Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/EfTPvp2A-fzGjd_GmAAGQmFyxC8.roa
File: EfTPvp2A-fzGjd_GmAAGQmFyxC8.roa (raw, json)
Hash identifier: ajtR4/hwJSHvQ8kFl3DWsYLmMhdGyBzRIBlKWw8scNY=
Subject key identifier: 11:F4:CF:BE:9D:80:F9:FC:C6:8D:DF:C6:98:00:06:42:61:72:C4:2F
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019EF4A949A55A8C873F4F7B1A8AAA07E49D
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/EfTPvp2A-fzGjd_GmAAGQmFyxC8.roa
Signing time: Tue 23 Jun 2026 13:26:35 +0000
ROA not before: Tue 23 Jun 2026 13:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219382
IP address blocks: 95.164.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:a9:49:a5:5a:8c:87:3f:4f:7b:1a:8a:aa:07:e4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 23 13:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11f4cfbe9d80f9fcc68ddfc6980006426172c42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:9f:f8:a7:71:19:04:5e:ea:fb:51:94:79:
7e:1b:4b:ce:71:71:1b:33:41:10:01:5f:b3:e9:18:
5a:7c:95:13:f1:c5:99:ab:e1:42:93:52:aa:b5:53:
3a:e2:bf:c3:00:c0:a9:6b:c2:b6:54:05:0e:76:cf:
93:32:c1:4b:ea:56:16:8e:44:d8:44:b1:e0:f6:1f:
2c:45:43:15:fc:ac:23:fd:9b:83:3c:e1:30:e0:e0:
5e:32:f3:35:74:3d:d6:0a:3f:ba:8a:c7:43:6d:cb:
65:0e:54:66:4e:7d:f3:87:3f:dd:bd:ab:0b:ac:59:
6c:39:7d:63:c8:3b:7d:0f:29:6c:c8:e1:2a:31:4c:
51:87:54:1c:f6:60:ab:6b:ca:2f:cd:a1:b7:bd:e2:
64:43:51:7a:c7:ca:47:99:84:6e:7d:da:72:ff:10:
61:e9:5b:ab:ad:5e:01:9e:2a:15:21:1e:e9:91:8b:
a4:15:8f:e7:34:10:67:1c:48:12:37:ca:b0:4c:ca:
34:07:1b:ed:89:ca:16:2d:ba:02:14:02:03:36:be:
a2:16:b6:50:45:74:03:70:74:6a:64:67:92:4d:f5:
56:55:fe:9d:18:14:a3:03:72:2b:88:b5:de:da:f3:
79:58:f8:93:bb:b8:c7:93:b2:96:1d:23:08:8c:ef:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F4:CF:BE:9D:80:F9:FC:C6:8D:DF:C6:98:00:06:42:61:72:C4:2F
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/EfTPvp2A-fzGjd_GmAAGQmFyxC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.46.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b0:6b:0c:69:e7:ff:9a:6c:09:77:5f:6a:fb:96:ff:54:1f:
b3:be:3c:c3:01:ac:22:40:fb:82:1c:1b:7d:3e:48:72:0a:bd:
ee:f4:4c:c9:48:c6:df:d8:74:4d:70:24:29:a8:19:d1:35:12:
2e:ac:41:9a:ce:f5:e2:79:4b:ce:7b:33:ab:f2:8c:1b:f9:7c:
e6:68:b8:6d:8d:4a:76:fc:10:d2:fb:f2:05:ec:c2:b7:08:53:
ed:51:0b:7a:4e:d9:2e:9d:fe:33:fa:8d:2e:a3:0e:55:87:2f:
ab:3d:49:0f:1d:40:3c:ad:20:2d:c1:de:d8:18:a6:10:90:e9:
b6:4e:42:2a:6b:82:23:e8:b1:e6:8a:20:47:82:49:47:e1:bd:
79:ab:fd:11:14:8e:f1:65:e0:c2:5c:34:24:a6:63:5f:da:b4:
d3:59:ab:8b:40:fc:7f:2a:0e:c0:3f:5d:66:67:2d:aa:68:1a:
3d:d6:12:eb:9c:0d:2c:eb:c5:d3:a3:a1:e6:8f:72:8f:22:d6:
e7:2f:06:9b:14:b0:5a:fb:1f:1b:4f:45:ff:48:d3:25:f4:fa:
a2:8a:03:d0:c5:41:c9:59:fa:98:2c:d4:9c:98:0d:5c:15:44:
24:3e:9a:f9:87:12:69:cc:9a:db:d4:33:fb:e4:a0:54:c1:96:
84:59:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:01 2026 by rpki-client