Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/_YR6AdN6O2I5DG-95YeED2oG9rU.roa
File: _YR6AdN6O2I5DG-95YeED2oG9rU.roa (raw, json)
Hash identifier: uXLx64kQpvOYc9S8RMx6XUZDkg6iNsQ6JJJ9/hgmb4c=
Subject key identifier: FD:84:7A:01:D3:7A:3B:62:39:0C:6F:BD:E5:87:84:0F:6A:06:F6:B5
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A175938BE96EE6BD8E807BA900D76C397F
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/_YR6AdN6O2I5DG-95YeED2oG9rU.roa
Signing time: Mon 26 Oct 2026 00:19:26 +0000
ROA not before: Mon 26 Oct 2026 00:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205248
IP address blocks: 95.164.10.0/24 maxlen: 24
95.164.11.0/24 maxlen: 24
95.164.61.0/24 maxlen: 24
95.164.115.0/24 maxlen: 24
95.164.119.0/24 maxlen: 24
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:93:8b:e9:6e:e6:bd:8e:80:7b:a9:00:d7:6c:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Oct 26 00:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd847a01d37a3b62390c6fbde587840f6a06f6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:6d:e0:6e:f9:87:03:14:b6:8f:e3:1d:cb:
e1:98:ce:09:99:1a:3b:0c:62:5d:25:bf:f2:cf:d1:
5c:53:67:a1:f2:74:4f:e1:af:5d:f0:2f:44:40:73:
12:ec:2e:a6:75:7a:01:0f:f3:de:17:d9:b6:9f:fa:
68:df:33:8c:f0:a3:fa:9e:bd:bc:23:09:42:08:45:
8d:78:eb:68:47:cc:39:ac:0b:03:16:2b:77:11:59:
ff:08:35:9e:33:a0:6b:92:08:7a:f0:b8:31:f7:b3:
ea:6b:d6:89:60:0c:79:14:df:8c:f9:cd:f8:ff:ac:
e0:d1:01:91:04:b9:fc:13:e3:8a:fa:44:52:a4:15:
9c:21:8e:b9:7b:aa:92:b9:4d:c1:f0:4f:aa:b2:22:
a9:09:76:40:31:dd:7d:69:af:d6:97:79:87:f5:f7:
38:89:80:e0:26:5d:7e:72:c4:be:d5:74:f5:17:e7:
b6:33:1f:47:cf:64:ed:ae:ed:0c:61:c2:c9:0e:70:
bb:b2:33:71:c3:32:ec:77:a1:36:f5:94:df:de:af:
93:16:e1:50:a0:41:77:6b:1a:61:04:ab:49:6e:8d:
d3:ad:42:2e:a2:1e:6f:f3:4f:21:19:d1:b5:98:10:
40:73:24:91:05:d4:99:91:e6:c7:a5:1c:a3:19:ff:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:84:7A:01:D3:7A:3B:62:39:0C:6F:BD:E5:87:84:0F:6A:06:F6:B5
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/_YR6AdN6O2I5DG-95YeED2oG9rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.10.0/23
95.164.61.0/24
95.164.115.0/24
95.164.119.0-95.164.121.255
Signature Algorithm: sha256WithRSAEncryption
0e:d6:79:da:3d:6d:8e:cd:04:89:9c:3e:bf:09:d3:68:a9:ce:
a8:9f:c8:45:9b:f2:db:06:a7:19:99:a2:1d:f2:67:ae:6a:34:
20:b1:9c:52:41:23:3d:8f:01:3a:6d:75:0c:b0:4b:61:28:ab:
7b:e2:37:2f:82:09:7e:b3:24:be:fe:e2:a2:38:69:50:b2:7b:
74:87:a9:01:ab:54:a5:71:ff:98:28:f8:17:92:6e:77:64:d9:
5e:f6:40:cf:63:ff:e3:62:b0:6d:3f:9e:a6:d6:98:ca:df:c5:
49:93:90:20:ed:7d:cd:e7:81:4f:37:b3:ed:38:22:d3:e0:a1:
44:af:a4:60:36:28:ae:77:5a:81:25:eb:f5:65:9c:37:aa:fe:
5e:56:bf:9c:bb:7a:9a:7e:78:59:18:04:91:10:28:55:60:92:
2f:25:c6:2b:77:73:72:68:f3:f0:db:5e:b6:62:23:b0:39:2b:
38:b2:d0:c3:62:7d:17:ed:55:23:bf:de:d9:a7:3c:49:54:5d:
3a:e0:9b:9b:b4:c1:a9:0a:46:f0:8d:c6:b2:3b:a6:c1:ae:4d:
cb:e9:81:43:05:90:9d:65:ce:51:2b:e1:6b:e6:7a:0e:92:ce:
2b:e2:df:ff:08:eb:6b:e9:58:12:a0:f2:54:d5:a2:1a:42:b0:
a8:5e:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:59:36 2026 by rpki-client