Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/C3dLx6qeIik8HQR643ArrOFcxWw.roa
File: C3dLx6qeIik8HQR643ArrOFcxWw.roa (raw, json)
Hash identifier: pfrW5zSUbSnHsyVL3Nxv55eIHRIZ43KSi08lC2fGId4=
Subject key identifier: 0B:77:4B:C7:AA:9E:22:29:3C:1D:04:7A:E3:70:2B:AC:E1:5C:C5:6C
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 019F23683704D6BC3D0BE2A5FE652B63858B
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/C3dLx6qeIik8HQR643ArrOFcxWw.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28709
IP address blocks: 95.142.201.0/24 maxlen: 24
95.142.202.0/24 maxlen: 24
95.142.203.0/24 maxlen: 24
185.32.249.0/24 maxlen: 24
185.32.251.0/24 maxlen: 24
2a00:bdc0:e003::/48 maxlen: 48
2a00:bdc0:e004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:04:d6:bc:3d:0b:e2:a5:fe:65:2b:63:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b774bc7aa9e22293c1d047ae3702bace15cc56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:a3:71:20:fd:0e:b8:c5:a3:7f:e3:c3:98:
d1:24:30:60:b5:da:ab:47:70:82:ac:1a:95:82:6b:
32:92:cc:53:7b:70:89:a7:90:8e:2d:2f:f3:93:e9:
2b:35:1d:2e:d6:12:61:0e:2b:4a:4a:37:57:86:1d:
66:ff:50:86:b2:a9:f6:8d:13:37:84:bd:b8:24:74:
c2:49:87:97:cf:88:d8:dd:c5:10:b0:f5:f8:12:21:
ad:da:d9:ec:db:86:32:98:d9:3a:eb:60:0f:6f:c3:
be:e9:c4:3b:f2:4c:7d:bd:ce:26:ed:25:b9:68:fa:
78:32:2b:0d:8b:f0:95:e4:59:71:e5:c9:25:b3:b1:
2f:7d:9f:97:98:af:3f:fb:f5:4c:0d:3c:fa:0a:2e:
ff:ba:8a:41:8a:30:92:d1:31:97:01:e3:9e:98:f1:
13:8a:2b:41:8b:a8:da:71:52:65:4f:fe:a1:c8:cf:
15:b2:e5:0f:c2:fc:c2:3c:f2:a8:85:8e:a8:2e:d9:
fb:67:0e:78:46:4c:48:97:3f:9f:37:9e:e5:95:6c:
90:5e:9e:c8:57:44:fb:c5:64:ef:27:68:22:1c:ec:
a3:bb:fa:8b:8c:41:10:1c:f0:31:f7:2c:bb:ae:89:
4c:64:19:e2:b9:30:ed:3c:83:ca:9d:d8:b4:e9:ae:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:4B:C7:AA:9E:22:29:3C:1D:04:7A:E3:70:2B:AC:E1:5C:C5:6C
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/C3dLx6qeIik8HQR643ArrOFcxWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.201.0-95.142.203.255
185.32.249.0/24
185.32.251.0/24
IPv6:
2a00:bdc0:e003::-2a00:bdc0:e004:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:dd:0d:e2:88:23:02:48:c1:78:a7:30:db:14:7a:1d:b4:92:
37:31:d6:e2:bf:74:98:d6:aa:56:9e:c6:f6:80:6e:05:38:be:
82:cf:b1:04:f1:c0:c1:e3:a3:aa:2f:15:78:6b:ab:83:d6:52:
7f:5b:79:05:78:03:37:0d:36:75:e0:11:f3:73:5b:63:e3:79:
bb:56:cb:de:e5:d3:2c:5b:f6:2b:75:45:da:92:17:95:5f:20:
28:1c:a6:0c:79:13:12:13:5b:f5:3d:bd:72:8e:50:3c:0f:93:
92:b7:94:4c:03:41:08:8a:ff:21:76:ae:05:c5:75:9c:3f:03:
dd:3c:be:8e:1b:96:ea:07:d4:ad:88:ef:8d:81:0a:53:57:55:
64:4d:1d:ef:c3:de:85:2e:16:7b:01:a1:ce:24:68:d1:80:b3:
06:85:fd:1e:38:07:30:f8:ac:19:b8:7d:bc:38:16:30:ad:9f:
76:6d:79:18:ca:48:d8:20:8f:d5:3c:5f:3d:af:02:d6:af:9c:
ed:f8:40:26:9b:59:f4:ac:77:d5:e3:db:42:f6:c8:0a:4f:8e:
42:f7:51:80:59:9e:29:fc:0e:24:dd:20:e4:1b:6e:77:33:06:
06:9a:0b:cb:e5:ff:6c:b3:64:5d:bb:7f:cd:33:28:a2:b3:2b:
04:af:7d:ac
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ8jaDcE1rw9C+Kl/mUrY4WLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODVkMTQ3NjBmOTg2NjJiOTg5ODkzZDhhMWU1ZTA1Y2Qz
YTEzZTQwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjc3NGJjN2FhOWUyMjI5M2MxZDA0N2FlMzcwMmJhY2UxNWNjNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46ajcSD9DrjFo3/jw5jRJDBgtdqr
R3CCrBqVgmsyksxTe3CJp5COLS/zk+krNR0u1hJhDitKSjdXhh1m/1CGsqn2jRM3
hL24JHTCSYeXz4jY3cUQsPX4EiGt2tns24YymNk662APb8O+6cQ78kx9vc4m7SW5
aPp4MisNi/CV5Flx5ckls7EvfZ+XmK8/+/VMDTz6Ci7/uopBijCS0TGXAeOemPET
iitBi6jacVJlT/6hyM8VsuUPwvzCPPKohY6oLtn7Zw54RkxIlz+fN57llWyQXp7I
V0T7xWTvJ2giHOyju/qLjEEQHPAx9yy7rolMZBniuTDtPIPKndi06a5TuQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFAt3S8eqniIpPB0EeuNwK6zhXMVsMB8GA1UdIwQY
MBaAFJ+F0Udg+YZiuYmJPYoeXgXNOhPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt
ZjA5M2UxN2IyN2VmLzEvQzNkTHg2cWVJaWs4SFFSNjQzQXJyT0ZjeFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm
LzEvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAgBAIAATAaMAwDBABfjskD
BAJfjsgDBAC5IPkDBAC5IPswGgQCAAIwFDASAwcAKgC9wOADAwcAKgC9wOAEMA0G
CSqGSIb3DQEBCwUAA4IBAQAJ3Q3iiCMCSMF4pzDbFHodtJI3Mdbiv3SY1qpWnsb2
gG4FOL6Cz7EE8cDB46OqLxV4a6uD1lJ/W3kFeAM3DTZ14BHzc1tj43m7Vsve5dMs
W/YrdUXakheVXyAoHKYMeRMSE1v1Pb1yjlA8D5OSt5RMA0EIiv8hdq4FxXWcPwPd
PL6OG5bqB9StiO+NgQpTV1VkTR3vw96FLhZ7AaHOJGjRgLMGhf0eOAcw+KwZuH28
OBYwrZ92bXkYykjYII/VPF89rwLWr5zt+EAmm1n0rHfV49tC9sgKT45C91GAWZ4p
/A4k3SDkG253MwYGmgvL5f9ss2Rdu3/NMyiisysEr32s
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:43 2026 by rpki-client