ed:eb:0a:f4:b0:86:d0:05:da:63:e7:
43:38:b3:1e:c8:fa:62:8a:04:bd:09:f6:31:19:ae:
71:3f:14:95:59:f4:f9:bf:21:1c:1b:bd:a1:f9:85:
7d:67:36:2c:84:78:30:8f:e8:3e:13:33:a4:8c:24:
f6:af:c3:d9:4a:ca:93:3a:ce:b6:b0:ae:8d:7a:c8:
b7:20:eb:cc:72:93:e2:13:f1:29:67:44:79:69:42:
c7:a1:23:5b:f6:9c:5d:6d:00:7a:b3:46:ec:45:d8:
ae:99:c2:cc:90:29:2e:ea:d6:61:68:83:3a:5c:41:
c2:2f:d3:53:91:b8:07:c0:a1:53:a3:37:1c:97:a3:
30:fe:0b:a6:d7:f3:62:a7:14:68:82:5f:af:e3:06:
b3:e1:ca:e9:46:41:60:aa:9d:c3:1d:0d:2d:de:80:
b0:bd:9d:d4:62:99:bd:0d:2a:c0:68:5c:64:9a:5a:
1f:29:6c:05:57:71:83:8d:e9:e1:62:44:59:26:d6:
c1:56:59:4f:10:8c:ef:01:03:e1:ac:c4:ca:eb:3c:
05:d2:a1:b0:94:46:4f:f5:c1:90:e4:2b:ac:a9:d6:
98:17:7d:b5:95:d9:7d:ab:6d:24:d7:8c:52:cb:9c:
1d:7b:80:6e:e5:df:99:6a:68:e3:d2:d1:3d:4e:33:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:A9:5E:B2:E4:BB:41:6C:2D:33:21:16:24:50:A9:6D:98:34:D2
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/scipXrLku0FsLTMhFiRQqW2YNNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f3:0d:6c:19:63:45:9d:c8:d5:fb:8d:bb:7f:f2:23:d9:64:
d4:d4:4d:d5:55:ac:83:7e:42:29:08:f0:32:7d:d6:0a:f4:23:
c3:24:80:51:2e:07:0c:8e:c2:5d:bb:79:28:af:fd:72:92:4e:
3f:ef:bd:73:5d:8e:3b:ad:ff:c2:bd:87:57:45:d4:c8:98:0c:
40:7c:9e:a8:13:f1:44:51:69:e6:f7:d2:85:67:6e:97:9b:5b:
d9:5e:1e:c1:a5:86:7f:cf:f2:94:16:31:a6:eb:84:bd:f1:f3:
29:30:2c:68:55:9e:bf:2f:c2:70:fd:52:38:ff:01:76:52:06:
42:a1:56:b8:7c:86:a6:56:64:c2:f3:c4:7c:49:3c:49:a2:d2:
cd:af:ba:e1:b5:27:a1:5f:31:8b:c7:ef:ad:89:df:ad:48:38:
bf:0d:29:a2:4b:ae:ea:58:0d:be:b1:a4:e1:53:c2:b3:84:60:
79:c0:bd:88:77:0c:75:48:55:f9:f3:0c:1a:07:68:26:26:21:
01:fe:d0:a9:6f:67:29:7a:a3:26:f7:f9:68:0d:e9:0b:85:eb:
e9:d8:40:0e:c0:ca:59:9f:9f:8f:45:f9:98:c3:d9:09:06:ec:
91:14:e4:3f:18:33:fe:48:bd:a1:05:66:83:a2:ad:fc:5a:aa:
a4:05:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:50 2026 by rpki-client