Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/sCgtb8nSmIelW5IPSJIss2LpHxo.roa
File: sCgtb8nSmIelW5IPSJIss2LpHxo.roa (raw, json)
Hash identifier: d93sAhPMBrJTveUQ/GF7O8YBA712v8N5wKhdwGeraAg=
Subject key identifier: B0:28:2D:6F:C9:D2:98:87:A5:5B:92:0F:48:92:2C:B3:62:E9:1F:1A
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A0F90612E8797F7C27D55A72623A787569
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/sCgtb8nSmIelW5IPSJIss2LpHxo.roa
Signing time: Thu 01 Oct 2026 19:51:59 +0000
ROA not before: Thu 01 Oct 2026 19:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204487
IP address blocks: 95.164.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:06:12:e8:79:7f:7c:27:d5:5a:72:62:3a:78:75:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Oct 1 19:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0282d6fc9d29887a55b920f48922cb362e91f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:b2:aa:84:ce:a1:7c:1b:7d:00:39:ec:a7:
7d:c4:cd:ab:41:7b:d3:db:0c:11:7b:67:01:25:19:
c1:5b:6c:5a:6a:eb:e1:5c:05:b0:97:89:1c:8b:c9:
e1:24:b1:9f:7c:72:e0:bd:1d:c1:a2:9a:ba:9a:41:
84:50:a7:17:2c:b4:1b:71:03:e9:74:43:13:d3:03:
75:7c:07:08:6c:66:cc:95:91:b2:38:59:5f:28:45:
31:ed:5a:a6:d1:be:7d:36:7d:a6:36:fd:9a:85:f1:
74:99:7e:91:f6:87:62:1f:cf:fc:cf:37:88:22:b5:
ad:87:5a:7f:f7:08:4c:6d:a1:7d:22:ce:6c:45:aa:
e5:2d:ae:47:09:d9:c5:cc:d0:64:fb:07:97:26:ec:
69:87:89:64:36:86:48:57:fb:f2:1e:97:da:92:83:
fb:e9:64:ac:c0:5b:c8:5d:2c:0b:35:d3:14:8d:85:
23:f2:74:48:8b:b1:10:96:4f:07:e7:70:a8:b6:4e:
1a:4b:3c:a6:98:07:8d:93:d4:d2:b5:51:ae:db:f3:
fa:fb:e1:cb:19:b9:0d:46:6e:15:60:d1:4f:ff:90:
85:fe:b3:27:c0:c1:8b:d7:ea:c0:c8:f4:fb:5a:2f:
f3:f2:d4:fa:53:22:c4:eb:b0:6f:51:77:58:77:b0:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:2D:6F:C9:D2:98:87:A5:5B:92:0F:48:92:2C:B3:62:E9:1F:1A
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/sCgtb8nSmIelW5IPSJIss2LpHxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d6:8f:f4:ae:9d:af:5e:39:10:ea:59:17:d4:df:c6:a4:82:
71:e6:25:82:ae:29:09:ed:b5:4a:2a:f8:de:f3:e3:c8:60:1f:
15:b5:05:00:be:4f:06:f9:ec:2b:78:b1:08:dd:ee:f9:ec:29:
8f:63:e1:6c:6f:71:e9:04:dc:fd:94:c1:e7:89:0f:09:b2:87:
cb:61:2e:28:f2:a4:87:de:5b:32:bd:12:97:25:59:85:05:03:
0b:72:1e:05:69:41:61:ef:48:26:3c:7f:d9:47:1f:af:d1:47:
b0:5b:ee:9d:87:b8:31:5f:a2:d3:d2:d4:8a:61:64:95:66:5e:
09:ba:df:1e:2e:f5:26:03:47:0c:e6:7a:58:9b:23:48:72:a5:
c7:bd:d1:97:65:0b:b7:42:10:3f:ed:83:59:4c:a3:95:8b:91:
a3:18:7e:31:ea:fa:f9:1f:4d:c8:c2:7b:2f:c0:87:9b:1c:f6:
05:fe:e1:38:2a:36:f0:98:c5:a1:63:f0:70:de:e8:30:41:18:
a1:b6:5e:56:b5:2d:09:98:f0:46:ac:38:35:57:76:f8:be:4a:
82:39:98:a1:36:40:29:69:28:f7:7f:04:46:c1:a0:52:9c:1b:
d9:53:60:0c:ac:9b:78:e8:e8:d3:7d:6b:d3:92:34:71:ff:c2:
4d:73:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:24 2026 by rpki-client