Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/LOqVm4ah0ZAFsNlsFHH6FIaOI2k.roa
File: LOqVm4ah0ZAFsNlsFHH6FIaOI2k.roa (raw, json)
Hash identifier: oIg9WImuyaH9IIZY4z9xPufl8Pg+NKHoU0mffdLY6gw=
Subject key identifier: 2C:EA:95:9B:86:A1:D1:90:05:B0:D9:6C:14:71:FA:14:86:8E:23:69
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0198F07E8A9B62700F784E07A762A6CA0DD2
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/LOqVm4ah0ZAFsNlsFHH6FIaOI2k.roa
Signing time: Thu 28 Aug 2025 11:44:41 +0000
ROA not before: Thu 28 Aug 2025 11:44:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 95.164.0.0/24 maxlen: 24
95.164.10.0/24 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.32.0/24 maxlen: 24
95.164.35.0/24 maxlen: 24
95.164.62.0/24 maxlen: 24
95.164.63.0/24 maxlen: 24
95.164.85.0/24 maxlen: 24
95.164.113.0/24 maxlen: 24
95.164.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:7e:8a:9b:62:70:0f:78:4e:07:a7:62:a6:ca:0d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Aug 28 11:44:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cea959b86a1d19005b0d96c1471fa14868e2369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:11:b6:6e:0f:74:43:8f:8b:a7:2a:63:5a:
ff:cc:05:18:95:65:67:2f:c5:c1:3e:94:69:49:a9:
4a:e7:16:e4:a1:85:4c:d1:59:6a:69:84:ff:1c:d1:
3f:0d:56:91:29:ed:21:f2:91:6a:b0:4b:67:a4:cd:
c5:b7:1a:fa:b1:41:24:67:ac:b4:8b:0a:9c:91:0d:
c7:f0:8e:51:7d:71:2c:5e:3b:db:2a:f4:4c:1e:32:
14:ee:46:34:6e:41:51:0d:f0:df:4a:5e:40:67:b3:
db:ec:3d:51:66:5b:d0:c3:28:6c:76:36:bc:25:b9:
01:3d:5c:e5:a1:e1:b9:a6:5e:00:7b:35:1b:7c:96:
c0:b9:dc:05:33:7c:b1:49:94:ff:1a:ce:5f:8d:f6:
48:ed:47:0b:10:f8:c1:fe:79:9e:75:41:b5:37:de:
81:fb:27:b1:ed:0a:58:53:e7:48:3f:9a:fe:8e:2c:
e6:a0:c3:59:66:d5:b4:89:b3:26:a3:6b:c1:9a:2c:
01:07:7c:5f:2b:62:be:95:8b:9b:ae:44:10:b1:42:
b4:e3:5a:b7:9c:32:c1:42:5a:56:65:14:ce:4b:c8:
f2:b4:82:9f:3c:4b:5d:bb:67:bb:37:05:63:09:8d:
09:43:ea:b1:16:34:c4:74:c8:91:f9:29:57:15:b4:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:95:9B:86:A1:D1:90:05:B0:D9:6C:14:71:FA:14:86:8E:23:69
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/LOqVm4ah0ZAFsNlsFHH6FIaOI2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.0.0/24
95.164.10.0/24
95.164.21.0-95.164.23.255
95.164.32.0/24
95.164.35.0/24
95.164.62.0/23
95.164.85.0/24
95.164.113.0/24
95.164.115.0/24
Signature Algorithm: sha256WithRSAEncryption
10:76:70:41:f9:af:17:1f:3f:84:11:ba:0f:b1:56:a5:e6:ad:
65:b6:8a:3c:9e:2d:be:77:62:b1:5c:2c:a1:c9:8a:10:9e:86:
0f:d8:57:19:e4:40:36:37:35:f2:9d:83:76:85:72:7a:56:8b:
82:54:79:4a:b2:4f:e0:27:fb:69:5a:f0:60:0a:de:08:c1:ec:
24:52:8b:58:7f:8d:62:ee:5a:95:98:99:f4:b9:47:4e:aa:6d:
e7:0e:3b:47:05:29:43:58:10:28:af:ac:3a:73:f4:e8:66:e4:
7a:93:7c:c7:ae:b0:83:1d:22:19:06:84:e4:c2:63:00:b0:04:
14:a4:a3:8e:7e:fb:3e:0b:ba:48:86:dd:51:6b:75:42:99:c7:
7e:c0:4e:dc:e0:7a:9d:e5:a7:0e:04:f2:03:4c:a3:02:2f:0d:
33:0e:d1:8b:99:6f:64:0f:c8:74:c3:f5:37:3b:a4:9d:36:62:
5c:3c:c9:de:d7:a6:f5:81:b9:2b:7d:6c:26:57:97:59:71:26:
f7:b9:65:87:c7:e0:d5:b4:5f:5a:d8:f1:0c:c6:04:8f:4e:41:
b5:50:83:b3:bc:78:6f:0d:96:6a:ff:25:1e:07:fb:ee:5a:04:
f0:4d:65:be:b6:fc:36:6e:bf:b4:28:54:60:ad:30:57:f1:49:
22:ba:bf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:43:39 2025 by rpki-client