Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/fzJn3KF8bcdzSxxYVGgg9WhSu_Q.roa
File: fzJn3KF8bcdzSxxYVGgg9WhSu_Q.roa (raw, json)
Hash identifier: F8Y+icGMTI8B4xLO/6DQSh7tnQktMHf3JcYVYNoK3Qo=
Subject key identifier: 7F:32:67:DC:A1:7C:6D:C7:73:4B:1C:58:54:68:20:F5:68:52:BB:F4
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019DAC4306C4A083460B38400155DED1CC59
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/fzJn3KF8bcdzSxxYVGgg9WhSu_Q.roa
Signing time: Mon 20 Apr 2026 18:59:26 +0000
ROA not before: Mon 20 Apr 2026 18:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269800
IP address blocks: 95.164.132.0/23 maxlen: 24
95.164.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 12:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ac:43:06:c4:a0:83:46:0b:38:40:01:55:de:d1:cc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Apr 20 18:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f3267dca17c6dc7734b1c58546820f56852bbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:e7:7e:2c:8f:30:f4:79:ae:0d:5a:f8:99:
7c:76:03:fd:2d:15:0a:47:39:9c:3b:9d:82:6a:f5:
ca:87:ce:d8:13:af:24:98:82:d3:8a:a0:2a:c4:5a:
73:33:49:e1:3d:a1:4c:67:7f:76:5f:2c:23:85:86:
c3:65:c3:bb:51:70:23:9e:ce:f4:13:7a:fc:d0:c3:
72:78:f4:1b:4e:3e:7d:91:fb:1b:5a:eb:ac:bc:35:
a8:e2:40:6c:3a:b8:3e:d1:a2:23:67:58:67:ba:37:
0c:a9:f2:c6:8d:5e:18:dc:ab:da:57:98:ae:31:8d:
eb:eb:11:6c:67:d4:09:5b:b7:d8:30:3a:83:0e:6e:
f2:c2:54:e3:66:67:c9:5a:3a:67:6e:65:cc:a2:35:
a5:94:7b:da:23:59:41:61:22:3f:e9:87:30:6d:69:
26:1d:c3:9b:97:8e:bf:77:7b:97:66:ce:dc:ad:4a:
5d:d8:8e:75:50:40:5e:4e:c9:3a:52:0e:36:aa:20:
e6:45:33:d8:c7:18:42:fe:f7:c2:a4:8c:6c:b9:89:
f1:b8:fa:68:b5:ff:c6:27:7e:56:d3:5f:ed:63:54:
48:75:df:c8:e6:db:f9:9e:3a:d9:bb:df:43:de:a6:
bc:01:a6:6b:ba:2b:3d:d1:a9:73:f8:07:7a:f3:54:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:67:DC:A1:7C:6D:C7:73:4B:1C:58:54:68:20:F5:68:52:BB:F4
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/fzJn3KF8bcdzSxxYVGgg9WhSu_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.132.0/23
95.164.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:b6:f9:65:6e:c9:be:76:af:72:a4:ed:88:44:c5:0d:a2:8a:
1f:6b:b1:2d:ab:9a:c4:1e:1b:72:6b:e8:79:85:8f:f3:c1:4e:
ab:78:15:05:f1:7c:8e:45:60:20:0b:c0:5c:42:76:f9:b9:92:
12:0c:e4:03:e9:63:9b:d5:03:68:58:93:b4:2d:44:d8:a5:18:
61:b2:f2:9a:ac:1f:8d:22:4a:bf:ba:12:bb:f4:d6:2d:e6:e3:
48:1b:b3:51:f5:df:74:1a:10:16:70:b4:3e:b6:80:07:33:43:
2e:43:77:e9:85:75:d8:76:ac:ba:0b:b2:d5:fb:de:f0:4b:e8:
cb:cc:05:28:6d:b0:61:18:03:d3:4f:62:b8:35:ef:98:0c:c5:
62:fc:86:97:a4:dc:ac:e5:5c:ec:ab:ab:83:3f:3d:65:e4:ff:
a7:69:2c:32:e6:6f:5d:ee:cf:b5:20:05:ac:9f:80:36:fd:4d:
94:ff:30:22:d4:76:ed:35:98:e3:46:5e:22:6b:65:5b:bc:5e:
00:33:7b:a4:5b:a4:91:9e:1c:2b:bb:15:07:e2:cd:02:a9:40:
6b:e4:55:bd:c0:61:de:80:48:b5:43:8f:c9:ab:f1:a4:37:d5:
48:77:5c:21:30:98:0d:5c:0c:01:87:59:19:35:b0:b8:df:4c:
87:77:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:28:18 2026 by rpki-client