Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/FQ6e3qLq07N7c6vb8xSdMPOMvJc.roa
File: FQ6e3qLq07N7c6vb8xSdMPOMvJc.roa (raw, json)
Hash identifier: jL7hfr1fG9q8Db+UI2ObK7nG/hXNzIiR02v0n72Zs0Y=
Subject key identifier: 15:0E:9E:DE:A2:EA:D3:B3:7B:73:AB:DB:F3:14:9D:30:F3:8C:BC:97
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019CB9760B6E8181519911697C9C19948E44
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/FQ6e3qLq07N7c6vb8xSdMPOMvJc.roa
Signing time: Wed 04 Mar 2026 15:27:26 +0000
ROA not before: Wed 04 Mar 2026 15:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200396
IP address blocks: 95.164.13.0/24 maxlen: 24
95.164.52.0/24 maxlen: 24
95.164.94.0/24 maxlen: 24
95.164.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:76:0b:6e:81:81:51:99:11:69:7c:9c:19:94:8e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Mar 4 15:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=150e9edea2ead3b37b73abdbf3149d30f38cbc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:0d:d7:12:4b:f6:e5:f5:aa:c7:dc:ae:a7:
cd:bc:38:19:c8:66:f7:8a:36:9c:94:82:93:01:da:
63:0e:66:1e:ed:cb:f0:17:2d:59:31:c5:18:f3:d2:
df:3d:94:51:53:50:9e:b7:60:e7:f6:de:18:09:b6:
c4:d5:16:c6:5c:b4:b6:9d:04:11:fd:74:70:0c:06:
72:cb:a9:99:fd:6e:d6:c1:38:aa:93:84:3a:d0:40:
04:6d:62:c7:60:af:9c:55:f5:50:a0:a0:89:39:3b:
c6:7f:45:a1:74:29:c0:30:39:c6:fa:9e:fa:56:0c:
44:cb:59:d2:e4:74:94:17:87:aa:1b:e6:af:cb:a5:
46:d2:4c:e4:51:3a:09:d4:82:28:76:28:3f:cd:3c:
7c:73:6c:6d:9a:b2:58:3b:52:70:58:ff:19:0b:42:
50:36:72:4d:d5:84:44:a3:13:6f:d1:61:aa:f4:ad:
0e:00:46:1b:70:89:2e:ae:40:cc:85:d5:c8:b9:37:
92:46:77:9d:40:e6:72:1c:57:f8:d7:00:62:89:f3:
35:52:df:90:11:06:d5:3f:35:75:76:66:c9:d2:ae:
d7:73:cc:4b:60:16:86:43:3c:58:af:40:f0:b7:79:
03:e3:c4:4c:ea:72:cc:6d:04:29:08:00:91:90:86:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:9E:DE:A2:EA:D3:B3:7B:73:AB:DB:F3:14:9D:30:F3:8C:BC:97
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/FQ6e3qLq07N7c6vb8xSdMPOMvJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.13.0/24
95.164.52.0/24
95.164.94.0/24
95.164.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:84:5b:77:60:e6:10:00:a0:58:75:67:43:43:eb:5c:d3:f7:
f1:5f:29:f1:4b:41:21:d3:94:fa:b8:fb:32:c7:d0:d4:80:92:
c5:e4:a2:9b:0d:17:f4:7d:8a:a8:9b:96:16:2c:17:09:c5:e2:
a3:55:d7:20:df:e8:9b:6a:75:90:1e:e9:e8:de:48:c1:38:cb:
d3:d1:72:7d:b1:e2:40:c8:2b:ac:60:16:93:19:04:73:54:aa:
76:2b:7a:8e:f9:71:48:47:94:fa:51:86:cb:af:f1:e3:b8:45:
34:31:58:2e:08:9f:b1:94:89:ea:3a:54:c1:84:c9:f3:62:ca:
99:ed:78:55:21:5f:50:33:c3:f0:9f:68:21:a7:90:af:e1:27:
c8:e6:cb:40:20:e3:85:88:f7:14:07:5a:82:9f:79:fa:bc:e8:
f3:bb:75:81:51:82:91:ce:8c:89:a0:bc:24:ca:84:06:74:26:
a1:7b:8f:58:62:59:7e:33:e9:88:e1:b9:a3:cb:5b:df:a6:92:
53:2b:98:68:75:fc:8f:9f:d5:5e:e7:29:ea:fe:01:72:1e:68:
29:7c:ec:69:ee:54:e8:0f:59:2f:06:93:da:b8:6a:57:73:36:
9b:53:35:1d:9c:26:bd:2c:47:16:d0:71:9c:80:eb:d1:a7:a1:
40:17:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:59:07 2026 by rpki-client