Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/9t7f5615EN02RFbpwanOrEPcJ48.roa
File: 9t7f5615EN02RFbpwanOrEPcJ48.roa (raw, json)
Hash identifier: razalCpQw6rhjc0pyb6EWYANHtvakHmfv/xDIcBJpC8=
Subject key identifier: F6:DE:DF:E7:AD:79:10:DD:36:44:56:E9:C1:A9:CE:AC:43:DC:27:8F
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019EF4A94936B35F48B8F74083D150083EA8
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/9t7f5615EN02RFbpwanOrEPcJ48.roa
Signing time: Tue 23 Jun 2026 13:26:35 +0000
ROA not before: Tue 23 Jun 2026 13:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219376
IP address blocks: 95.164.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:a9:49:36:b3:5f:48:b8:f7:40:83:d1:50:08:3e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 23 13:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6dedfe7ad7910dd364456e9c1a9ceac43dc278f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:98:f7:14:2e:90:3a:c3:8d:60:df:2a:a4:
cd:8f:2c:50:8a:98:13:6e:76:eb:2f:c8:76:d5:10:
c2:59:66:17:19:29:17:1a:49:05:85:8b:4f:de:c8:
f1:f6:dc:05:35:e5:c6:ff:99:60:cd:4c:cb:62:6e:
0d:12:af:5f:53:f9:66:c5:66:7a:f2:e7:a4:6c:6a:
b5:7e:ac:39:10:57:62:2f:dd:fe:19:e1:b5:bc:31:
d7:d9:35:55:67:71:9e:ae:c5:1d:02:1e:f4:66:5d:
ad:3f:da:ef:d6:d5:07:fd:bb:98:51:71:c5:1d:29:
95:f2:ae:cf:0d:3b:02:03:46:4f:22:e2:34:04:67:
3c:e5:47:3c:58:44:7d:68:bc:23:f1:70:44:77:dd:
6e:81:7d:a7:b1:43:60:86:46:cb:9d:a4:10:49:aa:
72:e5:33:1e:79:69:9c:67:f1:47:f8:6a:db:77:79:
ab:6d:bb:3b:1f:2a:46:8a:ce:12:c6:42:c1:85:bf:
a6:69:27:13:41:05:91:d6:bb:1f:5f:da:8a:82:05:
8d:f9:1b:44:6e:d2:7b:9a:08:97:4f:4c:fa:fa:9a:
89:b3:0a:33:0f:fd:7f:28:34:6c:c6:67:30:3d:2e:
44:cf:70:58:3b:4a:c5:ea:d2:fc:0b:4a:5d:4b:e5:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DE:DF:E7:AD:79:10:DD:36:44:56:E9:C1:A9:CE:AC:43:DC:27:8F
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/9t7f5615EN02RFbpwanOrEPcJ48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:54:7a:1e:09:15:df:dc:58:95:32:f8:a5:7b:40:13:a0:8a:
c6:82:5c:f2:3c:60:9c:cf:ec:ee:15:e9:f0:1d:df:7e:02:4c:
a3:b1:67:29:63:89:f4:15:d9:79:c9:09:6c:f4:aa:90:8d:ee:
ad:fb:c5:6c:9e:41:81:51:3e:3b:55:1c:72:07:a8:d9:b2:9e:
50:44:e1:2d:54:78:dd:60:6d:ad:3a:55:99:36:55:07:05:09:
a0:8c:6c:df:17:38:7c:01:02:8a:e0:16:9e:3c:7a:e5:4d:26:
01:76:e9:83:70:a2:72:68:16:39:32:af:da:26:b7:4d:52:6e:
bb:b4:3b:cd:c2:93:c6:94:e0:fd:66:96:89:4b:d3:e7:59:19:
5c:b6:ca:26:1f:87:f7:45:a7:5a:8a:4a:b1:7f:52:f5:ce:49:
2e:bf:52:2e:91:ce:f5:ac:bf:bf:4c:ba:e2:53:85:b5:4e:96:
6f:80:25:9f:12:7a:cc:1b:4b:ae:ce:d4:91:9d:88:fb:f6:20:
74:89:fa:7f:0c:f0:fb:6f:ad:58:39:fb:ef:1a:03:69:00:5f:
0b:67:77:83:2c:0c:7d:66:7c:9e:48:ef:ef:c3:16:2c:b2:46:
6d:e2:1b:11:82:70:6e:d1:ac:c2:56:f1:29:61:e6:2e:0d:a5:
00:50:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:13 2026 by rpki-client