Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/H-ScHuymPUqLhHhrOwZf5e3c638.roa
File: H-ScHuymPUqLhHhrOwZf5e3c638.roa (raw, json)
Hash identifier: rpr9/qtmKzImUoUp/C1ltaEspAy/FbNXWh2GJZyJHZE=
Subject key identifier: 1F:E4:9C:1E:EC:A6:3D:4A:8B:84:78:6B:3B:06:5F:E5:ED:DC:EB:7F
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019FA8ADDD5FFB7DA198BDCD2BB4101DFFBB
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/H-ScHuymPUqLhHhrOwZf5e3c638.roa
Signing time: Tue 28 Jul 2026 12:23:14 +0000
ROA not before: Tue 28 Jul 2026 12:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8772
IP address blocks: 95.164.15.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.47.0/24 maxlen: 24
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.56.0/24 maxlen: 24
95.164.61.0/24 maxlen: 24
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.115.0/24 maxlen: 24
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/24 maxlen: 24
95.164.249.0/24 maxlen: 24
95.164.251.0/24 maxlen: 24
185.234.254.0/24 maxlen: 24
193.104.254.0/24 maxlen: 24
2a10:eb80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:ad:dd:5f:fb:7d:a1:98:bd:cd:2b:b4:10:1d:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 28 12:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fe49c1eeca63d4a8b84786b3b065fe5eddceb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:85:aa:f8:0d:3f:48:67:29:be:7c:9b:2d:
11:f4:8f:5e:5d:36:2c:62:f9:6a:52:78:66:73:e9:
97:8c:13:74:f5:e6:ad:4f:e8:4e:2d:1c:6a:a5:e3:
09:72:9f:41:f3:ff:3e:55:63:a0:44:82:4d:09:4b:
1c:fd:92:aa:8f:23:5b:23:86:d7:d0:4e:5a:46:b1:
e8:d3:9f:ce:7c:60:0b:d7:7a:0a:c9:31:02:1a:74:
0f:45:56:ec:05:55:7a:6b:82:0c:0d:9b:dc:dc:20:
eb:87:97:c9:41:71:e9:51:f6:54:12:53:00:0a:49:
aa:fd:35:af:fa:24:9a:c6:ba:5d:5c:f9:e1:2d:ac:
78:44:55:b7:cf:b0:34:d6:33:97:37:b7:ed:4e:2d:
61:22:c1:60:a2:27:5e:98:83:e6:ae:7d:a7:04:e9:
6b:05:86:81:95:bb:59:a9:75:46:f7:7b:1a:7e:c0:
55:37:10:80:d7:55:f3:b0:09:10:c3:b7:bb:fa:fc:
63:29:b2:e9:f7:9d:4c:61:8e:35:04:4e:09:4c:79:
b1:4f:6a:88:a3:f5:9d:1c:ed:ba:57:02:31:3f:ae:
5c:49:26:2e:53:3c:49:d8:ba:be:95:a1:82:a8:eb:
01:f6:92:03:29:d5:4b:da:c5:b6:66:f6:40:0c:7a:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E4:9C:1E:EC:A6:3D:4A:8B:84:78:6B:3B:06:5F:E5:ED:DC:EB:7F
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/H-ScHuymPUqLhHhrOwZf5e3c638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.15.0/24
95.164.40.0/22
95.164.47.0/24
95.164.49.0-95.164.50.255
95.164.56.0/22
95.164.61.0/24
95.164.76.0/24
95.164.80.0/22
95.164.115.0/24
95.164.120.0/23
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
185.234.254.0/24
193.104.254.0/24
IPv6:
2a10:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:3f:cc:3d:38:ed:38:89:17:ca:65:13:bf:dd:67:11:1d:f6:
48:3c:eb:1d:8f:1b:c6:2d:21:17:95:1d:ef:3a:ef:37:7c:e8:
8b:8b:6d:99:ff:83:7e:a3:a2:6e:be:75:a3:07:a9:ff:5b:41:
c2:6e:2a:d6:e4:58:9f:5e:cc:e5:03:41:ca:16:a4:68:c4:53:
f1:ed:65:b3:9d:aa:79:e6:67:e9:41:d4:6b:b5:d3:ae:4e:9a:
bb:00:e1:d5:f9:4b:2a:54:c8:69:3f:cb:f8:8b:bc:e4:17:5d:
9f:a3:70:b1:4e:1d:59:02:d8:20:14:ea:d3:dc:ff:c1:f8:d2:
6c:75:d4:2d:64:be:73:fa:01:be:b1:f1:46:2c:bd:03:09:3c:
d4:94:94:a1:e3:e2:ee:35:19:7f:df:a3:e1:ce:e1:a9:a6:6b:
a9:62:d8:52:21:5c:11:43:96:6a:18:8b:ae:c8:15:2f:31:61:
0c:91:05:13:40:4b:20:22:a8:8a:e4:01:7e:a9:bf:d9:f5:69:
e9:84:1f:50:ff:9a:12:0c:42:42:dc:f4:cc:40:d8:e1:5c:26:
b2:48:b0:d9:23:a7:17:b8:3b:70:53:47:93:83:34:08:98:90:
a1:3a:29:23:db:20:4b:34:c6:52:c0:9f:59:5f:bf:d2:8f:a5:
a8:79:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:21:13 2026 by rpki-client