Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/X3BpdcrulpgtepJF9zuahb_VK1Q.roa
File: X3BpdcrulpgtepJF9zuahb_VK1Q.roa (raw, json)
Hash identifier: taCCefT+4dHHdbGpdMXNmS+leAtxYaJiPmPLHRNTSgE=
Subject key identifier: 5F:70:69:75:CA:EE:96:98:2D:7A:92:45:F7:3B:9A:85:BF:D5:2B:54
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019DC0B0855480F7B620F59E80D978177511
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/X3BpdcrulpgtepJF9zuahb_VK1Q.roa
Signing time: Fri 24 Apr 2026 18:11:27 +0000
ROA not before: Fri 24 Apr 2026 18:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33659
IP address blocks: 95.164.193.0/24 maxlen: 24
95.164.195.0/24 maxlen: 24
95.164.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:b0:85:54:80:f7:b6:20:f5:9e:80:d9:78:17:75:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Apr 24 18:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f706975caee96982d7a9245f73b9a85bfd52b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:7c:c6:b6:0e:db:92:b2:ea:33:3f:ed:fb:
48:d9:1d:91:93:3a:fe:c6:25:d9:e7:53:f4:76:18:
0e:16:d0:11:c5:c5:e3:a5:cd:0b:be:ec:73:8c:4b:
37:43:08:8c:07:0a:f1:6b:4e:b1:b6:30:b4:43:85:
37:6c:ec:0a:8c:f7:15:a9:1b:49:f4:11:57:f4:10:
97:62:5a:b5:20:0a:40:2a:1f:3d:96:d7:84:e7:67:
53:75:e5:d5:8e:35:b8:55:90:04:b6:7c:6e:82:f4:
b7:8b:c9:1d:84:f9:58:10:4a:ce:7d:91:54:7b:22:
46:0c:7d:e1:08:f0:92:39:d9:86:05:8b:f4:7f:ef:
e7:b3:8e:f7:8d:4c:0c:fa:f7:f7:a8:1a:9b:07:1c:
ce:25:fa:59:50:97:c3:03:26:28:9a:a3:23:60:17:
51:f0:25:43:fe:60:74:a9:56:4e:3f:2b:94:93:b3:
98:32:44:8e:fe:19:18:8a:10:be:62:87:e9:74:43:
00:69:66:b8:9c:92:42:c3:ad:ae:a5:14:2d:79:69:
f1:28:3e:37:fe:57:ef:5e:a4:4e:36:33:c8:a6:d9:
e9:db:f3:6d:6c:ac:e9:51:e2:ed:da:d0:8e:83:62:
12:52:b2:df:07:51:0a:90:40:fb:c8:de:0a:06:4e:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:69:75:CA:EE:96:98:2D:7A:92:45:F7:3B:9A:85:BF:D5:2B:54
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/X3BpdcrulpgtepJF9zuahb_VK1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.193.0/24
95.164.195.0/24
95.164.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:5d:57:18:a8:c1:c4:d2:6f:7c:64:59:0e:85:a9:2a:2d:9a:
68:d5:67:5e:3f:41:16:9d:6e:e0:a4:3e:b3:98:30:68:68:f7:
86:4b:a2:d7:12:84:07:5a:c7:b2:94:96:54:65:c1:a2:57:0a:
e4:a9:c9:5a:65:e6:b5:c6:1d:47:f3:0b:c1:2c:1d:62:50:17:
30:a1:eb:fb:95:d5:e5:7a:64:e1:08:c1:e8:24:0e:b4:c5:52:
b6:3a:4b:5e:13:fc:ad:3c:57:d0:95:ca:a2:39:74:0d:2f:0a:
39:26:a7:18:13:63:49:91:f6:39:e6:a2:8e:ad:70:ea:58:5c:
d9:fc:53:a3:90:6e:37:d7:22:05:fe:31:60:86:67:1b:2b:18:
38:00:42:5e:47:51:38:e2:ee:60:db:3e:ca:df:9f:2e:0d:02:
4c:90:e5:09:1d:b9:53:16:dc:b5:0f:e9:33:1e:69:72:0a:9b:
7e:4b:29:9e:af:3b:c4:35:2e:f0:28:a1:db:d2:3f:32:31:47:
4e:56:86:f7:84:1d:81:8e:07:fe:d1:c7:58:30:80:15:6e:d5:
ed:2f:83:6e:96:8d:07:f5:93:05:ec:35:b2:4f:1f:27:b5:ee:
4a:e2:55:cf:ae:2a:79:72:18:a7:c0:32:d9:42:13:6f:2f:fb:
0f:21:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:14 2026 by rpki-client