Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/N6OWCaSvi_ZHuSy8GyCZ1crewYY.roa
File: N6OWCaSvi_ZHuSy8GyCZ1crewYY.roa (raw, json)
Hash identifier: +k0vccqKDaiaugpKblu02NDVY2W8K0g7euK40VhBg1g=
Subject key identifier: 37:A3:96:09:A4:AF:8B:F6:47:B9:2C:BC:1B:20:99:D5:CA:DE:C1:86
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019E026E09E4E186BAAA45F11284D9A44250
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/N6OWCaSvi_ZHuSy8GyCZ1crewYY.roa
Signing time: Thu 07 May 2026 12:33:46 +0000
ROA not before: Thu 07 May 2026 12:33:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.62.0/24 maxlen: 24
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.78.0/24 maxlen: 24
95.38.79.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:6e:09:e4:e1:86:ba:aa:45:f1:12:84:d9:a4:42:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: May 7 12:33:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37a39609a4af8bf647b92cbc1b2099d5cadec186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:65:99:2e:2f:ca:9d:db:03:5d:9d:da:99:47:
bc:b5:75:cf:05:5f:32:e8:c0:5c:93:42:7c:da:52:
97:87:c4:08:50:11:da:09:87:23:ec:94:28:d6:64:
37:e4:6f:13:1e:a9:46:4b:35:cd:01:b4:60:55:d8:
96:14:23:ed:43:73:cf:44:d8:ee:e1:bf:5a:48:12:
8d:b9:26:35:21:0b:fe:07:c5:aa:2b:05:58:03:e0:
97:b0:03:a2:d9:61:7e:61:70:0c:71:f3:6a:83:92:
61:4b:3f:29:9d:9a:a4:5a:9d:b9:83:62:a5:78:d4:
2f:f3:7e:2b:38:5c:1f:b8:c6:88:39:46:5f:9f:2f:
7e:04:9a:c7:d0:53:40:db:48:9c:0e:52:f2:27:53:
ef:fa:b3:42:32:b5:03:e5:d1:5b:03:45:f8:36:f3:
1a:2f:67:b2:2e:f1:c1:44:44:b2:91:18:7e:98:9b:
f9:f0:e2:f3:83:b5:82:16:34:7f:6c:02:17:d0:2e:
ca:e7:e3:78:60:50:ec:87:63:1c:08:1e:f3:c2:64:
a4:00:d9:e0:59:2f:82:01:37:8d:26:98:2f:51:7a:
d1:16:65:9b:d6:aa:5e:03:ce:7c:6f:2a:07:d0:08:
c9:1e:75:34:36:bf:28:0e:97:0c:3f:e3:e4:58:da:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:96:09:A4:AF:8B:F6:47:B9:2C:BC:1B:20:99:D5:CA:DE:C1:86
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/N6OWCaSvi_ZHuSy8GyCZ1crewYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.53.255
95.38.56.0-95.38.143.255
95.38.160.0/20
95.38.192.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
19:61:ae:2b:80:dc:89:99:a8:a6:b0:3b:58:77:91:d0:a9:30:
eb:dc:75:2a:ba:d5:eb:47:6a:71:58:f6:fe:66:43:f5:d4:e7:
31:8f:11:47:c1:c7:8d:8f:c2:fc:c6:ba:e0:ac:b5:4b:41:4b:
20:07:67:72:ff:ff:b2:e2:2e:dc:63:ff:85:44:97:f3:a5:21:
f7:c0:82:2e:d5:8e:f1:f9:20:88:d9:2d:01:96:39:6b:1a:24:
99:dd:a5:f5:25:84:5c:21:9b:e9:79:8a:d2:00:fc:ca:63:37:
7d:1b:05:1c:c1:fa:44:30:4a:07:78:25:26:83:62:a8:a1:be:
97:51:38:25:c0:fb:68:8b:64:1b:fe:6d:90:cc:33:79:44:a9:
bd:f0:5a:83:88:d0:dd:5a:21:c7:8d:b0:5d:45:c5:55:54:02:
b0:cb:d4:1b:10:a7:6f:cc:24:ef:4e:9b:f1:25:14:62:eb:c4:
26:ac:d5:e0:09:8a:44:3f:41:2c:3d:d7:1c:1c:b2:3c:ca:73:
5b:bf:00:e2:4a:46:fd:f5:36:66:dd:1b:f0:b5:24:9c:56:7d:
b2:48:0c:d0:aa:fe:45:83:67:bc:cf:7e:10:56:c3:8b:ef:61:
8a:29:87:14:ae:99:95:27:f6:da:90:f1:c2:44:6f:b2:af:a6:
93:1b:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:13 2026 by rpki-client