Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/jyvaLm1-JBzFljrC8_Pb4f2rr4g.roa
File: jyvaLm1-JBzFljrC8_Pb4f2rr4g.roa (raw, json)
Hash identifier: ED9eP9++ZKN93T06UmXrcQZgNRabnKbGllXuzLNPqM8=
Subject key identifier: 8F:2B:DA:2E:6D:7E:24:1C:C5:96:3A:C2:F3:F3:DB:E1:FD:AB:AF:88
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019DBB06529A2EDF1F2E3F1FED0F6EFCF3C7
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/jyvaLm1-JBzFljrC8_Pb4f2rr4g.roa
Signing time: Thu 23 Apr 2026 15:47:26 +0000
ROA not before: Thu 23 Apr 2026 15:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54903
IP address blocks: 95.164.118.0/24 maxlen: 24
95.164.128.0/23 maxlen: 24
95.164.130.0/24 maxlen: 24
95.164.134.0/23 maxlen: 24
95.164.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:06:52:9a:2e:df:1f:2e:3f:1f:ed:0f:6e:fc:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Apr 23 15:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f2bda2e6d7e241cc5963ac2f3f3dbe1fdabaf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:32:2e:49:3e:3b:5f:72:66:5e:ed:e3:31:
c4:0e:a8:21:56:99:9b:25:89:40:84:47:e5:50:6f:
a2:fd:b4:70:9b:8a:30:25:22:29:2a:f5:51:85:e9:
9a:6a:45:01:7d:93:28:33:9a:90:91:bf:05:7a:3a:
ab:e4:b0:e3:4d:47:4b:fe:0f:cb:59:ab:58:4a:ad:
33:4d:1d:7a:ad:d9:96:dc:7e:b0:01:6d:1c:e1:5d:
f7:5e:86:44:1a:ba:ad:da:fc:b7:4b:7f:b4:e4:c9:
af:aa:7d:b3:7f:8d:98:e8:d2:23:e1:8a:0e:93:05:
fe:35:24:99:5a:16:18:fc:d9:c1:ee:67:57:22:9c:
3b:f3:be:6b:90:88:51:93:60:85:b9:76:fc:76:06:
5c:6c:ba:28:b7:48:e0:a0:ac:7f:6e:f1:15:b0:20:
84:cd:5b:eb:b7:e7:5e:44:ae:3a:a7:9b:e0:87:0a:
f8:69:ce:95:ab:7d:d9:40:a7:76:78:53:bc:d9:8a:
44:c4:0a:94:2c:db:5b:a5:81:e6:cb:76:47:fb:f8:
15:37:6b:05:fb:92:cf:b6:b2:57:d2:de:64:6a:18:
53:28:3c:fd:fd:9d:78:e1:5a:84:bf:dc:49:b8:4b:
80:e5:0f:17:89:71:d2:60:06:04:b3:b3:d2:f1:58:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:DA:2E:6D:7E:24:1C:C5:96:3A:C2:F3:F3:DB:E1:FD:AB:AF:88
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/jyvaLm1-JBzFljrC8_Pb4f2rr4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.118.0/24
95.164.128.0-95.164.130.255
95.164.134.0-95.164.143.255
Signature Algorithm: sha256WithRSAEncryption
8b:5b:f6:9d:ef:54:f7:62:11:b2:2a:04:b9:70:f0:46:5f:68:
c3:37:71:d9:42:99:10:d9:1f:2c:ef:82:19:82:a5:6e:14:cf:
99:42:af:10:e1:9c:a0:ad:8f:c3:0a:fd:65:7f:5e:7e:ca:4c:
8d:87:04:c4:b8:0e:0a:d3:1f:1c:e1:57:82:2f:5f:f9:cb:1e:
14:4c:34:a6:50:29:9a:e2:17:00:af:63:41:20:89:e2:34:5b:
6b:d8:7d:04:75:83:ff:00:5e:d0:53:47:27:c3:d0:f0:4e:fd:
b9:22:33:f4:51:79:9f:02:6f:fc:b2:fd:51:13:f6:d1:8f:d9:
56:6b:dd:7d:5a:86:10:76:8f:7f:37:a1:a1:cd:7e:64:60:ea:
42:cf:8d:e1:11:1e:30:85:f6:e8:6e:c3:6b:cf:4e:02:c4:c0:
e6:b2:a8:3b:b9:08:a6:72:93:05:1b:5c:eb:4f:dd:6c:b4:30:
a3:f5:20:45:06:fc:5e:66:af:23:ba:54:ae:14:63:b4:3d:1c:
3f:8d:c9:d0:ed:c6:03:1b:c4:cb:4b:ad:36:a5:f3:4a:3c:c8:
61:21:c2:3b:bf:18:8f:26:23:bd:af:f9:bc:e9:ac:50:f3:48:
92:bd:96:56:35:6e:43:08:a4:29:a9:76:09:97:57:39:72:35:
64:c0:95:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:33 2026 by rpki-client