Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/cwRpfRdx6S5tnfB8Wn66txz0wg8.roa
File: cwRpfRdx6S5tnfB8Wn66txz0wg8.roa (raw, json)
Hash identifier: 3A3WuSQvzfBhTvlwJNEJAfi3/4HEkFaJ8AudfSUVWXg=
Subject key identifier: 73:04:69:7D:17:71:E9:2E:6D:9D:F0:7C:5A:7E:BA:B7:1C:F4:C2:0F
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019D296ACFAF885028F48350B92408843587
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/cwRpfRdx6S5tnfB8Wn66txz0wg8.roa
Signing time: Thu 26 Mar 2026 09:12:38 +0000
ROA not before: Thu 26 Mar 2026 09:12:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397477
IP address blocks: 95.164.160.0/22 maxlen: 24
95.164.192.0/22 maxlen: 24
95.164.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:6a:cf:af:88:50:28:f4:83:50:b9:24:08:84:35:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Mar 26 09:12:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7304697d1771e92e6d9df07c5a7ebab71cf4c20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:c1:3c:c4:67:19:02:7d:4a:3e:24:fb:92:
4f:02:ab:e7:16:5c:6e:7b:32:a3:27:00:9d:ee:5e:
b1:91:4a:f2:ed:81:c1:4d:a0:10:32:18:57:f2:1c:
ca:bc:12:d2:ba:9d:d9:c6:de:ae:b8:fc:8f:86:55:
2e:19:68:12:32:fd:d0:2d:6f:06:04:65:8c:b0:58:
e8:01:c1:bc:4a:0c:98:3f:40:c1:93:2e:82:2f:6f:
43:3e:36:10:ff:1b:21:aa:d9:ed:7c:43:fa:3c:f1:
ca:2d:1b:ef:1d:c3:6b:96:23:bd:6c:62:20:6f:95:
09:a7:cd:c1:36:d1:66:f0:08:34:e8:5d:2f:bf:06:
4c:10:d3:11:db:86:d1:be:a2:ad:48:7f:21:c8:4f:
61:43:1a:8c:09:f6:f9:52:79:d3:32:82:a4:1c:c5:
48:f2:30:64:cc:b8:79:e2:d6:6a:96:fa:b7:ac:0f:
77:46:a5:94:d4:4d:7c:40:9e:b0:fa:92:1d:5f:02:
f5:9f:19:f3:e3:54:23:91:13:6c:48:30:c8:42:81:
eb:c0:cd:92:b3:53:5e:d0:54:f0:15:5b:cd:5b:5d:
7b:aa:7b:6c:fa:04:11:06:37:ff:69:03:92:b3:62:
a6:9d:90:6d:ee:c8:4d:ec:19:c3:f5:cf:25:2f:b8:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:69:7D:17:71:E9:2E:6D:9D:F0:7C:5A:7E:BA:B7:1C:F4:C2:0F
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/cwRpfRdx6S5tnfB8Wn66txz0wg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.160.0/22
95.164.192.0/22
95.164.244.0/22
Signature Algorithm: sha256WithRSAEncryption
54:03:fd:3b:4a:a7:bf:cc:ac:29:cb:57:6a:6b:30:9a:a2:00:
fa:bf:07:03:8a:96:aa:13:3c:0d:41:cf:0c:40:10:f8:84:6a:
c7:e2:81:cb:6d:c9:aa:37:8f:9a:dd:4b:f5:1c:6f:1d:cd:11:
5e:13:a6:de:33:0e:a2:cd:25:4d:ce:c5:46:77:e0:1b:44:15:
36:cd:77:f8:29:75:3c:cd:34:18:59:0f:d5:e4:21:b0:b0:66:
43:b9:5a:80:82:7c:dc:57:da:ba:34:2a:6d:91:e0:bc:aa:db:
51:c1:01:e8:46:01:01:20:70:b3:60:2e:6c:35:35:e8:cb:dc:
9e:6f:c0:32:00:0c:84:a9:6b:98:39:cd:e0:6d:db:c3:29:f8:
ea:4f:a4:27:3c:ab:03:fc:ad:4a:e1:54:dc:80:79:b2:09:fb:
62:15:cb:27:bf:a0:2a:61:0e:25:1b:eb:56:db:f9:a6:55:f6:
5c:31:0b:a0:88:69:05:32:db:e4:f9:85:2e:fd:36:bb:41:27:
fa:f4:21:8b:ae:14:9a:14:88:00:43:28:1d:59:77:57:c6:d3:
a7:ad:13:3a:a8:3e:d0:15:03:1c:e6:66:bb:08:71:0b:2f:fe:
49:92:f8:82:f2:d6:40:25:f4:43:32:06:fe:4d:b7:f7:4e:30:
4e:8a:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:39 2026 by rpki-client