Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Kxp8t6MDjXMWc0XJ5DM3-MBIx7Q.roa
File: Kxp8t6MDjXMWc0XJ5DM3-MBIx7Q.roa (raw, json)
Hash identifier: AjnpqMadHuETf18pUcuC6S57WtR+ic8f7h9J1igwwXY=
Subject key identifier: 2B:1A:7C:B7:A3:03:8D:73:16:73:45:C9:E4:33:37:F8:C0:48:C7:B4
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019E989FCD11E63981512E61842165CC1644
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Kxp8t6MDjXMWc0XJ5DM3-MBIx7Q.roa
Signing time: Fri 05 Jun 2026 16:31:10 +0000
ROA not before: Fri 05 Jun 2026 16:31:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 95.164.0.0/24 maxlen: 24
95.164.4.0/24 maxlen: 24
95.164.5.0/24 maxlen: 24
95.164.6.0/23 maxlen: 24
95.164.19.0/24 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.32.0/24 maxlen: 24
95.164.35.0/24 maxlen: 24
95.164.44.0/24 maxlen: 24
95.164.45.0/24 maxlen: 24
95.164.46.0/24 maxlen: 24
95.164.62.0/24 maxlen: 24
95.164.63.0/24 maxlen: 24
95.164.89.0/24 maxlen: 24
95.164.112.0/24 maxlen: 24
95.164.113.0/24 maxlen: 24
95.164.114.0/24 maxlen: 24
95.164.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:9f:cd:11:e6:39:81:51:2e:61:84:21:65:cc:16:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 5 16:31:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b1a7cb7a3038d73167345c9e43337f8c048c7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:0e:26:43:80:77:30:82:f1:74:a9:1f:f5:
43:f6:68:25:53:a0:d4:ff:58:e6:f8:8b:7b:55:2c:
e6:a5:1d:ab:0b:42:04:2f:7d:95:e4:98:20:21:b4:
c9:a1:77:6a:28:39:dc:9c:4e:cf:80:f0:d9:a4:29:
22:0d:3a:84:ee:be:ae:e8:91:cf:a1:95:a5:5a:48:
b7:b6:79:bd:f2:4e:2c:ec:bf:a8:ad:27:85:d0:35:
db:54:b3:76:a2:9b:6d:ff:ba:a8:73:40:f8:cd:88:
69:46:89:2f:e5:5f:07:dc:87:ab:2b:49:0f:42:0d:
26:c5:e8:4b:9d:59:a7:69:7d:33:dd:e8:63:27:e5:
82:08:1c:75:d2:f4:b2:aa:1d:24:f9:1c:86:97:c4:
47:75:e9:97:da:ff:75:8c:9c:aa:2b:9a:30:07:9f:
e3:ad:f3:49:1d:b5:75:60:eb:a2:4a:1b:e0:a9:16:
c3:0d:be:40:1d:f3:7d:95:15:5f:0c:fa:b9:e9:d9:
d3:34:a4:c3:44:32:f0:19:88:7e:35:24:48:26:9e:
81:dc:c0:ce:84:8a:b5:4c:2c:b3:7f:5f:67:bb:10:
f9:4d:b6:7d:44:0a:b2:70:ff:d0:93:58:54:4f:50:
6d:16:12:cc:87:58:c2:5e:17:37:7b:84:dc:47:3c:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:7C:B7:A3:03:8D:73:16:73:45:C9:E4:33:37:F8:C0:48:C7:B4
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Kxp8t6MDjXMWc0XJ5DM3-MBIx7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.0.0/24
95.164.4.0/22
95.164.19.0/24
95.164.21.0-95.164.23.255
95.164.32.0/24
95.164.35.0/24
95.164.44.0-95.164.46.255
95.164.62.0/23
95.164.89.0/24
95.164.112.0-95.164.114.255
95.164.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a8:31:74:11:9d:c9:e2:59:33:64:81:a9:16:df:42:ee:31:
84:b7:a0:e7:57:f1:ff:40:eb:b7:78:c7:13:7d:31:cb:d9:0a:
66:bc:a6:66:80:03:96:26:8a:5e:40:68:19:d9:92:c0:d2:68:
dd:1d:d4:bf:46:ba:2b:09:2c:13:98:1d:19:33:e4:41:c9:7c:
b1:db:9d:a5:e8:44:c1:d4:1d:3a:e8:3c:c8:4f:da:a6:13:4d:
49:94:47:fb:64:f4:f4:b0:24:9e:03:4a:a3:36:71:6d:7f:3f:
c7:28:6e:05:51:2f:ae:bb:be:7c:a6:1d:b9:c0:32:4d:23:08:
ba:64:89:a0:94:14:c9:26:e7:e3:dc:7e:dc:f1:e9:5f:fc:44:
7d:e8:62:0e:ee:b3:3e:79:a6:d0:3f:58:4e:9d:62:1b:88:37:
85:60:8d:bf:d2:64:5b:ee:c8:f0:99:8c:cf:92:95:6c:5b:7f:
8c:74:01:2f:7a:0b:9e:b1:d1:61:53:4f:95:d6:08:cc:1d:35:
3a:40:47:db:f7:54:e2:4e:fc:d6:2f:e5:f4:01:25:e0:89:fe:
59:e9:8d:dd:ad:d0:0b:a7:fa:c7:46:c3:56:5d:58:33:89:40:
15:52:36:5d:fa:33:c5:f0:b4:67:87:33:f2:35:ab:3e:29:8e:
08:06:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:41:48 2026 by rpki-client