Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/rSDqIuR1cJHDYk_CgTQlDEo5wnM.roa
File: rSDqIuR1cJHDYk_CgTQlDEo5wnM.roa (raw, json)
Hash identifier: cMmP0GJ0C9u64d5AYK50Eq8q183lKIxZZUlFj+nmeqg=
Subject key identifier: AD:20:EA:22:E4:75:70:91:C3:62:4F:C2:81:34:25:0C:4A:39:C2:73
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019D29633AEDB348D415A47E65F01AA345FA
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/rSDqIuR1cJHDYk_CgTQlDEo5wnM.roa
Signing time: Thu 26 Mar 2026 09:04:22 +0000
ROA not before: Thu 26 Mar 2026 09:04:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8772
IP address blocks: 95.164.15.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.56.0/24 maxlen: 24
95.164.61.0/24 maxlen: 24
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.115.0/24 maxlen: 24
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/24 maxlen: 24
95.164.249.0/24 maxlen: 24
95.164.251.0/24 maxlen: 24
185.234.254.0/24 maxlen: 24
2a10:eb80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:63:3a:ed:b3:48:d4:15:a4:7e:65:f0:1a:a3:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Mar 26 09:04:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad20ea22e4757091c3624fc28134250c4a39c273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:88:54:e5:8c:58:e0:fb:7d:a6:9a:39:54:
00:ad:80:52:d4:5f:5e:f7:4e:e6:96:1c:b0:6b:9b:
ce:b2:0b:32:8b:d3:04:3f:33:6d:1a:72:3c:4e:ab:
bc:57:c8:ad:02:a0:d6:da:ce:e7:8f:02:07:fd:19:
fe:ff:75:d5:d5:25:2d:d9:66:ea:16:c3:b3:a1:89:
d0:45:27:73:5a:b4:d2:c7:a1:18:96:21:02:df:df:
3c:4f:d1:9d:82:f3:be:d5:65:47:6f:95:40:96:9d:
44:96:30:b9:65:7f:f7:f5:73:30:5b:20:8f:3d:3c:
0a:6a:84:d5:4e:28:9c:13:3b:5c:6c:20:0d:7c:00:
c0:67:96:4f:28:9c:6f:f6:29:4b:71:2e:a6:25:2b:
c6:cd:fa:23:58:62:1e:a3:24:88:5b:67:7e:3d:fa:
21:4d:62:f7:f3:77:7a:a5:1b:4d:aa:27:7a:5d:3d:
3d:01:36:48:1f:7a:35:a6:ab:09:0e:8d:6d:1e:62:
bd:4d:15:7a:f9:7f:8c:2c:92:90:21:73:9a:90:6f:
1d:ee:19:15:30:58:9d:4f:ca:97:8f:a7:8a:a9:f6:
e5:36:22:bf:f9:c3:f9:ee:bc:f0:c2:2a:19:2a:80:
f5:d2:3e:8a:c8:cf:db:7e:32:a2:84:90:87:6c:59:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:EA:22:E4:75:70:91:C3:62:4F:C2:81:34:25:0C:4A:39:C2:73
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/rSDqIuR1cJHDYk_CgTQlDEo5wnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.15.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.56.0/22
95.164.61.0/24
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.115.0/24
95.164.120.0/23
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
185.234.254.0/24
IPv6:
2a10:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
28:ae:4d:59:c3:0e:59:53:c9:17:a4:f2:1d:a8:30:e8:bd:9a:
c4:ca:55:bd:d1:22:c7:c7:24:03:50:4b:c3:0d:96:90:cb:12:
ec:8e:b0:bf:a8:d1:81:68:35:7f:a2:8d:86:ac:c0:8e:44:8a:
49:fc:58:d8:2f:25:7d:12:69:1f:ff:e6:d5:a7:f0:cc:b6:1d:
8f:9d:1f:b9:7d:b1:c4:43:53:4d:4b:d8:87:40:38:e7:a4:7c:
39:af:92:2e:3f:83:a7:c4:45:d9:1e:e3:43:29:ce:0e:0b:c2:
be:f8:31:40:f1:57:bc:6e:d9:87:bb:e1:26:a2:55:a7:51:d6:
04:dd:fe:13:f7:2d:b1:2a:66:83:e5:d6:28:a0:56:f1:70:4f:
1f:b5:c1:b4:0c:95:e6:94:c4:bc:72:a1:b6:5f:fb:c3:1b:ce:
07:f6:48:10:0e:33:a9:83:4c:21:27:70:59:23:09:3a:37:bb:
d2:54:75:ef:78:f6:98:62:67:db:e1:67:1c:86:b3:b9:67:b8:
86:86:05:8d:74:18:19:4c:58:49:a2:b5:83:c3:3f:98:56:51:
aa:f8:86:32:27:d7:86:44:9f:a4:2a:49:8c:82:0c:54:06:1d:
9c:5e:32:f5:83:9e:80:67:fb:c2:7f:c6:e3:ef:8d:5d:09:a2:
3f:3f:b2:b5
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAZ0pYzrts0jUFaR+ZfAao0X6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjYwMzI2MDkwNDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDIwZWEyMmU0NzU3MDkxYzM2MjRmYzI4MTM0MjUwYzRhMzljMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb6IVOWMWOD7faaaOVQArYBS1F9e
907mlhywa5vOsgsyi9MEPzNtGnI8Tqu8V8itAqDW2s7njwIH/Rn+/3XV1SUt2Wbq
FsOzoYnQRSdzWrTSx6EYliEC3988T9GdgvO+1WVHb5VAlp1EljC5ZX/39XMwWyCP
PTwKaoTVTiicEztcbCANfADAZ5ZPKJxv9ilLcS6mJSvGzfojWGIeoySIW2d+Pfoh
TWL383d6pRtNqid6XT09ATZIH3o1pqsJDo1tHmK9TRV6+X+MLJKQIXOakG8d7hkV
MFidT8qXj6eKqfblNiK/+cP57rzwwioZKoD10j6KyM/bfjKihJCHbFldwQIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFK0g6iLkdXCRw2JPwoE0JQxKOcJzMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvclNEcUl1UjFjSkhEWWtfQ2dUUWxERW81d25NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAF+kDwME
Al+kKDAMAwQAX6QxAwQAX6QyAwQCX6Q4AwQAX6Q9MAwDBANfpEgDBABfpEwDBAJf
pFADBABfpHMDBAFfpHgwDAMEAV+kqgMEBF+koAMEAV+k+AMEAF+k+wMEALnq/jAN
BAIAAjAHAwUDKhDrgDANBgkqhkiG9w0BAQsFAAOCAQEAKK5NWcMOWVPJF6TyHagw
6L2axMpVvdEix8ckA1BLww2WkMsS7I6wv6jRgWg1f6KNhqzAjkSKSfxY2C8lfRJp
H//m1afwzLYdj50fuX2xxENTTUvYh0A456R8Oa+SLj+Dp8RF2R7jQynODgvCvvgx
QPFXvG7Zh7vhJqJVp1HWBN3+E/ctsSpmg+XWKKBW8XBPH7XBtAyV5pTEvHKhtl/7
wxvOB/ZIEA4zqYNMISdwWSMJOje70lR173j2mGJn2+FnHIazuWe4hoYFjXQYGUxY
SaK1g8M/mFZRqviGMifXhkSfpCpJjIIMVAYdnF4y9YOegGf7wn/G4++NXQmiPz+y
tQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:02:00 2026 by rpki-client