Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ODrQOT3GhDjHqSGUFpRyOG4IGMU.roa
File: ODrQOT3GhDjHqSGUFpRyOG4IGMU.roa (raw, json)
Hash identifier: gWU1RmujP7RhICYJOABis9MXMiXhE8OCNVoImq9EYjs=
Subject key identifier: 38:3A:D0:39:3D:C6:84:38:C7:A9:21:94:16:94:72:38:6E:08:18:C5
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019F5BD3A12E7E432DF32B78C66A1CCCFB98
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ODrQOT3GhDjHqSGUFpRyOG4IGMU.roa
Signing time: Mon 13 Jul 2026 14:13:43 +0000
ROA not before: Mon 13 Jul 2026 14:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8772
IP address blocks: 95.164.15.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.47.0/24 maxlen: 24
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.56.0/24 maxlen: 24
95.164.61.0/24 maxlen: 24
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.115.0/24 maxlen: 24
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/24 maxlen: 24
95.164.249.0/24 maxlen: 24
95.164.251.0/24 maxlen: 24
185.234.254.0/24 maxlen: 24
2a10:eb80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:d3:a1:2e:7e:43:2d:f3:2b:78:c6:6a:1c:cc:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 13 14:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=383ad0393dc68438c7a92194169472386e0818c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:42:d4:e0:6f:b1:6b:0a:f3:40:f9:33:1a:
56:4b:43:ba:45:fb:5d:3a:c7:02:7e:5b:48:3b:eb:
2e:36:5e:59:30:48:81:05:37:2b:4e:d4:97:42:6f:
08:5f:8c:59:39:fe:ec:62:90:13:4f:3d:38:17:fa:
21:c2:3e:17:b8:00:cf:85:cb:cd:98:3b:79:96:d1:
c9:94:4a:8a:70:0f:11:57:7b:e2:98:0d:1f:4f:15:
3f:1a:20:4f:b0:6e:71:f2:04:6d:89:fa:15:8a:62:
ce:c0:52:b5:82:f6:1a:12:f8:6e:fb:cd:e1:a1:1d:
3a:94:82:21:07:70:ca:59:de:4c:1a:7a:97:41:09:
02:2e:70:ad:ca:36:cb:14:58:a3:1f:d8:1f:f3:01:
60:40:13:0c:6e:bd:1c:34:bf:e5:c7:fc:78:75:1e:
bb:57:c8:fb:d7:41:d2:ff:b1:75:f4:45:c2:83:75:
90:6b:c2:81:0d:f1:e1:c2:ab:68:7f:b2:6f:ab:d3:
83:4d:83:1c:fa:b2:0e:57:4f:d0:79:31:ed:b3:a7:
2b:5d:28:fe:2b:96:51:05:fe:95:bd:4e:7a:c7:f5:
77:2d:c8:20:b4:17:4b:d3:a4:81:42:a8:06:b8:2c:
d6:2f:11:d5:b2:71:f3:ab:e3:93:9d:35:48:ef:d0:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:D0:39:3D:C6:84:38:C7:A9:21:94:16:94:72:38:6E:08:18:C5
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ODrQOT3GhDjHqSGUFpRyOG4IGMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.15.0/24
95.164.40.0/22
95.164.47.0/24
95.164.49.0-95.164.50.255
95.164.56.0/22
95.164.61.0/24
95.164.76.0/24
95.164.80.0/22
95.164.115.0/24
95.164.120.0/23
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
185.234.254.0/24
IPv6:
2a10:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
31:f2:9a:17:42:b7:0d:a1:15:b6:f9:50:58:33:55:48:29:c0:
47:b7:ff:06:76:3a:10:09:08:9e:85:ff:4c:72:27:4f:d9:89:
7a:09:c7:f2:35:aa:60:1c:96:8e:86:0b:52:84:4f:da:00:33:
6f:4f:76:35:5d:2a:67:26:e2:38:ed:20:a5:22:0c:97:4e:10:
68:25:01:67:d6:cc:3f:4a:a8:57:cb:9d:78:05:e5:b1:53:a1:
d4:8e:35:b8:82:8a:9b:71:a2:14:73:a2:d9:cf:b6:bc:0c:f8:
72:62:ad:1c:b3:fe:f6:97:3e:59:bb:43:40:79:c9:fc:23:a8:
7d:ea:3f:7f:ea:13:09:f6:2e:f1:3a:5f:1e:9e:f4:6f:32:08:
f5:86:5f:ae:d8:79:19:26:bf:7f:7f:4c:01:62:ea:fc:38:47:
6c:5b:e2:e4:49:ef:09:db:3c:d8:6e:f7:f2:8c:4f:37:4b:40:
af:10:50:a3:ce:0e:42:af:b4:fa:c1:96:ce:6e:45:e2:bc:61:
3f:55:53:6d:3b:84:77:9f:37:32:00:d3:11:d3:09:a5:c6:ed:
2e:ab:2f:a3:b9:be:e8:14:69:a1:9d:56:d3:91:03:b2:98:19:
75:d4:4a:ab:d3:71:28:e8:4b:ce:c1:7f:65:44:89:e1:d7:7d:
91:79:35:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:51 2026 by rpki-client