Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/FIGTC3lJ7LTMkHobwlLtu2AWSJQ.roa
File: FIGTC3lJ7LTMkHobwlLtu2AWSJQ.roa (raw, json)
Hash identifier: IA9o3niy+WKoYFbRtUJX7bqRIKpAn87X23TId+2dgN4=
Subject key identifier: 14:81:93:0B:79:49:EC:B4:CC:90:7A:1B:C2:52:ED:BB:60:16:48:94
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A13C72B6BDB609F69106CE7D9CE66B855B
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/FIGTC3lJ7LTMkHobwlLtu2AWSJQ.roa
Signing time: Wed 14 Oct 2026 22:05:13 +0000
ROA not before: Wed 14 Oct 2026 22:05:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213803
IP address blocks: 95.164.9.0/24 maxlen: 24
95.164.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:72:b6:bd:b6:09:f6:91:06:ce:7d:9c:e6:6b:85:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Oct 14 22:05:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1481930b7949ecb4cc907a1bc252edbb60164894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:cd:89:89:44:8d:fc:8f:ab:d3:cc:19:6f:
02:b4:98:7d:8c:f9:25:8b:9c:d3:d8:05:62:7e:e0:
81:2b:e5:15:2d:38:58:7a:70:23:b0:f9:4b:83:78:
57:c3:c7:bc:d6:a4:be:f3:25:3e:f6:b4:f9:1f:05:
85:f3:ed:b2:d8:a2:16:dd:09:ae:cd:b0:a2:aa:34:
50:54:3e:b9:02:36:75:c5:19:ba:eb:30:90:cd:73:
6f:c6:9d:55:1d:f8:ce:1b:fc:55:4d:0c:66:f3:49:
31:88:b1:82:2f:87:75:88:3e:aa:5d:d3:56:9f:db:
d7:ba:e8:7e:d1:91:97:08:78:d7:52:73:55:a7:8b:
cc:cf:b3:1f:cc:40:ca:44:fe:d5:26:54:e6:43:fc:
30:8d:4e:b0:9a:f7:86:13:1f:b7:5e:e5:4d:00:eb:
2f:e6:11:5e:36:f2:9b:49:59:7b:e0:00:40:ca:79:
0b:bb:79:1c:bc:aa:0e:72:8a:ee:ef:06:76:cc:2e:
81:95:c2:dd:72:c4:b2:67:5b:b0:81:c3:12:75:fd:
bd:a9:8b:63:f7:e5:62:d8:97:70:aa:b3:9e:90:c1:
de:a3:e8:db:ef:e3:41:c8:7e:d4:06:cd:a4:98:27:
09:0a:8c:2d:6a:0c:3a:c1:37:f4:99:6d:af:53:fd:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:93:0B:79:49:EC:B4:CC:90:7A:1B:C2:52:ED:BB:60:16:48:94
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/FIGTC3lJ7LTMkHobwlLtu2AWSJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.9.0/24
95.164.80.0/22
Signature Algorithm: sha256WithRSAEncryption
79:63:8b:e3:9f:c6:cd:32:2a:cc:22:fe:db:0d:15:77:01:7d:
78:8e:66:60:1a:d3:d0:61:4f:3b:e5:cc:82:cd:fb:e9:84:b1:
3e:48:8c:50:ee:9f:bf:e1:9a:10:88:37:7d:8b:aa:f4:10:e5:
78:9b:3c:ec:37:ac:67:f4:87:01:89:a5:e4:d3:2c:e8:b1:27:
7d:cf:57:c8:ff:81:75:b3:1b:0e:7d:36:a6:c1:3c:2c:6a:4a:
c8:8a:92:f4:59:4c:9a:81:96:3c:b5:1d:1f:04:c9:be:ae:c1:
b1:d7:08:27:1e:87:35:da:fa:6c:4f:7d:ec:9a:c8:6b:ae:03:
3a:5b:92:c5:74:6a:57:61:12:36:45:fe:f4:7f:f2:8f:07:fb:
dd:b2:0b:f3:64:a3:e0:01:5c:d9:8c:04:dc:43:24:f4:73:b1:
74:2e:35:f2:73:53:da:fd:3c:b9:d8:3d:95:a0:23:48:57:5c:
fb:34:73:7c:40:63:25:d7:8e:93:61:d1:8a:9d:19:09:03:02:
a8:e5:79:71:8a:97:f9:e5:65:c3:0a:a2:2b:2c:d8:a6:22:5f:
19:f8:48:91:77:e3:dd:14:2e:6e:81:81:f5:a6:07:a0:30:ac:
a1:2d:2c:fe:80:12:5b:63:0e:75:4c:31:43:f7:1b:91:c8:33:
3d:82:28:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE8cra9tgn2kQbOfZzma4VbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjYxMDE0MjIwNTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDgxOTMwYjc5NDllY2I0Y2M5MDdhMWJjMjUyZWRiYjYwMTY0ODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRzNiYlEjfyPq9PMGW8CtJh9jPkl
i5zT2AVifuCBK+UVLThYenAjsPlLg3hXw8e81qS+8yU+9rT5HwWF8+2y2KIW3Qmu
zbCiqjRQVD65AjZ1xRm66zCQzXNvxp1VHfjOG/xVTQxm80kxiLGCL4d1iD6qXdNW
n9vXuuh+0ZGXCHjXUnNVp4vMz7MfzEDKRP7VJlTmQ/wwjU6wmveGEx+3XuVNAOsv
5hFeNvKbSVl74ABAynkLu3kcvKoOcoru7wZ2zC6BlcLdcsSyZ1uwgcMSdf29qYtj
9+Vi2JdwqrOekMHeo+jb7+NByH7UBs2kmCcJCowtagw6wTf0mW2vU/2EmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBSBkwt5Sey0zJB6G8JS7btgFkiUMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvRklHVEMzbEo3TFRNa0hvYndsTHR1MkFXU0pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX6QJAwQC
X6RQMA0GCSqGSIb3DQEBCwUAA4IBAQB5Y4vjn8bNMirMIv7bDRV3AX14jmZgGtPQ
YU875cyCzfvphLE+SIxQ7p+/4ZoQiDd9i6r0EOV4mzzsN6xn9IcBiaXk0yzosSd9
z1fI/4F1sxsOfTamwTwsakrIipL0WUyagZY8tR0fBMm+rsGx1wgnHoc12vpsT33s
mshrrgM6W5LFdGpXYRI2Rf70f/KPB/vdsgvzZKPgAVzZjATcQyT0c7F0LjXyc1Pa
/Ty52D2VoCNIV1z7NHN8QGMl146TYdGKnRkJAwKo5Xlxipf55WXDCqIrLNimIl8Z
+EiRd+PdFC5ugYH1pgegMKyhLSz+gBJbYw51TDFD9xuRyDM9giht
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:01:55 2026 by rpki-client