Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/oIuhu7p6aWmfRWyHDTYYujSpvBg.roa
File: oIuhu7p6aWmfRWyHDTYYujSpvBg.roa (raw, json)
Hash identifier: N6w5aijddF5a+28/lsfmW9lIDEzr9ob0acHLJcTeo5w=
Subject key identifier: A0:8B:A1:BB:BA:7A:69:69:9F:45:6C:87:0D:36:18:BA:34:A9:BC:18
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019D77935FFA1A4283B1E80E48D106ECAA26
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/oIuhu7p6aWmfRWyHDTYYujSpvBg.roa
Signing time: Fri 10 Apr 2026 13:27:20 +0000
ROA not before: Fri 10 Apr 2026 13:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397477
IP address blocks: 95.164.57.0/24 maxlen: 24
95.164.58.0/23 maxlen: 24
95.164.160.0/22 maxlen: 24
95.164.192.0/22 maxlen: 24
95.164.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:93:5f:fa:1a:42:83:b1:e8:0e:48:d1:06:ec:aa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Apr 10 13:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a08ba1bbba7a69699f456c870d3618ba34a9bc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:64:65:d5:9b:ba:75:d1:4d:0e:ca:1f:b8:
85:18:c8:11:ce:3c:e2:51:77:30:00:fb:71:74:4f:
a7:de:b6:f1:23:96:c4:29:e0:d2:aa:1a:89:c3:52:
6a:90:a6:cd:88:bd:9d:2d:ba:de:60:14:74:ec:26:
be:f1:9c:e0:a4:ec:9f:a1:b5:3a:f5:7c:58:2e:34:
c7:e2:13:f6:0d:22:5e:97:fe:23:57:76:b5:f7:41:
31:1b:52:fe:8a:30:de:06:3b:42:2a:cc:56:68:e4:
95:02:8f:85:a1:68:88:62:4a:29:8d:5b:fb:51:bf:
fd:4b:94:18:04:46:5b:f5:0b:ba:b5:58:88:8f:96:
5a:1f:a9:ff:d5:4d:db:d5:38:e1:de:ce:20:dc:d8:
4f:ab:f5:dc:b5:a8:e6:e4:aa:a3:29:1a:a1:37:8b:
bf:64:19:c9:b8:d0:96:7c:73:ce:0f:24:55:12:bd:
f4:e8:58:fb:b1:64:97:38:48:5d:56:8f:a4:51:e1:
1b:0e:67:81:34:b1:64:49:9b:12:e1:59:c8:9d:4c:
ad:51:c2:4d:d6:f8:3a:90:ae:31:de:cc:fe:89:49:
c0:a1:77:8f:fe:7d:1f:ce:43:7f:e5:39:b8:35:86:
5b:03:b3:57:5e:07:0d:55:fc:21:66:85:5e:07:64:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8B:A1:BB:BA:7A:69:69:9F:45:6C:87:0D:36:18:BA:34:A9:BC:18
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/oIuhu7p6aWmfRWyHDTYYujSpvBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.57.0-95.164.59.255
95.164.160.0/22
95.164.192.0/22
95.164.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:dd:3d:de:b8:91:5a:a3:23:de:a8:6d:f4:1c:af:42:dd:d2:
25:8c:e2:ad:57:8c:6d:41:85:36:c7:4e:a0:f3:f9:2e:55:6d:
b8:51:27:80:e0:8d:97:be:6c:0b:76:4c:4f:27:90:c3:20:88:
b6:fa:c6:ac:98:d7:f8:37:81:ac:49:5a:9d:aa:82:f9:10:c7:
a5:d9:1f:f5:0a:c3:1a:35:79:23:fc:cf:2e:2f:20:9e:62:b2:
36:fd:9c:04:b7:bd:c3:bc:69:65:10:00:53:81:f8:96:5a:c1:
32:26:72:00:65:0b:0b:b6:85:b9:59:24:33:d3:01:d7:0b:b5:
91:4e:2c:45:6c:4a:82:1a:49:fd:92:82:38:ac:85:f1:85:a3:
88:84:d9:88:56:20:70:e5:a8:03:a8:51:11:0f:91:85:f0:29:
4f:b7:e3:de:b7:f8:66:d6:94:bb:59:9d:c5:30:7c:1b:c5:1c:
70:88:79:e0:94:4c:69:d4:c7:8d:6d:ac:e1:a6:96:94:55:a0:
10:31:d0:7a:f2:11:58:fc:a8:f2:b6:91:f4:09:32:26:ce:58:
86:7a:8e:ed:5b:cf:99:db:ec:a0:42:64:79:b2:a1:7d:66:2f:
f2:9c:b8:17:ab:e7:0c:6f:92:8e:f9:ed:3c:cb:e0:6e:02:a3:
53:5a:5a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 05:48:40 2026 by rpki-client