Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/qjt96n4RyTnwKt8f25Hzr4YOzU4.roa
File: qjt96n4RyTnwKt8f25Hzr4YOzU4.roa (raw, json)
Hash identifier: c+NeV173DV29fxhrcPqvFfp6/xCLnBsKjYjqezsWpbo=
Subject key identifier: AA:3B:7D:EA:7E:11:C9:39:F0:2A:DF:1F:DB:91:F3:AF:86:0E:CD:4E
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0199CF41C5E23CD44CA7271E5B7173EDF97F
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/qjt96n4RyTnwKt8f25Hzr4YOzU4.roa
Signing time: Fri 10 Oct 2025 17:53:38 +0000
ROA not before: Fri 10 Oct 2025 17:53:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54903
IP address blocks: 95.164.118.0/24 maxlen: 24
95.164.128.0/21 maxlen: 21
95.164.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:41:c5:e2:3c:d4:4c:a7:27:1e:5b:71:73:ed:f9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Oct 10 17:53:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa3b7dea7e11c939f02adf1fdb91f3af860ecd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:8a:c4:ff:f9:16:28:05:f9:48:05:fd:56:
f1:b4:60:ad:34:9b:c0:7b:df:4e:37:18:fc:a9:16:
1e:30:fd:73:67:c6:bf:05:6a:fb:10:3b:77:23:e8:
ca:ff:99:37:f4:e3:d8:f9:3e:ea:5c:1b:b2:ed:24:
f7:9d:16:0e:ba:51:b4:82:03:af:d3:9d:7e:85:a6:
93:34:53:36:d4:70:0d:c0:0e:e0:ca:14:c9:a5:8e:
30:2d:e2:43:4f:d6:44:e4:57:3e:11:b2:69:55:4b:
81:44:ab:4f:5d:36:6d:ac:c0:a6:73:8a:7f:14:ac:
75:2f:d5:86:4d:b1:ce:c3:5d:af:81:07:b3:20:cd:
47:a5:08:3e:71:9b:fe:d9:39:7e:7b:59:5c:e3:0c:
9e:c3:68:1d:55:cd:cc:97:93:87:f7:dc:63:39:11:
e6:e1:94:cc:aa:bd:ef:24:c6:4a:e6:c4:04:e8:28:
1e:82:7a:a8:6c:03:77:71:08:92:00:a8:10:44:45:
6b:47:51:ae:af:a4:63:de:c9:8b:43:c0:04:79:3a:
47:77:f6:76:2f:cc:34:91:eb:01:a3:9f:eb:07:e1:
b1:b5:96:1e:d1:53:8e:9a:c3:08:99:8b:fa:b4:32:
f7:b5:27:b4:54:c9:8b:1d:47:95:b6:ac:0a:63:0e:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:7D:EA:7E:11:C9:39:F0:2A:DF:1F:DB:91:F3:AF:86:0E:CD:4E
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/qjt96n4RyTnwKt8f25Hzr4YOzU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.118.0/24
95.164.128.0/20
Signature Algorithm: sha256WithRSAEncryption
89:02:19:20:79:a8:a9:d1:0f:ec:bf:fd:3f:11:4b:e8:f8:49:
46:47:73:cf:07:5b:c8:d4:01:b0:fc:c1:22:fb:67:95:27:6a:
ba:3c:94:3b:cd:83:e9:a1:3d:db:49:3f:f7:6c:30:da:b4:25:
70:be:ca:29:3c:9d:91:63:b8:a4:b2:b2:6b:fa:1c:21:f6:bd:
bb:00:fb:03:52:4f:a0:5f:16:2c:45:69:a8:78:9a:6e:59:d4:
93:46:d3:56:df:fe:d7:ee:d5:19:e6:dd:25:84:7a:e7:62:28:
57:80:07:02:0a:d5:ea:68:26:47:dd:31:ca:59:bd:df:be:46:
14:76:bb:95:7a:2c:14:0c:87:9e:75:37:81:88:5b:45:3d:3b:
bf:a7:78:9c:94:54:aa:6c:ea:24:70:1b:3e:0b:c6:8c:87:6b:
6f:31:3e:8a:27:cb:a1:a3:b4:b0:9e:51:ce:28:35:29:fd:0d:
81:fa:b2:43:2f:15:7a:c6:62:94:34:d6:8d:b1:4f:22:71:72:
d7:36:a3:20:6f:26:64:ff:46:b9:e2:92:cf:4d:bb:48:8b:56:
2a:c8:fb:2a:14:a8:d8:61:6f:1f:3b:a4:b9:0b:8c:f0:14:25:
c9:e8:0d:c4:06:50:84:62:7d:59:4f:31:9c:24:81:08:70:50:
96:80:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:58:50 2025 by rpki-client