Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/imTGat5IfThC4z-wwdRVjhPZEHY.roa
File: imTGat5IfThC4z-wwdRVjhPZEHY.roa (raw, json)
Hash identifier: Vw4NXxZQf8JiZoNzqKAKRSiflsEjqLnfMi+uXX/SPj4=
Subject key identifier: 8A:64:C6:6A:DE:48:7D:38:42:E3:3F:B0:C1:D4:55:8E:13:D9:10:76
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A06C8E9D4C48B94161976CBFEBFE6F572A
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/imTGat5IfThC4z-wwdRVjhPZEHY.roa
Signing time: Fri 04 Sep 2026 13:14:40 +0000
ROA not before: Fri 04 Sep 2026 13:14:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8772
IP address blocks: 95.164.9.0/24 maxlen: 24
95.164.15.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.47.0/24 maxlen: 24
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.56.0/24 maxlen: 24
95.164.61.0/24 maxlen: 24
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/24 maxlen: 24
95.164.249.0/24 maxlen: 24
95.164.251.0/24 maxlen: 24
185.234.254.0/24 maxlen: 24
193.104.254.0/24 maxlen: 24
2a10:eb80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:8e:9d:4c:48:b9:41:61:97:6c:bf:eb:fe:6f:57:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Sep 4 13:14:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a64c66ade487d3842e33fb0c1d4558e13d91076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c1:19:d8:34:52:44:2c:78:71:e7:a7:ab:55:
51:ea:8c:8e:1c:3d:fd:d8:8c:cf:7c:ea:e8:aa:d3:
00:10:d9:42:13:a2:ba:61:93:61:03:4b:b1:d1:0c:
c6:80:f8:8b:11:2e:da:42:ef:12:f9:3e:fc:67:14:
34:7b:4f:45:cb:06:60:20:c4:b4:47:dc:7c:50:e0:
bb:b7:60:a5:74:e2:5d:ef:5f:f1:e4:ba:98:16:c6:
8a:2d:ec:ea:aa:07:14:3d:12:f5:0e:8e:ef:dc:6a:
83:da:cf:b5:3e:c1:10:5d:c1:df:94:90:25:83:59:
46:b4:a9:ca:bf:45:09:50:ff:98:ad:ee:29:31:f1:
09:b1:29:b0:f2:d0:a4:44:25:d3:d6:93:28:32:15:
a3:e4:9b:5a:d4:b5:12:2b:c5:fb:3e:a8:74:4a:9a:
a5:b9:5b:bf:8f:50:f0:88:4d:74:ed:56:e5:15:4a:
b6:3a:ed:26:96:a0:97:37:a1:8c:33:f5:3e:21:4c:
fe:77:9f:4e:13:ee:f9:0f:60:0e:06:24:c8:5e:26:
6c:ce:d9:90:7f:d3:d0:af:c8:88:3b:23:ba:8a:c9:
fd:d9:f9:69:c2:61:eb:a1:b1:41:17:fd:9a:5d:f5:
d0:92:fc:ea:8d:af:f7:f4:d3:02:fc:04:e9:cf:fb:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:C6:6A:DE:48:7D:38:42:E3:3F:B0:C1:D4:55:8E:13:D9:10:76
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/imTGat5IfThC4z-wwdRVjhPZEHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.9.0/24
95.164.15.0/24
95.164.40.0/22
95.164.47.0/24
95.164.49.0-95.164.50.255
95.164.56.0/22
95.164.61.0/24
95.164.76.0/24
95.164.80.0/22
95.164.120.0/23
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
185.234.254.0/24
193.104.254.0/24
IPv6:
2a10:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
3c:58:92:59:a9:a8:fe:2a:a3:dc:b0:fe:e9:4a:40:71:6c:64:
aa:83:51:6b:28:3b:3c:6f:31:7d:44:f4:55:fe:b3:90:5c:6b:
6c:cc:33:ab:0a:44:01:03:c7:f5:f9:47:61:81:7c:e5:95:14:
f2:3a:63:a7:f1:61:34:4c:e8:69:ef:da:04:6f:2a:0d:91:81:
ca:02:bd:ea:95:01:7a:64:0b:d8:81:6b:59:f8:12:99:97:46:
00:c2:6a:a2:d4:8f:4d:72:63:fa:2e:bc:35:4d:b0:c0:de:a1:
78:4f:b3:be:47:9c:8d:4d:7a:0c:37:3b:5e:e5:b5:7e:c6:69:
d8:59:21:71:1b:92:51:1e:40:eb:bc:47:82:cf:01:d3:29:0e:
4a:a9:05:78:42:9e:1e:ad:02:60:89:ee:9e:fc:57:31:e7:0c:
8b:23:fb:d4:11:7e:75:23:26:be:fa:96:aa:57:d2:3b:24:7a:
c9:4f:fc:71:c1:60:ce:05:a1:b7:e2:b8:70:a1:f5:91:2e:e2:
4e:38:a1:45:5d:14:bf:83:d3:62:30:7b:60:9b:a1:b1:bf:a7:
48:11:9c:fa:ac:83:0a:2c:9c:79:9d:73:2a:2c:b8:52:f2:46:
4d:b0:0a:fb:c0:9b:0f:49:f0:6e:1e:11:6e:4a:25:17:78:39:
eb:26:42:b9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaBsjp1MSLlBYZdsv+v+b1cqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjYwOTA0MTMxNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTY0YzY2YWRlNDg3ZDM4NDJlMzNmYjBjMWQ0NTU4ZTEzZDkxMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sEZ2DRSRCx4ceenq1VR6oyOHD39
2IzPfOroqtMAENlCE6K6YZNhA0ux0QzGgPiLES7aQu8S+T78ZxQ0e09FywZgIMS0
R9x8UOC7t2CldOJd71/x5LqYFsaKLezqqgcUPRL1Do7v3GqD2s+1PsEQXcHflJAl
g1lGtKnKv0UJUP+Yre4pMfEJsSmw8tCkRCXT1pMoMhWj5Jta1LUSK8X7Pqh0Spql
uVu/j1DwiE107VblFUq2Ou0mlqCXN6GMM/U+IUz+d59OE+75D2AOBiTIXiZsztmQ
f9PQr8iIOyO6isn92flpwmHrobFBF/2aXfXQkvzqja/39NMC/ATpz/vf6QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIpkxmreSH04QuM/sMHUVY4T2RB2MB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvaW1UR2F0NUlmVGhDNHotd3dkUlZqaFBaRUhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBwBAIAATBqAwQAX6QJ
AwQAX6QPAwQCX6QoAwQAX6QvMAwDBABfpDEDBABfpDIDBAJfpDgDBABfpD0DBABf
pEwDBAJfpFADBAFfpHgwDAMEAV+kqgMEBF+koAMEAV+k+AMEAF+k+wMEALnq/gME
AMFo/jANBAIAAjAHAwUDKhDrgDANBgkqhkiG9w0BAQsFAAOCAQEAPFiSWamo/iqj
3LD+6UpAcWxkqoNRayg7PG8xfUT0Vf6zkFxrbMwzqwpEAQPH9flHYYF85ZUU8jpj
p/FhNEzoae/aBG8qDZGBygK96pUBemQL2IFrWfgSmZdGAMJqotSPTXJj+i68NU2w
wN6heE+zvkecjU16DDc7XuW1fsZp2FkhcRuSUR5A67xHgs8B0ykOSqkFeEKeHq0C
YInunvxXMecMiyP71BF+dSMmvvqWqlfSOyR6yU/8ccFgzgWht+K4cKH1kS7iTjih
RV0Uv4PTYjB7YJuhsb+nSBGc+qyDCiyceZ1zKiy4UvJGTbAK+8CbD0nwbh4Rbkol
F3g56yZCuQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:35 2026 by rpki-client