Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/kjQlzjNCn1ka7UuDGkx3on8hDFQ.roa
File: kjQlzjNCn1ka7UuDGkx3on8hDFQ.roa (raw, json)
Hash identifier: zuf8JmTly3pm8Yy1S6ziqUt5PwJniI/Q1UqHxXQCH0c=
Subject key identifier: 92:34:25:CE:33:42:9F:59:1A:ED:4B:83:1A:4C:77:A2:7F:21:0C:54
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019F2836BCC551C786E92216B0D9422D3164
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/kjQlzjNCn1ka7UuDGkx3on8hDFQ.roa
Signing time: Fri 03 Jul 2026 13:41:43 +0000
ROA not before: Fri 03 Jul 2026 13:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198308
IP address blocks: 95.164.89.0/24 maxlen: 24
95.164.117.0/24 maxlen: 24
95.164.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:36:bc:c5:51:c7:86:e9:22:16:b0:d9:42:2d:31:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 3 13:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=923425ce33429f591aed4b831a4c77a27f210c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:17:f1:20:84:43:01:f1:96:77:f2:e7:b1:
13:bd:fb:02:db:3c:cd:a8:4c:6a:01:f1:7f:27:63:
de:bb:4a:9a:8e:a8:87:91:5f:07:4a:e4:9d:ff:21:
8b:38:f0:06:57:a4:88:d5:b0:71:90:fd:ba:88:01:
10:b5:11:0e:5e:5a:dd:60:72:e6:8b:0b:bc:1c:25:
4f:f9:6c:aa:a5:fb:4b:44:fe:f6:21:0d:7b:7f:ce:
0c:81:30:fc:fd:51:09:fc:1a:21:7d:04:7b:2c:cc:
20:f4:54:9d:e7:44:7d:3d:e2:de:2b:0a:a3:fa:ca:
bf:4a:7d:fc:69:af:4d:10:08:2f:ad:e0:78:de:a0:
1f:82:82:02:c0:e0:71:1a:0b:ad:6d:cf:ca:aa:1b:
89:d0:6f:bc:70:ee:5f:f0:3e:ea:78:92:09:4a:f0:
0d:52:0b:d3:7b:4d:6a:fb:9e:9c:c9:69:43:75:33:
27:69:8b:ab:1d:5f:63:ae:d8:99:2e:20:20:b1:61:
0d:0e:c9:dc:8c:c2:d8:9d:ef:7b:29:0c:55:dd:f8:
29:6f:d3:6c:62:e9:e4:51:73:59:86:70:b3:82:a1:
4d:ff:8d:dd:80:03:80:a5:d5:23:1d:2b:65:65:80:
a7:ad:38:f9:b7:c9:b6:37:d6:23:e3:85:42:4e:78:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:25:CE:33:42:9F:59:1A:ED:4B:83:1A:4C:77:A2:7F:21:0C:54
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/kjQlzjNCn1ka7UuDGkx3on8hDFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.89.0/24
95.164.117.0/24
95.164.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1d:13:46:af:b3:a6:c7:dd:cc:67:b1:c0:98:42:f7:8e:9a:
9f:e7:35:d0:80:68:33:39:b5:82:c1:41:d3:4c:e5:d0:83:d2:
e5:5d:80:93:5d:4e:11:30:45:3b:46:e3:cf:a6:40:fd:47:ab:
c4:5b:f8:ca:ae:d6:54:13:0b:be:cc:45:81:49:5b:13:39:29:
ef:fa:ae:fe:86:bc:5b:ed:6d:1e:80:64:c1:51:75:2f:f9:03:
32:f9:18:f6:d2:2c:a1:05:15:da:bc:d9:f4:1a:7e:16:0e:8b:
4d:ed:e0:75:36:db:d5:b2:71:8d:1b:4c:23:cc:b0:18:a6:8a:
17:b9:61:a4:49:7c:6a:92:8c:81:78:73:f1:29:a3:77:e7:d7:
cf:e2:5f:69:75:73:25:d6:8b:30:7f:1e:64:20:8a:69:b6:85:
44:cc:49:ac:77:e8:72:93:03:49:98:eb:0c:17:30:66:a8:16:
1b:31:52:07:3a:5f:42:43:25:30:8e:37:b5:ae:f6:0d:f4:78:
c9:14:3e:20:9e:43:cf:04:b4:8c:de:34:e0:8b:ac:f2:8d:5f:
20:4a:ae:e1:99:55:e2:68:90:c3:c0:6e:a4:60:26:5a:50:2b:
7e:ab:61:f9:33:c5:ee:d0:a4:51:be:8b:fc:98:8f:ba:f7:c6:
5f:da:ec:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 05:45:36 2026 by rpki-client