
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/0ZnUbFz494YaFYXrrvpst6o3vps.roa
File: 0ZnUbFz494YaFYXrrvpst6o3vps.roa (raw, json)
Hash identifier: OVgxGJmRNj8L4Akc46yjqXSfo2J2UzOCk6rafbqc2OA=
Subject key identifier: D1:99:D4:6C:5C:F8:F7:86:1A:15:85:EB:AE:FA:6C:B7:AA:37:BE:9B
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0198372320494EAF72A022705B45BE922606
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/0ZnUbFz494YaFYXrrvpst6o3vps.roa
Signing time: Wed 23 Jul 2025 11:55:05 +0000
ROA not before: Wed 23 Jul 2025 11:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 95.164.12.0/24 maxlen: 24
95.164.53.0/24 maxlen: 24
95.164.55.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:23:20:49:4e:af:72:a0:22:70:5b:45:be:92:26:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 23 11:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d199d46c5cf8f7861a1585ebaefa6cb7aa37be9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:b6:ba:35:09:7d:3e:ec:17:a0:ca:e3:4c:
78:25:15:39:f4:5c:aa:98:c1:e0:a5:cc:46:da:91:
66:61:93:a4:06:7a:f4:d1:85:57:7d:a8:ad:f6:1f:
10:8e:48:44:2a:34:48:83:eb:b6:6f:8c:e1:ac:35:
d3:23:d9:c9:bb:86:a7:db:d6:47:b1:39:6b:97:e4:
34:85:92:62:86:24:9e:a4:56:ed:44:f2:3d:d4:d3:
0f:b3:f3:4d:8d:92:03:f3:59:90:52:52:d1:df:f9:
50:dc:1d:69:69:78:85:06:b8:83:f1:94:a8:4a:a9:
cb:e5:d1:16:57:9d:fc:b9:03:d2:4d:93:42:dd:b3:
db:2c:c9:3b:fd:c2:d8:98:3d:b0:51:49:1c:6c:b9:
3a:e7:e8:67:28:32:13:c9:7b:da:b4:af:25:94:c6:
c5:c5:ca:63:20:49:aa:d0:fe:c2:60:b9:66:64:93:
18:6a:42:3c:52:66:39:1b:9b:c0:f3:ea:e9:d6:71:
9c:45:ea:63:c9:6e:16:c5:1e:5a:a5:c4:47:af:41:
d4:ac:08:77:ce:38:c7:22:c6:b4:1f:81:47:d3:cd:
ed:89:43:e2:10:38:79:32:9a:82:8c:64:32:20:3e:
22:23:96:8e:31:1a:72:be:11:8e:6a:1c:fa:36:07:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:D4:6C:5C:F8:F7:86:1A:15:85:EB:AE:FA:6C:B7:AA:37:BE:9B
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/0ZnUbFz494YaFYXrrvpst6o3vps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.12.0/24
95.164.53.0/24
95.164.55.0/24
95.164.123.0/24
95.164.250.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c2:54:b0:cb:8c:28:56:bc:03:00:3f:e6:5d:29:c8:c4:77:
93:79:ee:c1:11:5d:7c:fc:94:cd:91:cb:61:8e:65:dd:06:a7:
50:48:4a:20:40:86:23:a4:e2:6e:ac:8a:fe:b7:fe:8e:49:cb:
7e:b7:e7:e4:1d:91:1d:17:6a:73:44:a9:61:ba:45:75:e7:b2:
3e:2a:b7:dd:62:22:0e:27:01:7e:51:cf:bb:66:28:a1:66:0c:
af:4e:93:17:11:11:e8:65:8e:a2:e8:50:68:47:c1:0e:c7:54:
c0:87:a3:3d:86:9f:d5:c9:af:04:07:03:03:63:de:c3:3d:07:
86:93:f6:b5:60:ae:7c:b4:e3:1a:fb:98:54:73:14:e2:7a:22:
98:34:90:75:0e:c8:01:bc:79:3c:a0:31:63:95:c4:1d:72:a3:
41:4a:6a:b9:b7:16:9c:0b:c9:6d:94:c2:9f:df:73:b4:4b:c3:
cd:6b:ac:19:43:fd:76:92:45:82:38:e3:b7:b7:7d:56:76:67:
8b:ba:20:77:d9:29:a7:8c:97:f9:d7:25:63:36:6d:dc:f9:2f:
c2:0e:5d:fa:1a:d0:47:f7:ec:52:b6:1c:fc:bb:b0:5a:02:3a:
26:2b:8b:94:11:47:48:14:93:3c:af:78:11:d4:b2:07:f8:d5:
10:ae:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:30:00 2025 by rpki-client