Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/vPIVjVAwX42UxaklBzsgTSb8ums.roa
File: vPIVjVAwX42UxaklBzsgTSb8ums.roa (raw, json)
Hash identifier: kMKUZTpIt82bgTbGCS1X6q1BNTOtQxHcJLJYOp/VgTc=
Subject key identifier: BC:F2:15:8D:50:30:5F:8D:94:C5:A9:25:07:3B:20:4D:26:FC:BA:6B
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019F2382D23E978706872B0905D0CBB1339C
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/vPIVjVAwX42UxaklBzsgTSb8ums.roa
Signing time: Thu 02 Jul 2026 15:46:43 +0000
ROA not before: Thu 02 Jul 2026 15:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398436
IP address blocks: 95.164.21.0/24 maxlen: 24
95.164.88.0/24 maxlen: 24
95.164.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:82:d2:3e:97:87:06:87:2b:09:05:d0:cb:b1:33:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 2 15:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcf2158d50305f8d94c5a925073b204d26fcba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:af:62:9e:24:6f:30:05:a5:45:46:cc:07:
28:6b:f6:3a:ad:f9:db:a1:ef:0d:9c:f4:6f:6b:c7:
9a:7e:c1:94:f2:8f:24:e8:e5:78:08:ea:f1:76:5d:
56:a3:d5:0e:cd:8b:f1:99:c7:21:f2:95:75:df:a8:
7c:ec:d6:2c:cb:cb:37:2b:f3:d4:07:80:e2:1d:66:
c0:a8:67:0f:5e:77:b5:6a:52:d9:79:b9:ff:22:5e:
90:8e:c3:1f:83:44:21:61:a6:5f:0b:16:e9:18:35:
c7:1c:7f:af:57:f8:0f:f2:49:65:aa:09:2c:36:53:
97:6f:40:0d:87:e3:0b:89:f8:42:78:89:31:e5:7e:
66:43:88:2f:18:a4:9b:4c:28:20:15:b5:1e:6b:a1:
d9:46:25:b9:d7:7f:0c:27:d6:39:c7:0f:00:5a:c0:
9b:83:b0:1c:22:5d:a1:47:a8:92:d1:56:54:97:a6:
51:f2:04:5f:22:76:64:32:d4:25:9b:fe:c2:b0:d7:
2c:68:0a:cc:98:81:35:33:be:83:c9:73:1a:a1:e5:
78:0f:52:9d:d6:19:a8:20:a9:7b:90:f8:6b:f3:0b:
00:eb:db:7d:14:ec:48:a2:84:9a:c2:7c:fa:49:fa:
05:ad:f1:a1:1e:4f:8d:2b:4c:9c:ec:33:fd:49:0a:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:15:8D:50:30:5F:8D:94:C5:A9:25:07:3B:20:4D:26:FC:BA:6B
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/vPIVjVAwX42UxaklBzsgTSb8ums.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.21.0/24
95.164.88.0/24
95.164.161.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d5:1d:79:8a:4e:a5:d1:35:bd:a5:5f:6d:12:6b:5f:95:bf:
20:ad:02:56:06:af:ca:d0:29:cf:72:d1:46:23:5c:80:83:97:
c0:22:89:4e:76:73:25:25:cd:30:37:76:20:1d:17:c2:08:b9:
7f:a6:2e:e5:5a:4f:0f:7e:75:cc:55:f5:f7:c9:86:68:e0:a4:
89:82:8a:b9:45:47:bf:2d:eb:a4:44:7e:13:b6:3e:19:7c:c2:
8d:43:89:2f:d6:0c:27:a0:7e:bf:d9:3c:89:59:33:14:65:81:
c2:d0:be:ff:d3:14:f3:e0:fa:0c:3e:c8:e1:48:76:73:e3:3a:
16:74:41:b1:11:ee:d3:69:17:ac:f1:3a:49:26:67:35:b4:ce:
dd:a8:a0:89:2f:8e:72:41:87:95:8d:8e:ec:69:15:a6:1d:3f:
57:4e:f2:d5:01:44:bd:a3:9b:31:20:19:40:c8:f1:e9:40:c5:
26:78:a3:76:20:12:a6:ae:0c:02:fc:8a:b2:ad:9f:eb:4f:82:
24:d5:91:4d:96:7a:ca:ba:17:ff:e5:d4:7f:dd:2f:80:e3:42:
15:13:2f:91:5a:fa:42:3e:26:84:65:0e:4f:54:80:2c:00:22:
ae:29:9e:de:cc:88:76:de:c9:5b:62:e2:50:fe:93:6e:c3:53:
2d:14:0d:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8jgtI+l4cGhysJBdDLsTOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjYwNzAyMTU0NjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2YyMTU4ZDUwMzA1ZjhkOTRjNWE5MjUwNzNiMjA0ZDI2ZmNiYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09avYp4kbzAFpUVGzAcoa/Y6rfnb
oe8NnPRva8eafsGU8o8k6OV4COrxdl1Wo9UOzYvxmcch8pV136h87NYsy8s3K/PU
B4DiHWbAqGcPXne1alLZebn/Il6QjsMfg0QhYaZfCxbpGDXHHH+vV/gP8kllqgks
NlOXb0ANh+MLifhCeIkx5X5mQ4gvGKSbTCggFbUea6HZRiW5138MJ9Y5xw8AWsCb
g7AcIl2hR6iS0VZUl6ZR8gRfInZkMtQlm/7CsNcsaArMmIE1M76DyXMaoeV4D1Kd
1hmoIKl7kPhr8wsA69t9FOxIooSawnz6SfoFrfGhHk+NK0yc7DP9SQqA9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLzyFY1QMF+NlMWpJQc7IE0m/LprMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvdlBJVmpWQXdYNDJVeGFrbEJ6c2dUU2I4dW1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX6QVAwQA
X6RYAwQAX6ShMA0GCSqGSIb3DQEBCwUAA4IBAQBj1R15ik6l0TW9pV9tEmtflb8g
rQJWBq/K0CnPctFGI1yAg5fAIolOdnMlJc0wN3YgHRfCCLl/pi7lWk8PfnXMVfX3
yYZo4KSJgoq5RUe/LeukRH4Ttj4ZfMKNQ4kv1gwnoH6/2TyJWTMUZYHC0L7/0xTz
4PoMPsjhSHZz4zoWdEGxEe7TaRes8TpJJmc1tM7dqKCJL45yQYeVjY7saRWmHT9X
TvLVAUS9o5sxIBlAyPHpQMUmeKN2IBKmrgwC/IqyrZ/rT4Ik1ZFNlnrKuhf/5dR/
3S+A40IVEy+RWvpCPiaEZQ5PVIAsACKuKZ7ezIh23slbYuJQ/pNuw1MtFA3q
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:51 2026 by rpki-client