Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/kQ7C66nHNX8e-DPnNPuILbPR1N0.roa
File: kQ7C66nHNX8e-DPnNPuILbPR1N0.roa (raw, json)
Hash identifier: jFam3EVkgDquD4pPVrY90erNSEjwRP31K9mOpvq/nI4=
Subject key identifier: 91:0E:C2:EB:A9:C7:35:7F:1E:F8:33:E7:34:FB:88:2D:B3:D1:D4:DD
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019EF47F2C1A8A73524E52298373D6263DDB
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/kQ7C66nHNX8e-DPnNPuILbPR1N0.roa
Signing time: Tue 23 Jun 2026 12:40:35 +0000
ROA not before: Tue 23 Jun 2026 12:40:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205248
IP address blocks: 95.164.61.0/24 maxlen: 24
95.164.115.0/24 maxlen: 24
95.164.119.0/24 maxlen: 24
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:7f:2c:1a:8a:73:52:4e:52:29:83:73:d6:26:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 23 12:40:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=910ec2eba9c7357f1ef833e734fb882db3d1d4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:52:73:c5:32:1c:61:3a:c8:01:72:f2:36:
c1:ef:41:84:d3:bf:ff:65:c9:2e:9f:65:26:b6:b6:
c3:57:91:da:e9:88:a2:d4:d0:20:a0:0e:ae:88:51:
8f:81:7b:0a:2f:ca:74:48:08:55:42:0f:04:68:67:
32:74:80:ca:b0:c2:fe:88:10:61:aa:4a:a0:63:ee:
b6:fd:73:b6:54:23:92:71:99:37:26:7f:ef:d3:4c:
80:91:7d:b0:ef:d5:62:b8:8f:bc:b5:8b:d6:08:ff:
74:62:ae:d0:4d:c6:7c:ea:c5:3f:e0:f6:e6:42:25:
29:38:a2:ba:3f:67:dd:bc:46:a5:e5:56:df:dd:14:
8a:15:ef:ec:74:6a:16:e5:3f:15:be:77:ce:3e:f3:
37:97:4c:11:d7:66:41:18:1c:d0:bd:fe:40:55:94:
2b:39:c7:8d:f1:67:47:49:9f:15:ce:43:a9:9e:10:
c2:b2:45:0a:04:db:9a:7e:19:3b:48:02:e6:5a:7d:
c4:1c:df:6f:8f:5e:ff:92:1b:96:fb:60:97:77:65:
b6:42:af:51:66:2f:2a:ee:5c:44:60:43:9b:4d:a3:
8e:93:e7:46:18:ee:7e:ae:56:ca:67:5d:b2:cd:56:
89:d7:19:b7:2d:1f:b3:29:81:86:1e:0e:4b:1b:45:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0E:C2:EB:A9:C7:35:7F:1E:F8:33:E7:34:FB:88:2D:B3:D1:D4:DD
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/kQ7C66nHNX8e-DPnNPuILbPR1N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.61.0/24
95.164.115.0/24
95.164.119.0-95.164.121.255
Signature Algorithm: sha256WithRSAEncryption
be:2c:ba:9c:3b:86:2f:e1:81:d5:b9:cd:94:30:1d:0f:c2:d9:
1d:db:bc:42:35:12:7f:d0:a6:b8:28:28:cd:29:10:27:a5:4d:
2e:4d:31:b7:3d:30:08:a9:b0:32:6d:4b:b7:18:0a:2c:93:a5:
2c:98:39:69:e5:fe:16:83:f0:90:05:d7:09:7b:fb:07:6d:9d:
c6:ca:54:5d:d8:d7:c9:c8:87:0f:09:d4:56:e2:34:78:12:cb:
6c:18:a1:fa:cf:4b:d6:1d:d6:50:ed:8a:43:2a:8e:f9:f6:21:
a0:75:9b:41:b2:30:d9:d2:95:05:bb:d7:c7:7b:11:a4:86:0b:
b3:1b:0f:83:64:ec:3f:60:33:c4:0e:65:4b:9a:b6:fe:84:b2:
e5:d8:b1:3b:94:78:a9:df:ca:87:00:65:8f:f4:11:ef:df:0a:
91:54:42:73:01:db:3d:77:98:14:75:ad:1e:73:7c:eb:22:e0:
59:c9:11:f2:7e:2e:ec:df:ff:71:1a:23:ca:6d:84:4e:94:6e:
61:71:ca:b4:35:66:b2:29:21:72:bf:46:1c:6d:3e:07:50:ba:
14:73:de:31:21:66:cf:92:02:b2:ec:0d:af:fd:97:d8:ab:6d:
8e:53:50:a4:87:a8:20:fe:64:3f:d1:1f:55:32:d6:79:34:66:
52:81:76:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:14 2026 by rpki-client