Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/KplJ3LduqB8fju8Cp8wVC5kYaEw.roa
File: KplJ3LduqB8fju8Cp8wVC5kYaEw.roa (raw, json)
Hash identifier: 1HTgbzS5o5VYiYxgpRXb60MFv/qXACweKzDFgHcjSQo=
Subject key identifier: 2A:99:49:DC:B7:6E:A8:1F:1F:8E:EF:02:A7:CC:15:0B:99:18:68:4C
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 019F8EC134A05B0F00F8CBB9AD0C491B7E1A
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/KplJ3LduqB8fju8Cp8wVC5kYaEw.roa
Signing time: Thu 23 Jul 2026 11:34:14 +0000
ROA not before: Thu 23 Jul 2026 11:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215684
IP address blocks: 195.35.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:c1:34:a0:5b:0f:00:f8:cb:b9:ad:0c:49:1b:7e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jul 23 11:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a9949dcb76ea81f1f8eef02a7cc150b9918684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:68:f8:a6:c5:7a:40:9f:cb:87:c0:a0:18:
93:29:ec:e6:fe:46:f6:42:4b:da:b1:dd:ca:0e:6a:
7a:71:d5:d3:e1:72:40:d0:77:05:7a:af:39:f4:d5:
0c:5d:c3:d9:dc:e5:96:84:1e:aa:c1:d0:86:d8:30:
5b:c4:32:05:5b:5b:b2:ae:55:8b:0f:43:e6:b4:d3:
42:7f:54:8a:f6:62:84:b6:d5:52:a2:f3:a4:cf:cf:
b6:6b:17:93:be:a4:b1:25:cb:63:ff:e6:1c:2a:77:
e4:df:09:79:ca:85:79:bd:70:1e:77:ab:bc:aa:6a:
63:22:c9:ba:d0:14:64:f1:3c:32:e7:4f:a7:96:d3:
d3:9d:b0:d0:13:e1:b5:95:9c:e9:d4:b5:78:b5:fc:
c3:4c:d7:46:08:f5:14:36:d0:60:68:bc:31:1a:ac:
e5:bf:79:82:12:0c:80:cd:b5:8f:d4:f4:4d:e4:67:
4b:69:08:92:f6:ea:09:ae:b7:8d:1a:41:ba:4d:71:
c8:b4:2d:23:4b:ca:71:d5:cb:01:88:a9:5c:f7:20:
ca:b0:e7:34:7f:c1:e5:7a:65:d4:dd:b9:f4:27:77:
1a:a4:c8:9a:e7:f4:2f:c4:3f:1e:69:dc:bf:06:aa:
aa:eb:00:dc:df:8d:78:73:98:8c:fa:dd:dc:64:c4:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:99:49:DC:B7:6E:A8:1F:1F:8E:EF:02:A7:CC:15:0B:99:18:68:4C
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/KplJ3LduqB8fju8Cp8wVC5kYaEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.95.0/24
Signature Algorithm: sha256WithRSAEncryption
76:94:c9:68:3a:86:01:89:29:e1:d9:c6:84:b3:3d:eb:77:42:
ff:85:37:52:73:2e:3b:8f:64:83:83:f3:f0:53:2c:2e:c5:17:
55:7c:e6:35:52:4a:b7:9a:62:d8:f6:98:09:3f:18:3b:c5:3c:
2e:9e:eb:d5:13:f7:67:3b:26:db:08:10:cf:97:63:dc:a7:23:
e9:29:a9:4a:11:89:93:09:0c:7b:7f:25:d5:42:cb:64:88:5a:
ab:19:18:77:22:b0:09:61:af:50:d1:99:6a:8c:5b:47:f1:89:
fa:01:5a:3d:ac:77:c0:cb:77:90:0d:1a:4c:a8:25:87:a6:d8:
cf:84:52:c0:f5:df:52:48:52:74:23:79:d4:3f:7e:f3:ed:6d:
1c:ee:3c:c4:56:4e:00:92:8c:b8:fb:c4:74:fa:fb:ef:b8:f8:
e9:34:03:82:70:b1:5e:b2:70:93:93:16:a7:25:08:c5:60:30:
5c:d8:22:6d:ee:b6:a7:57:ef:ef:91:5c:b4:fa:67:4d:ed:43:
52:c4:41:a2:d0:df:f9:0b:79:3b:cd:5d:83:19:e5:2a:55:8c:
2d:c7:93:c2:bf:41:99:5f:af:7f:e8:74:a4:fd:0b:0a:e7:21:
09:cb:2c:48:15:07:7a:51:50:ec:ef:cc:a9:6a:08:02:7c:c6:
23:a2:0d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:10 2026 by rpki-client