Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/X_U4PTICjxMwz_zzgRb2YgODG9k.roa
File: X_U4PTICjxMwz_zzgRb2YgODG9k.roa (raw, json)
Hash identifier: v8UPV4SYAEOIqRdsOLJFm+f1ryb3otUE2YTskYRIYtM=
Subject key identifier: 5F:F5:38:3D:32:02:8F:13:30:CF:FC:F3:81:16:F6:62:03:83:1B:D9
Certificate issuer: /CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Certificate serial: 019F23688BAC80FCF24CE0D5B761D99B3F98
Authority key identifier: B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/X_U4PTICjxMwz_zzgRb2YgODG9k.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42160
IP address blocks: 81.95.112.0/20 maxlen: 20
81.95.112.0/22 maxlen: 24
81.95.112.0/24 maxlen: 24
81.95.113.0/24 maxlen: 24
81.95.114.0/24 maxlen: 24
81.95.115.0/24 maxlen: 24
81.95.116.0/24 maxlen: 24
81.95.117.0/24 maxlen: 24
81.95.118.0/23 maxlen: 23
81.95.118.0/24 maxlen: 24
81.95.119.0/24 maxlen: 24
81.95.120.0/23 maxlen: 23
81.95.120.0/24 maxlen: 24
81.95.121.0/24 maxlen: 24
81.95.122.0/23 maxlen: 23
81.95.122.0/24 maxlen: 24
81.95.123.0/24 maxlen: 24
81.95.124.0/22 maxlen: 22
81.95.124.0/24 maxlen: 24
81.95.125.0/24 maxlen: 24
81.95.126.0/24 maxlen: 24
81.95.127.0/24 maxlen: 24
185.55.92.0/22 maxlen: 22
185.55.92.0/23 maxlen: 24
185.55.93.0/24 maxlen: 24
185.55.94.0/24 maxlen: 24
185.55.95.0/24 maxlen: 24
193.110.248.0/21 maxlen: 21
193.110.248.0/23 maxlen: 23
193.110.248.0/24 maxlen: 24
193.110.249.0/24 maxlen: 24
193.110.250.0/23 maxlen: 23
193.110.250.0/24 maxlen: 24
193.110.251.0/24 maxlen: 24
193.110.252.0/22 maxlen: 22
193.110.252.0/24 maxlen: 24
193.110.253.0/24 maxlen: 24
193.110.254.0/24 maxlen: 24
193.110.255.0/24 maxlen: 24
2a02:5940::/32 maxlen: 34
2a02:5940::/34 maxlen: 34
2a02:5940:4000::/34 maxlen: 34
2a02:5940:8000::/34 maxlen: 34
2a02:5940:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8b:ac:80:fc:f2:4c:e0:d5:b7:61:d9:9b:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ff5383d32028f1330cffcf38116f66203831bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:e6:03:93:26:88:0b:d0:31:59:7d:da:a0:
15:0d:a8:58:23:47:7b:6c:3a:a5:19:b9:35:2e:f9:
4f:a5:01:75:e1:39:5e:b7:62:cb:e0:e3:2a:c9:b1:
c3:1c:b6:b6:02:e5:75:84:fa:de:de:0d:42:9f:22:
49:b8:4a:2f:9b:fe:8e:c0:cb:a2:9b:cb:2d:ca:4a:
21:77:b2:c5:df:34:51:6b:a7:1d:76:0a:62:41:e4:
fc:4e:30:aa:2c:0e:9d:14:48:1f:21:9b:24:26:9b:
b3:00:cf:fb:2e:ad:79:60:0d:df:02:2a:4b:8b:cd:
0d:56:e2:ce:56:9d:7a:85:56:7a:ca:3b:66:9d:62:
b0:d5:82:2a:6e:f2:91:c4:13:d6:42:f3:cb:94:28:
ae:12:84:ea:46:1a:27:12:6d:e9:e4:ec:31:92:f5:
e7:13:8d:43:c0:f0:c8:e0:f2:63:09:fa:34:25:7a:
07:95:0c:6e:37:1b:6e:70:3a:67:64:ab:1f:ce:df:
91:86:6b:8f:04:85:b7:3c:11:03:c3:43:ef:9a:c6:
17:09:d3:3a:27:24:1e:25:26:c4:7f:8c:5d:b7:13:
1e:04:39:8a:31:22:a4:b7:96:50:c1:aa:77:a2:76:
d5:eb:9e:3d:a2:29:0d:7a:3c:c3:4a:f3:d4:a4:70:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F5:38:3D:32:02:8F:13:30:CF:FC:F3:81:16:F6:62:03:83:1B:D9
X509v3 Authority Key Identifier:
keyid:B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/X_U4PTICjxMwz_zzgRb2YgODG9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.112.0/20
185.55.92.0/22
193.110.248.0/21
IPv6:
2a02:5940::/32
Signature Algorithm: sha256WithRSAEncryption
3b:3e:ba:a1:06:7a:b9:ac:d2:d7:b6:8f:e2:e9:b2:6b:06:ea:
2f:06:08:1b:a9:0e:19:d3:4d:a3:b7:62:af:bd:91:42:3d:1d:
10:ca:51:62:2e:88:56:55:bf:05:5d:86:ef:86:4d:1b:a4:c0:
fb:fd:03:58:81:79:6b:50:9b:00:79:88:3e:4a:95:f4:7a:27:
0c:8f:4d:cf:be:d8:19:01:0f:83:36:02:ad:4f:b2:2c:21:2c:
61:20:d5:74:97:d3:0a:f9:f1:db:45:80:29:c4:65:4a:c8:97:
b3:c6:ae:2a:94:32:20:dc:21:90:3e:52:eb:c8:c4:3d:f2:8e:
33:87:c0:63:a2:65:47:25:2b:39:39:98:9d:eb:63:f5:ea:33:
db:3a:4f:d0:2b:4e:b9:d5:8e:22:74:d0:f4:ea:bd:c0:fe:36:
80:fa:08:fa:72:2c:81:35:2e:a0:a6:72:8f:7c:7d:d8:24:15:
c4:44:55:ed:8d:4e:de:b5:df:2e:a0:5f:f6:09:16:9d:85:04:
fb:da:34:13:43:d4:b5:71:e6:6f:7e:96:a0:ca:ca:c3:4d:33:
3d:1e:a7:f1:7e:7c:d8:21:01:e8:37:ef:9c:e7:a4:6a:8e:3a:
99:30:9a:5d:d7:24:38:b2:3b:41:3c:c2:db:3d:37:73:d8:c6:
08:59:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:37 2026 by rpki-client