Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/REpPOVSFPxs6XWxXr83I7WsaONE.roa
File: REpPOVSFPxs6XWxXr83I7WsaONE.roa (raw, json)
Hash identifier: tWq3UF4A4s+oWUbvh9Wno2oVGe4je8aAL4JtfvCSLWU=
Subject key identifier: 44:4A:4F:39:54:85:3F:1B:3A:5D:6C:57:AF:CD:C8:ED:6B:1A:38:D1
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019D1B3F7E8EB35B511D1113C919A38CB127
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/REpPOVSFPxs6XWxXr83I7WsaONE.roa
Signing time: Mon 23 Mar 2026 15:10:39 +0000
ROA not before: Mon 23 Mar 2026 15:10:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137235
IP address blocks: 95.173.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:3f:7e:8e:b3:5b:51:1d:11:13:c9:19:a3:8c:b1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Mar 23 15:10:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=444a4f3954853f1b3a5d6c57afcdc8ed6b1a38d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:41:da:d4:51:b4:a8:58:2f:33:b6:a4:0e:
46:56:12:50:98:c3:e6:dd:08:67:3e:ff:d0:a7:e2:
18:59:da:ef:cc:65:58:9e:93:0c:59:b2:87:0e:a0:
c0:6f:42:58:41:98:f4:28:b8:d8:f9:d3:2a:50:49:
5c:8c:97:eb:69:d0:e1:3e:03:1c:b6:dc:14:67:c7:
d2:8b:22:9e:19:66:d0:bb:bc:58:b7:7e:5f:70:14:
62:15:5d:37:96:06:ea:be:79:38:fc:d8:89:cf:15:
01:bd:c3:88:2a:0a:ac:37:8b:a7:8b:81:d5:11:a2:
f0:48:91:6e:34:a1:c8:28:5a:f8:87:a0:13:84:68:
80:3d:aa:63:0a:41:26:bc:6c:04:23:a0:c6:ad:55:
61:99:c7:6c:09:62:ba:0e:c4:c3:d8:1b:7e:ce:75:
50:37:bf:eb:bb:c6:93:cc:c0:6b:ab:4b:23:c2:5c:
47:4e:5e:86:34:c0:8c:04:b5:3d:f0:72:84:17:10:
1d:ed:3b:ab:bc:e3:73:76:f9:2d:ac:46:46:5a:87:
29:b8:41:b6:f0:91:ba:23:f8:cb:78:b0:3d:8e:1b:
73:90:d0:0b:f0:57:c1:e5:5c:fa:4a:00:21:01:15:
88:d0:ff:75:bd:09:78:02:94:8b:24:c6:6c:c9:2f:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:4F:39:54:85:3F:1B:3A:5D:6C:57:AF:CD:C8:ED:6B:1A:38:D1
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/REpPOVSFPxs6XWxXr83I7WsaONE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7e:c5:10:92:57:a0:9d:24:da:70:35:f0:38:46:1d:be:3b:
50:bb:60:9d:c3:da:9b:c8:72:59:d6:08:30:24:79:12:75:9a:
d8:37:52:18:78:a8:a8:25:4f:0c:6d:a0:79:87:ac:4f:66:66:
8f:7f:35:d2:76:4f:ce:eb:ee:4d:85:14:6c:52:05:17:df:e9:
17:93:5d:bd:25:24:5f:da:11:af:bc:c9:32:ad:4a:26:28:a9:
1c:65:df:b0:8e:16:75:dd:cf:c8:f3:c6:ad:10:79:7e:18:86:
00:20:1e:6f:5e:ed:35:82:95:15:8f:12:88:18:1e:e4:ea:58:
33:28:bc:bd:b8:d1:7b:a4:4b:94:22:40:3b:1f:56:80:67:c1:
38:7b:4f:e8:67:57:63:3e:ab:83:d9:4c:ed:4e:21:7d:fa:3a:
d9:5f:d7:bf:49:24:ca:6e:48:8f:bd:54:97:b5:12:e3:45:ed:
a8:97:ff:bb:16:c1:0c:36:5a:2b:4c:c7:1b:90:df:4f:81:50:
a7:18:82:3e:d4:d2:fa:65:12:a8:af:9a:ba:07:58:3f:72:a3:
31:3e:84:c2:85:4c:95:a3:f3:eb:ae:73:ab:28:05:a3:21:2f:
be:d1:0d:89:dd:1d:a2:b2:7c:d0:7f:06:58:a4:c2:85:50:e7:
e6:b5:0e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:24 2026 by rpki-client