Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/F1bmo7MQx4-w8uy_7VLVl4Z5geY.roa
File: F1bmo7MQx4-w8uy_7VLVl4Z5geY.roa (raw, json)
Hash identifier: kF+f5ODkGs/wH/b8gRRShuB3RtmW9bOlAZoZAKl8/6w=
Subject key identifier: 17:56:E6:A3:B3:10:C7:8F:B0:F2:EC:BF:ED:52:D5:97:86:79:81:E6
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019889B51C3F5187D2F64B4A4C3BD9B06147
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/F1bmo7MQx4-w8uy_7VLVl4Z5geY.roa
Signing time: Fri 08 Aug 2025 12:43:24 +0000
ROA not before: Fri 08 Aug 2025 12:43:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 95.164.0.0/24 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.32.0/24 maxlen: 24
95.164.35.0/24 maxlen: 24
95.164.62.0/24 maxlen: 24
95.164.63.0/24 maxlen: 24
95.164.113.0/24 maxlen: 24
95.164.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:b5:1c:3f:51:87:d2:f6:4b:4a:4c:3b:d9:b0:61:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Aug 8 12:43:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1756e6a3b310c78fb0f2ecbfed52d597867981e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:18:b5:88:4d:33:2b:50:f5:18:c5:23:65:
40:27:70:8a:c5:74:c4:37:ae:fa:27:d7:9a:fc:3e:
34:59:69:54:65:96:40:fd:0c:7a:d6:45:4f:b7:50:
5e:89:9d:30:c7:d8:6d:70:0a:cf:c4:4a:ed:d0:ac:
01:52:4f:fa:1a:92:9c:ca:1c:66:c9:da:6e:cc:ed:
0d:e2:27:fc:b3:99:03:b8:e0:4d:2c:11:0d:4a:79:
2d:cf:cf:f1:fb:98:6d:43:7e:28:17:3e:83:16:9f:
1e:5b:23:46:7d:d6:c9:c3:52:79:bc:c0:66:c6:14:
90:bc:fb:66:b0:8a:b1:6b:1e:0e:f2:50:f8:2e:81:
92:51:be:2d:c2:4a:44:7c:76:58:e3:6d:0e:04:0b:
22:3b:a6:c0:d1:2b:a5:a9:b0:a0:cd:fc:fe:02:6e:
42:9b:d6:41:ef:f1:ad:72:59:16:36:c1:85:61:d1:
eb:4c:02:18:4f:7e:e9:c6:53:6a:e7:6d:71:bc:a1:
18:8b:fb:54:0e:5e:da:e9:fa:38:a2:e8:8c:c4:be:
ef:b6:d3:08:94:7a:f7:2c:a7:7c:7b:70:9f:da:f3:
27:8c:6d:3b:1a:a1:98:53:d4:94:99:a9:ad:ec:24:
2f:99:8b:61:e7:5c:cf:86:e8:ae:3e:98:b7:2d:e4:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:E6:A3:B3:10:C7:8F:B0:F2:EC:BF:ED:52:D5:97:86:79:81:E6
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/F1bmo7MQx4-w8uy_7VLVl4Z5geY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.0.0/24
95.164.21.0-95.164.23.255
95.164.32.0/24
95.164.35.0/24
95.164.62.0/23
95.164.113.0/24
95.164.115.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b5:d2:73:06:36:6c:f0:9a:bd:00:7b:77:18:e5:de:9f:8f:
a0:d5:9c:c6:db:b7:6b:18:ed:f7:d2:43:82:96:24:73:0c:19:
51:5b:0e:a0:22:61:dc:c3:d5:4a:f6:cf:de:11:3f:6c:0a:ff:
de:d9:b2:50:38:27:cf:d9:c8:fa:84:b0:6f:13:b1:71:48:2f:
b6:83:a3:81:52:a4:08:a9:ac:34:74:0d:dc:42:cf:f6:ad:da:
15:f7:00:b3:6c:5e:ac:b8:2c:c2:5a:9f:41:cb:1b:1b:34:c6:
43:55:4c:b7:da:3e:e6:ea:ef:57:0c:d5:1a:94:75:7f:5e:0c:
b4:65:94:86:1e:e4:a4:d0:d2:d0:4b:24:a2:00:57:02:57:00:
ee:88:e9:97:a3:80:d2:74:58:4e:b0:55:5d:e3:19:8f:ab:2c:
54:87:21:eb:19:10:74:45:df:05:f4:19:3e:9c:2c:cf:98:1f:
2e:e5:2e:d1:90:a7:1f:a5:dd:15:f8:c1:3c:f1:cb:bc:3a:9c:
f1:e7:bb:70:44:09:75:ef:ad:51:3a:4c:2d:27:4b:7c:e9:3a:
d4:4e:71:1e:e3:40:72:7c:4d:c8:bf:c7:88:77:81:2a:cf:10:
a5:85:3e:cc:fc:fb:98:53:98:dc:f7:42:6b:23:1c:8a:38:f1:
6c:11:a5:93
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZiJtRw/UYfS9ktKTDvZsGFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjUwODA4MTI0MzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzU2ZTZhM2IzMTBjNzhmYjBmMmVjYmZlZDUyZDU5Nzg2Nzk4MWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjIYtYhNMytQ9RjFI2VAJ3CKxXTE
N676J9ea/D40WWlUZZZA/Qx61kVPt1BeiZ0wx9htcArPxErt0KwBUk/6GpKcyhxm
ydpuzO0N4if8s5kDuOBNLBENSnktz8/x+5htQ34oFz6DFp8eWyNGfdbJw1J5vMBm
xhSQvPtmsIqxax4O8lD4LoGSUb4twkpEfHZY420OBAsiO6bA0SulqbCgzfz+Am5C
m9ZB7/GtclkWNsGFYdHrTAIYT37pxlNq521xvKEYi/tUDl7a6fo4ouiMxL7vttMI
lHr3LKd8e3Cf2vMnjG07GqGYU9SUmamt7CQvmYth51zPhuiuPpi3LeRT0QIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFBdW5qOzEMePsPLsv+1S1ZeGeYHmMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvRjFibW83TVF4NC13OHV5XzdWTFZsNFo1Z2VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAX6QAMAwD
BABfpBUDBANfpBADBABfpCADBABfpCMDBAFfpD4DBABfpHEDBABfpHMwDQYJKoZI
hvcNAQELBQADggEBAEi10nMGNmzwmr0Ae3cY5d6fj6DVnMbbt2sY7ffSQ4KWJHMM
GVFbDqAiYdzD1Ur2z94RP2wK/97ZslA4J8/ZyPqEsG8TsXFIL7aDo4FSpAiprDR0
DdxCz/at2hX3ALNsXqy4LMJan0HLGxs0xkNVTLfaPubq71cM1RqUdX9eDLRllIYe
5KTQ0tBLJKIAVwJXAO6I6ZejgNJ0WE6wVV3jGY+rLFSHIesZEHRF3wX0GT6cLM+Y
Hy7lLtGQpx+l3RX4wTzxy7w6nPHnu3BECXXvrVE6TC0nS3zpOtROcR7jQHJ8Tci/
x4h3gSrPEKWFPsz8+5hTmNz3QmsjHIo48WwRpZM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:33:12 2025 by rpki-client