Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/sDlXdZDu1orv91IpZDPEuqp1DX0.roa
File: sDlXdZDu1orv91IpZDPEuqp1DX0.roa (raw, json)
Hash identifier: TcyOoNpXI7p/qfK91VU6zu8UKYoWj+zgwXX+FpfeRKk=
Subject key identifier: B0:39:57:75:90:EE:D6:8A:EF:F7:52:29:64:33:C4:BA:AA:75:0D:7D
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019DC0B084DA8274CE092A322A4B63FE6BF8
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/sDlXdZDu1orv91IpZDPEuqp1DX0.roa
Signing time: Fri 24 Apr 2026 18:11:27 +0000
ROA not before: Fri 24 Apr 2026 18:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 95.164.77.0/24 maxlen: 24
95.164.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:b0:84:da:82:74:ce:09:2a:32:2a:4b:63:fe:6b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Apr 24 18:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b039577590eed68aeff752296433c4baaa750d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:dc:42:38:7d:66:da:c7:74:91:61:eb:93:
a7:75:20:83:f3:d2:1f:7a:0c:02:f2:01:c2:58:b6:
c6:c3:9e:c0:b5:53:16:72:a4:e3:c2:62:4b:4b:74:
e4:a9:af:f4:fc:2b:46:e0:c7:b5:b9:35:f7:75:92:
20:e5:98:75:32:a5:1a:24:9a:ab:83:71:8f:57:42:
ca:a7:7c:d6:20:ef:a0:29:12:d3:c2:07:7b:0a:c2:
bd:bd:1a:a8:d0:d7:5f:77:ae:98:8f:ff:26:12:46:
ef:16:ba:ab:b3:d7:17:dd:93:0d:92:84:13:18:3c:
da:2f:2c:39:37:bb:5a:05:32:5d:36:0c:6b:12:d8:
5f:b1:b5:16:72:1b:dd:5e:22:ad:50:20:c4:f9:4b:
86:e9:01:a3:b6:f5:f4:08:19:08:3f:ce:47:da:8a:
14:ae:c6:ef:d2:96:3a:6d:80:5f:18:79:6f:ec:61:
96:23:0d:b6:6e:7a:3d:d8:ec:d5:0d:96:28:79:43:
42:b0:14:1b:9a:f4:96:7a:7f:d7:67:27:b3:d7:0e:
72:cd:f6:75:20:83:24:1f:b7:1e:84:34:b3:29:35:
48:ee:36:ec:8e:fc:98:50:c0:bc:d0:04:20:86:69:
31:d7:df:30:7d:75:9e:96:86:22:60:1f:4a:26:fd:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:57:75:90:EE:D6:8A:EF:F7:52:29:64:33:C4:BA:AA:75:0D:7D
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/sDlXdZDu1orv91IpZDPEuqp1DX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.77.0/24
95.164.224.0/22
Signature Algorithm: sha256WithRSAEncryption
24:4e:a5:68:95:a0:7d:c6:b6:8d:5b:03:55:e4:cc:98:b2:86:
3d:15:09:f6:43:bb:78:fe:3d:f7:03:42:a3:a7:62:a9:44:a6:
db:fc:40:40:53:01:fe:8b:85:98:24:08:cc:9f:e4:b0:27:01:
fe:1d:e0:d8:c0:58:e1:94:29:ce:00:63:b6:c0:28:10:4f:00:
73:aa:5f:04:88:d0:42:37:2a:29:92:98:f6:60:da:6a:51:64:
f3:cc:d7:9b:0a:bc:72:b6:63:9e:14:12:a6:04:9e:54:b7:0a:
00:c4:de:dd:26:ed:3e:34:54:16:6e:18:9a:ed:e3:82:46:ba:
3a:41:9a:b3:18:16:06:c2:f2:dc:9b:75:5a:e5:b8:06:fe:2a:
84:d5:c5:3a:9e:8b:17:d9:50:ca:9a:67:c2:3b:b3:3e:eb:7f:
86:79:af:bc:84:7e:4a:8c:f2:a4:ae:56:da:23:80:da:42:26:
e7:cb:d0:c0:91:01:37:8f:d0:78:d8:f0:ad:42:06:37:52:cb:
f6:2e:c4:04:3d:fd:be:33:fc:88:6b:9c:b2:c0:0d:46:0a:f8:
93:ed:97:90:2c:25:ac:c6:71:48:5b:ff:c4:70:39:bc:e8:ac:
8a:ea:22:9a:34:10:cd:b8:c8:4b:64:ff:06:b8:73:76:12:0f:
53:ea:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:37 2026 by rpki-client