Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/33Nejg15wZJ8pFimAwv8NYVA2Yk.roa
File: 33Nejg15wZJ8pFimAwv8NYVA2Yk.roa (raw, json)
Hash identifier: 2ULNPI7eBVngdAXJjOt+pKYag/c9VQ8ma6wZ0e56sPo=
Subject key identifier: DF:73:5E:8E:0D:79:C1:92:7C:A4:58:A6:03:0B:FC:35:85:40:D9:89
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019F04BAC35E3999286676C95106E22F7FA5
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/33Nejg15wZJ8pFimAwv8NYVA2Yk.roa
Signing time: Fri 26 Jun 2026 16:19:36 +0000
ROA not before: Fri 26 Jun 2026 16:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219345
IP address blocks: 95.164.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:ba:c3:5e:39:99:28:66:76:c9:51:06:e2:2f:7f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 26 16:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df735e8e0d79c1927ca458a6030bfc358540d989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:c5:31:13:65:c8:8d:e8:63:0e:82:83:2b:
c5:d8:0f:4e:af:fb:2b:2a:0a:75:eb:b2:87:c4:8c:
13:56:7f:71:c8:34:92:d6:72:73:3a:0b:87:64:c5:
9e:fd:25:5a:b2:b0:ce:a6:7a:47:5b:05:87:bb:57:
50:1c:d0:22:a7:2b:b2:22:97:57:82:9a:a5:1d:8e:
64:6e:72:21:db:d2:49:45:5c:7b:21:2c:0e:ac:08:
fc:23:8b:85:10:e4:6e:13:17:30:c3:5b:7e:bb:93:
57:a7:6d:89:a6:e0:5d:ac:a8:8a:af:ba:8c:20:86:
6b:e8:26:61:e1:14:78:6d:6f:30:e7:69:84:b4:a4:
f3:8e:e6:e1:eb:eb:ac:c7:cf:0c:b1:10:49:7b:0a:
7f:e4:6b:aa:d7:e2:71:3f:ad:de:1e:13:b4:99:9f:
b8:3d:66:cb:58:f5:87:52:88:27:7b:22:7f:d5:73:
c7:ef:b6:a5:d1:13:2d:fe:6f:4c:cf:cb:15:47:b5:
5d:3c:1e:2e:3b:3c:e5:be:f6:e9:fb:f7:d6:92:9a:
e1:31:13:a1:84:8f:99:b8:4f:ae:2b:3a:bd:b2:e8:
41:fe:74:75:2f:f5:9b:ee:d0:e8:39:d8:5b:af:32:
45:b6:4e:9c:fb:47:a1:74:fb:f0:bb:fd:a9:4b:79:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:5E:8E:0D:79:C1:92:7C:A4:58:A6:03:0B:FC:35:85:40:D9:89
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/33Nejg15wZJ8pFimAwv8NYVA2Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e3:09:bd:17:7c:a0:64:6a:6b:da:5e:ac:75:52:bf:09:cc:
8c:4e:a9:e6:20:ba:bc:47:e4:ce:00:f3:e6:5f:82:af:b8:b5:
57:a7:29:40:3a:6f:bd:db:d1:6f:88:cb:d8:a3:4c:4d:02:65:
58:28:72:9f:a3:c9:65:f4:86:32:3e:d2:39:78:d3:cf:3d:57:
7e:74:f6:de:28:41:2a:01:10:e1:ce:a1:ae:77:07:d3:0a:74:
82:3f:cf:76:f0:87:7c:b6:57:d6:ed:97:ab:52:ea:fa:94:c1:
6d:c5:88:0c:18:46:27:f0:04:7b:ef:f1:d5:47:f7:09:9d:4d:
6f:b6:a6:13:7c:26:af:38:2a:24:fa:88:d4:ee:c4:7f:62:a4:
f4:60:fe:e1:c6:f9:52:1f:fa:59:23:b9:f0:36:e7:a7:d8:a9:
82:a1:6a:f5:91:a5:26:9a:02:a8:c0:aa:9a:77:79:c5:36:45:
4a:7d:8a:db:03:b0:53:cf:e7:12:be:f4:a9:18:71:7a:82:2d:
4d:ed:fa:61:71:e9:aa:ff:97:52:b7:e5:b8:65:80:e8:15:fe:
8d:a7:b0:94:dc:72:6b:c7:be:b3:df:69:0c:af:db:63:56:80:
cd:90:9c:86:60:b3:57:4f:90:1c:43:59:17:8a:f6:bd:9b:47:
b6:ff:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:09 2026 by rpki-client