Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/iPUEtdk8uK7It4e5YIwhrS-blIY.roa
File: iPUEtdk8uK7It4e5YIwhrS-blIY.roa (raw, json)
Hash identifier: cCrIx5/3xv9yTrz1ALRR0gRJeVouvLvQFBFUHgTs3vc=
Subject key identifier: 88:F5:04:B5:D9:3C:B8:AE:C8:B7:87:B9:60:8C:21:AD:2F:9B:94:86
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 019F236838A0768A2BF60EFDD745E2BC6B8E
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/iPUEtdk8uK7It4e5YIwhrS-blIY.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60476
IP address blocks: 95.142.206.0/24 maxlen: 24
2a00:bdc0:e006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:a0:76:8a:2b:f6:0e:fd:d7:45:e2:bc:6b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88f504b5d93cb8aec8b787b9608c21ad2f9b9486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:2b:f9:d5:60:1c:08:cd:02:5a:a2:f2:3e:
96:55:54:78:f9:f0:04:2a:00:9e:31:6f:10:55:bc:
99:0f:9e:4b:c9:1e:c6:0a:07:0e:f3:8f:23:17:e3:
42:14:97:e9:98:d0:30:66:33:9b:db:7e:07:da:9b:
f6:d9:9c:fd:4b:d3:d1:d8:7c:8e:ae:a5:68:17:0c:
9a:51:88:da:7e:99:3f:e5:98:db:29:45:7f:b0:2a:
c2:4d:32:f3:70:10:69:7d:50:89:06:6b:00:bb:4f:
97:08:37:db:c2:45:25:65:50:2c:aa:83:cc:4c:99:
b4:80:b5:af:ba:32:6a:ae:b0:6f:5a:0f:56:ea:8f:
04:67:28:45:ac:bf:e1:37:8c:13:2d:6f:c6:d1:45:
76:de:88:e5:b2:f6:06:a0:ba:7f:9a:41:91:b2:e9:
80:8d:54:95:b3:bb:30:bd:f8:ad:17:32:ca:cc:b9:
d7:ce:56:a8:da:0e:d9:19:04:82:4d:f0:16:1f:29:
e7:30:79:1c:63:bf:b5:e2:67:1b:94:4a:84:d5:a4:
c8:3e:24:8e:fd:fa:13:8b:2e:3a:f1:81:8f:37:b6:
c5:e5:cc:ab:83:50:64:90:40:28:00:d9:15:1b:c6:
12:d5:d3:8c:04:ec:b5:f3:14:3f:ac:1f:61:83:81:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F5:04:B5:D9:3C:B8:AE:C8:B7:87:B9:60:8C:21:AD:2F:9B:94:86
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/iPUEtdk8uK7It4e5YIwhrS-blIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.206.0/24
IPv6:
2a00:bdc0:e006::/48
Signature Algorithm: sha256WithRSAEncryption
7f:1e:59:39:6c:5c:42:81:94:7d:48:60:19:9e:b0:81:df:93:
95:47:4f:7c:29:26:99:fd:89:bd:1e:94:df:08:27:32:06:4e:
8e:32:7b:c9:bd:60:a2:8d:63:df:7d:ab:45:8f:ed:f5:ae:86:
ad:59:ec:e1:d5:c0:c6:a0:a8:e8:7a:68:b7:01:4e:c3:48:1e:
42:22:08:a2:f4:93:2d:e0:1d:08:38:90:ab:97:7e:c9:60:fb:
f0:e6:f8:a0:c0:7c:c1:5a:d0:4d:f6:61:81:31:70:f3:13:ae:
78:ce:a7:5f:4a:53:4c:40:4a:23:ac:cf:b0:8e:cc:49:61:43:
ab:08:04:fd:8a:41:6a:b0:bd:a0:34:ca:7e:75:d4:17:e2:14:
fe:4a:9a:88:09:09:91:8a:18:4b:b7:8b:f1:f3:c1:da:d0:a9:
c7:fd:98:aa:9d:78:d1:1b:df:15:a9:05:91:af:b6:03:73:36:
17:2f:fe:83:eb:01:3c:81:42:0a:a0:e3:0a:6a:9f:8f:8b:9d:
eb:a8:cf:c5:3b:5e:9b:ac:b7:a0:55:f4:11:7e:d0:92:61:81:
bc:7f:7b:0f:a5:91:29:00:cc:14:cf:30:34:ac:86:70:e7:d9:
f8:86:af:51:e6:5e:d4:5f:66:21:dc:98:7e:a7:d6:cc:12:5e:
c2:4a:25:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8jaDigdoor9g7910XivGuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODVkMTQ3NjBmOTg2NjJiOTg5ODkzZDhhMWU1ZTA1Y2Qz
YTEzZTQwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGY1MDRiNWQ5M2NiOGFlYzhiNzg3Yjk2MDhjMjFhZDJmOWI5NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro4r+dVgHAjNAlqi8j6WVVR4+fAE
KgCeMW8QVbyZD55LyR7GCgcO848jF+NCFJfpmNAwZjOb234H2pv22Zz9S9PR2HyO
rqVoFwyaUYjafpk/5ZjbKUV/sCrCTTLzcBBpfVCJBmsAu0+XCDfbwkUlZVAsqoPM
TJm0gLWvujJqrrBvWg9W6o8EZyhFrL/hN4wTLW/G0UV23ojlsvYGoLp/mkGRsumA
jVSVs7swvfitFzLKzLnXzlao2g7ZGQSCTfAWHynnMHkcY7+14mcblEqE1aTIPiSO
/foTiy468YGPN7bF5cyrg1BkkEAoANkVG8YS1dOMBOy18xQ/rB9hg4HwDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIj1BLXZPLiuyLeHuWCMIa0vm5SGMB8GA1UdIwQY
MBaAFJ+F0Udg+YZiuYmJPYoeXgXNOhPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt
ZjA5M2UxN2IyN2VmLzEvaVBVRXRkazh1SzdJdDRlNVlJd2hyUy1ibElZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm
LzEvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAX47OMA8E
AgACMAkDBwAqAL3A4AYwDQYJKoZIhvcNAQELBQADggEBAH8eWTlsXEKBlH1IYBme
sIHfk5VHT3wpJpn9ib0elN8IJzIGTo4ye8m9YKKNY999q0WP7fWuhq1Z7OHVwMag
qOh6aLcBTsNIHkIiCKL0ky3gHQg4kKuXfslg+/Dm+KDAfMFa0E32YYExcPMTrnjO
p19KU0xASiOsz7COzElhQ6sIBP2KQWqwvaA0yn511BfiFP5KmogJCZGKGEu3i/Hz
wdrQqcf9mKqdeNEb3xWpBZGvtgNzNhcv/oPrATyBQgqg4wpqn4+Lneuoz8U7Xpus
t6BV9BF+0JJhgbx/ew+lkSkAzBTPMDSshnDn2fiGr1HmXtRfZiHcmH6n1swSXsJK
JUo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:59 2026 by rpki-client