Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/kixICLXOmPgu8FWZWfXHuIRO438.roa
File: kixICLXOmPgu8FWZWfXHuIRO438.roa (raw, json)
Hash identifier: cTh5X1HFCvqIfu9CuWKrZS1OtvrioydB2WrZsvVbvmQ=
Subject key identifier: 92:2C:48:08:B5:CE:98:F8:2E:F0:55:99:59:F5:C7:B8:84:4E:E3:7F
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019E22EB752C93D2FC92DC91A269CCC97CA3
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/kixICLXOmPgu8FWZWfXHuIRO438.roa
Signing time: Wed 13 May 2026 19:58:36 +0000
ROA not before: Wed 13 May 2026 19:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25288
IP address blocks: 95.164.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:eb:75:2c:93:d2:fc:92:dc:91:a2:69:cc:c9:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: May 13 19:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=922c4808b5ce98f82ef0559959f5c7b8844ee37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:54:25:f7:5f:1b:18:1a:3f:86:29:dc:5e:
32:ae:bb:26:8f:fd:0a:fd:a1:ec:14:2f:09:0e:1c:
11:6e:31:7c:22:1d:58:e4:6a:b2:81:9d:98:6f:c5:
a2:81:b3:96:d0:b0:60:0a:7c:b1:25:3a:56:87:50:
2a:48:d0:74:ff:54:7f:d8:23:9f:bd:05:50:24:92:
27:92:79:f5:f5:48:dd:80:39:03:e0:c1:12:ce:e7:
99:cc:d0:48:d1:84:92:fd:ce:c0:bd:f8:b2:76:67:
f1:6b:99:0e:26:b5:78:b0:42:63:83:5f:eb:04:bc:
52:f3:1d:0a:df:22:cb:f4:52:df:87:88:ad:2e:65:
c5:62:51:a6:f6:42:7a:7c:fa:22:fe:9a:11:45:02:
2f:42:24:d9:29:05:75:12:01:15:cf:b2:60:83:53:
15:ee:3c:fc:79:2e:e1:d3:97:a2:f5:af:bb:bb:75:
c6:35:33:25:4e:73:23:9d:35:05:02:4d:f1:b7:bb:
b1:7f:f2:4a:11:13:53:f1:be:ae:f9:df:fe:b4:99:
21:00:a0:c6:fa:83:8f:50:64:b1:31:fd:da:af:89:
ab:ee:20:08:c8:33:48:da:63:5c:1f:e9:b2:b6:01:
cb:48:06:7e:12:8a:38:da:5b:8c:2a:e5:23:44:4c:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2C:48:08:B5:CE:98:F8:2E:F0:55:99:59:F5:C7:B8:84:4E:E3:7F
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/kixICLXOmPgu8FWZWfXHuIRO438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.247.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5f:40:a5:b2:84:17:b6:c6:87:f5:c9:eb:83:be:12:fc:26:
d3:3e:01:d5:29:c2:a8:81:40:84:db:be:53:cd:2e:1f:a1:be:
0a:64:1b:fc:1e:91:c6:83:13:ea:56:17:60:e1:5d:5b:28:24:
a6:9a:63:2e:f7:b1:04:a4:30:ae:01:2c:e6:c4:89:7c:63:7e:
be:14:4f:bd:f3:0a:8c:a1:3e:84:d2:16:85:2b:61:7b:9a:62:
13:19:37:6c:10:51:8f:2c:57:b3:81:9f:50:e3:1d:e2:dc:4f:
62:f2:a6:a3:5b:de:4a:16:41:99:f5:5c:b5:05:f0:af:67:f3:
80:82:d3:b3:62:2b:f5:d2:8f:38:f2:15:af:b8:ca:f0:4a:85:
17:79:9c:15:8c:0b:5c:76:75:99:6a:2a:06:0b:1c:79:c7:32:
0f:51:44:5d:fb:b5:3d:65:19:4d:bf:65:45:06:a3:9f:e7:23:
ff:32:30:59:06:1d:66:8d:6e:a4:4d:62:0b:39:41:dc:82:7e:
b3:d1:96:80:45:82:45:ab:2f:76:e5:94:9b:ae:60:d5:21:7c:
c2:f1:e9:2d:16:69:1a:8d:8a:b9:9d:8b:b7:36:00:8f:38:f5:
e0:60:fe:9d:f7:23:f7:2e:b4:2c:94:4a:13:21:0a:93:64:a1:
1e:1c:cb:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4i63Usk9L8ktyRomnMyXyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjYwNTEzMTk1ODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjJjNDgwOGI1Y2U5OGY4MmVmMDU1OTk1OWY1YzdiODg0NGVlMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNdUJfdfGxgaP4Yp3F4yrrsmj/0K
/aHsFC8JDhwRbjF8Ih1Y5GqygZ2Yb8WigbOW0LBgCnyxJTpWh1AqSNB0/1R/2COf
vQVQJJInknn19UjdgDkD4MESzueZzNBI0YSS/c7Avfiydmfxa5kOJrV4sEJjg1/r
BLxS8x0K3yLL9FLfh4itLmXFYlGm9kJ6fPoi/poRRQIvQiTZKQV1EgEVz7Jgg1MV
7jz8eS7h05ei9a+7u3XGNTMlTnMjnTUFAk3xt7uxf/JKERNT8b6u+d/+tJkhAKDG
+oOPUGSxMf3ar4mr7iAIyDNI2mNcH+mytgHLSAZ+Eoo42luMKuUjREzB3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJIsSAi1zpj4LvBVmVn1x7iETuN/MB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEva2l4SUNMWE9tUGd1OEZXWldmWEh1SVJPNDM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6T3MA0G
CSqGSIb3DQEBCwUAA4IBAQAzX0ClsoQXtsaH9cnrg74S/CbTPgHVKcKogUCE275T
zS4fob4KZBv8HpHGgxPqVhdg4V1bKCSmmmMu97EEpDCuASzmxIl8Y36+FE+98wqM
oT6E0haFK2F7mmITGTdsEFGPLFezgZ9Q4x3i3E9i8qajW95KFkGZ9Vy1BfCvZ/OA
gtOzYiv10o848hWvuMrwSoUXeZwVjAtcdnWZaioGCxx5xzIPUURd+7U9ZRlNv2VF
BqOf5yP/MjBZBh1mjW6kTWILOUHcgn6z0ZaARYJFqy925ZSbrmDVIXzC8ektFmka
jYq5nYu3NgCPOPXgYP6d9yP3LrQslEoTIQqTZKEeHMsD
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:41:21 2026 by rpki-client