Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/PpcjLkaCEav2jbz8j1nD5cpwd6U.roa
File: PpcjLkaCEav2jbz8j1nD5cpwd6U.roa (raw, json)
Hash identifier: lXMFd5+g5o/TuUWdFdfYKjE6xxAsVlkE3kE7tXj8LIU=
Subject key identifier: 3E:97:23:2E:46:82:11:AB:F6:8D:BC:FC:8F:59:C3:E5:CA:70:77:A5
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019F79E1471836B7C242FFEC59C157F3A402
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/PpcjLkaCEav2jbz8j1nD5cpwd6U.roa
Signing time: Sun 19 Jul 2026 10:17:14 +0000
ROA not before: Sun 19 Jul 2026 10:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62442
IP address blocks: 95.38.41.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.45.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:e1:47:18:36:b7:c2:42:ff:ec:59:c1:57:f3:a4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jul 19 10:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e97232e468211abf68dbcfc8f59c3e5ca7077a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:a6:a6:d5:f5:16:07:5d:0d:8d:d1:23:c0:
b0:41:d1:9a:7e:33:7c:fd:5f:4e:d0:d4:4f:94:b4:
13:c0:49:d8:64:80:e4:84:63:2c:4f:f4:50:d3:b0:
4c:fd:ea:ca:da:32:b4:93:c8:d8:61:d0:64:b4:22:
96:03:d9:4a:9d:fb:a5:43:46:23:9e:0d:9a:fa:b1:
e8:42:2f:92:ab:eb:3c:cd:95:94:81:a0:67:de:d6:
8d:e0:23:fb:f9:88:65:c5:fa:da:98:e5:9d:8d:6a:
05:38:f1:45:7d:07:90:79:6c:84:8e:91:0b:09:63:
e2:df:7d:23:a2:a6:a7:02:f2:dc:be:ad:50:f0:fc:
5b:23:70:a4:e9:33:14:55:45:2e:d9:8e:e8:72:b5:
c2:aa:e8:70:bb:bb:a8:af:58:98:42:1e:e4:ea:82:
7e:d0:f5:38:c3:12:c4:71:f7:63:cf:73:15:57:2d:
16:63:00:71:56:25:14:ad:b6:16:1f:14:8c:10:49:
93:af:d1:77:07:35:c2:87:ea:55:6e:79:0d:7e:ce:
67:24:f4:c2:fc:8b:4c:27:21:51:a8:0f:ba:a5:74:
3b:44:31:b1:01:9b:c1:3e:a9:bf:21:dc:dc:e2:c8:
e5:06:74:05:3c:5f:64:3e:e1:cf:af:31:b0:d0:48:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:23:2E:46:82:11:AB:F6:8D:BC:FC:8F:59:C3:E5:CA:70:77:A5
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/PpcjLkaCEav2jbz8j1nD5cpwd6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.41.0/24
95.38.43.0/24
95.38.45.0/24
95.38.54.0/23
Signature Algorithm: sha256WithRSAEncryption
51:a2:e3:fd:80:70:71:89:69:df:fe:59:07:71:f4:57:92:83:
e8:1e:23:69:49:42:2a:12:c4:a3:c4:8a:37:7f:67:de:70:b5:
7a:61:cc:58:c8:50:ed:05:ae:ca:7f:01:62:b2:9e:6f:78:17:
2c:3f:4a:04:4e:fb:a4:a7:75:db:1a:54:5f:a2:48:03:5e:89:
0a:8e:24:8d:96:25:7e:05:31:0b:8f:6f:4c:c9:20:74:c5:6c:
16:e4:a1:e3:45:6d:4b:49:57:06:b7:4d:ab:95:ec:e1:5a:6c:
0c:ee:c2:e3:85:6c:ad:5e:f6:53:f4:b8:04:ac:f2:2f:46:fe:
be:b1:f4:de:2b:fc:58:62:c3:0d:69:46:3d:a8:a1:9e:03:ca:
97:01:be:07:aa:71:13:b5:dd:aa:d9:48:2b:72:94:c6:8b:e5:
76:05:bc:19:50:33:3c:95:a6:99:a6:19:83:43:31:c8:3d:94:
bb:19:2c:97:06:aa:13:ba:de:9c:8d:a2:3a:b0:a3:52:f2:c4:
6d:30:48:ac:08:5f:5b:ec:37:97:26:5b:c9:6b:2f:d0:81:8b:
9f:74:a8:8e:09:e9:97:84:db:c8:62:a8:6d:ae:51:a3:72:8d:
d2:14:3a:7c:a6:37:b9:26:b7:16:3f:c6:79:36:11:05:86:27:
eb:83:4a:39
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ954UcYNrfCQv/sWcFX86QCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjYwNzE5MTAxNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTk3MjMyZTQ2ODIxMWFiZjY4ZGJjZmM4ZjU5YzNlNWNhNzA3N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5WmptX1FgddDY3RI8CwQdGafjN8
/V9O0NRPlLQTwEnYZIDkhGMsT/RQ07BM/erK2jK0k8jYYdBktCKWA9lKnfulQ0Yj
ng2a+rHoQi+Sq+s8zZWUgaBn3taN4CP7+YhlxframOWdjWoFOPFFfQeQeWyEjpEL
CWPi330joqanAvLcvq1Q8PxbI3Ck6TMUVUUu2Y7ocrXCquhwu7uor1iYQh7k6oJ+
0PU4wxLEcfdjz3MVVy0WYwBxViUUrbYWHxSMEEmTr9F3BzXCh+pVbnkNfs5nJPTC
/ItMJyFRqA+6pXQ7RDGxAZvBPqm/Idzc4sjlBnQFPF9kPuHPrzGw0EguHwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFD6XIy5GghGr9o28/I9Zw+XKcHelMB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvUHBjakxrYUNFYXYyamJ6OGoxbkQ1Y3B3ZDZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXyYpAwQA
XyYrAwQAXyYtAwQBXyY2MA0GCSqGSIb3DQEBCwUAA4IBAQBRouP9gHBxiWnf/lkH
cfRXkoPoHiNpSUIqEsSjxIo3f2fecLV6YcxYyFDtBa7KfwFisp5veBcsP0oETvuk
p3XbGlRfokgDXokKjiSNliV+BTELj29MySB0xWwW5KHjRW1LSVcGt02rlezhWmwM
7sLjhWytXvZT9LgErPIvRv6+sfTeK/xYYsMNaUY9qKGeA8qXAb4HqnETtd2q2Ugr
cpTGi+V2BbwZUDM8laaZphmDQzHIPZS7GSyXBqoTut6cjaI6sKNS8sRtMEisCF9b
7DeXJlvJay/QgYufdKiOCemXhNvIYqhtrlGjco3SFDp8pje5JrcWP8Z5NhEFhifr
g0o5
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:29 2026 by rpki-client