Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/zkHzTCtYiowciJzuMpJn6q9jqKI.roa
File: zkHzTCtYiowciJzuMpJn6q9jqKI.roa (raw, json)
Hash identifier: chWv4Hf84USxbOxnC3JQTaGxmQLYs9oN3leRMDJMIG0=
Subject key identifier: CE:41:F3:4C:2B:58:8A:8C:1C:88:9C:EE:32:92:67:EA:AF:63:A8:A2
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A122272D7137FB42CF9DF0E374A5C5DB8F
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/zkHzTCtYiowciJzuMpJn6q9jqKI.roa
Signing time: Fri 09 Oct 2026 19:32:35 +0000
ROA not before: Fri 09 Oct 2026 19:32:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198308
IP address blocks: 95.164.52.0/24 maxlen: 24
95.164.89.0/24 maxlen: 24
95.164.117.0/24 maxlen: 24
95.164.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:27:2d:71:37:fb:42:cf:9d:f0:e3:74:a5:c5:db:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Oct 9 19:32:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce41f34c2b588a8c1c889cee329267eaaf63a8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:c9:52:2f:26:40:e8:05:34:51:69:34:6b:
dc:c5:44:b6:ec:28:eb:6b:1f:fe:bb:b6:77:f6:cf:
78:8f:9b:86:ec:f9:d6:ec:bc:43:4a:d5:32:b4:d1:
57:1e:50:cb:7a:61:43:3e:6d:d1:21:b1:ba:cc:da:
e6:e8:0b:04:77:9e:fd:4e:29:17:2e:84:4e:48:fa:
ba:af:c4:20:ba:b7:69:74:c1:de:21:eb:28:b5:0a:
b5:6b:82:d9:79:e7:b6:16:cb:ef:d3:61:f9:15:cc:
93:6c:7a:a2:4d:77:3b:3d:35:ba:da:3c:e4:3d:41:
bc:7e:f7:68:4e:ad:bd:62:fc:66:ad:6d:0d:c3:48:
08:ea:bd:3a:a4:73:39:b4:5f:19:82:42:14:8f:4c:
b5:60:b3:28:2d:16:7c:a5:cf:08:fb:3d:07:dd:74:
2a:3f:34:a5:36:8b:db:21:be:f9:29:fd:15:97:c2:
f4:4b:19:dc:3b:a8:33:18:c2:13:8e:96:40:88:0c:
6b:e3:4e:60:d6:77:13:8f:22:b8:a3:50:23:9b:33:
8d:65:dd:da:65:0f:a4:d6:86:61:dd:66:85:c8:ee:
36:a7:c8:2e:4e:c2:00:c6:9c:c1:ee:28:00:77:2a:
5a:71:b4:e1:22:d5:d3:94:74:a6:da:56:3b:71:05:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:41:F3:4C:2B:58:8A:8C:1C:88:9C:EE:32:92:67:EA:AF:63:A8:A2
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/zkHzTCtYiowciJzuMpJn6q9jqKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.52.0/24
95.164.89.0/24
95.164.117.0/24
95.164.162.0/24
Signature Algorithm: sha256WithRSAEncryption
23:be:41:bd:7f:58:56:57:f5:18:2f:42:db:93:3c:d2:38:0e:
e7:fe:44:2f:81:72:3c:60:89:64:46:1b:92:c4:ec:0c:f2:93:
d2:83:3a:59:b3:46:27:7f:c8:34:a7:43:44:9b:eb:8d:6a:3e:
4d:23:0f:c2:0b:80:81:d5:b2:5c:0e:af:fc:0c:03:4f:90:65:
22:a2:53:3d:ed:42:41:6c:7d:ad:9e:15:60:d6:55:24:25:89:
0d:a8:5e:c0:f4:cb:6f:28:f9:36:a1:73:39:73:09:e0:93:f5:
b8:6e:a2:ff:29:0c:c5:9c:d7:e9:9d:0d:0c:ef:93:e0:60:24:
1e:ab:e6:72:af:8c:e7:49:1a:8c:86:43:da:33:36:4a:82:06:
bf:0f:25:2f:13:d5:68:9d:5a:ea:d3:ed:46:89:cb:41:01:cf:
2d:a1:f6:98:61:1a:76:e4:e7:a3:2f:ce:c7:55:f1:64:f7:8a:
21:e6:ea:43:94:e0:3a:47:e8:df:33:24:25:d0:0e:96:63:68:
9e:ae:08:32:18:45:20:5a:46:4e:1b:74:f1:c5:17:a9:03:ce:
fa:02:cd:00:ce:ee:f9:57:19:60:49:f4:f4:01:7a:c9:73:ad:
ad:9d:56:42:e7:5d:75:86:1a:1d:36:08:b7:13:b3:0e:eb:6c:
51:f7:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:51:22 2026 by rpki-client