Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/V9MunteQeVICf2ICr71lxQH0Fho.roa
File: V9MunteQeVICf2ICr71lxQH0Fho.roa (raw, json)
Hash identifier: eyd5tdJUMOhtnb51XXGrnbSnVth9KptYyQQSksmwF/U=
Subject key identifier: 57:D3:2E:9E:D7:90:79:52:02:7F:62:02:AF:BD:65:C5:01:F4:16:1A
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F42B06B59B2BCC768E48829BD2C080B9
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/V9MunteQeVICf2ICr71lxQH0Fho.roa
Signing time: Thu 10 Jul 2025 11:49:09 +0000
ROA not before: Thu 10 Jul 2025 11:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59682
IP address blocks: 95.164.54.0/24 maxlen: 24
95.164.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:2b:06:b5:9b:2b:cc:76:8e:48:82:9b:d2:c0:80:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 11:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57d32e9ed7907952027f6202afbd65c501f4161a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:f8:b6:80:44:5f:61:4f:55:84:8e:1c:c3:
a3:d7:36:8e:8a:d5:9c:34:7e:3a:6c:78:01:dc:63:
57:b4:60:29:d2:ab:ba:c3:a0:ef:82:c0:48:a0:bc:
f6:d0:4d:07:7b:4f:35:ed:ea:51:60:75:51:dc:4c:
44:5c:21:11:8d:b6:c1:41:a2:d3:75:ae:a2:fa:80:
60:ad:8b:72:0e:8a:1d:f6:9b:02:21:1f:d7:8f:24:
d7:2a:b8:07:92:51:d0:4e:e1:60:0c:c7:34:b9:cc:
e9:10:96:d4:2b:f5:9a:f7:4b:2a:08:c1:38:2a:02:
56:a1:25:25:b2:51:f6:33:0b:16:87:ce:1b:5a:ab:
fc:81:3e:08:b5:25:0a:f5:34:76:dc:2f:f0:ec:d1:
0c:a9:47:80:6d:af:48:2f:15:2b:ca:38:0e:49:cf:
d3:d6:a7:b0:d1:3a:a6:3c:76:d5:e1:50:4a:0f:e4:
f6:38:cd:1e:c6:41:eb:c8:d0:02:c0:53:20:f9:9e:
61:b6:6f:39:b4:ef:bb:39:99:ac:f1:6f:28:9d:39:
a5:be:43:52:d0:f1:fa:46:f4:52:ef:5b:85:90:95:
31:2f:d9:71:02:19:89:7d:25:21:c9:99:52:0a:ec:
39:38:06:e3:4d:3b:3e:e1:36:f6:d0:60:ed:97:9a:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D3:2E:9E:D7:90:79:52:02:7F:62:02:AF:BD:65:C5:01:F4:16:1A
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/V9MunteQeVICf2ICr71lxQH0Fho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.54.0/24
95.164.95.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e2:e0:25:af:9a:02:d4:e6:9a:6b:36:22:17:65:71:fb:fa:
cd:88:a1:22:26:1e:3e:ab:d2:b9:a5:ef:9b:a0:1f:8b:f7:76:
71:20:36:70:8b:8e:e2:12:a2:e5:50:5b:0e:b2:23:43:66:08:
d8:24:aa:51:99:74:cb:7a:de:25:7a:09:6c:2c:d7:96:61:4d:
64:8e:b1:27:f5:5d:0f:49:62:53:37:2b:65:06:2a:d3:ee:65:
ca:8b:ec:57:53:83:76:1d:4c:9e:cd:39:7d:b9:c6:0f:78:45:
ac:c2:b8:11:e9:39:eb:d2:94:f4:ae:d4:de:32:52:38:f3:a6:
af:de:95:4c:b3:56:07:8a:c4:72:88:ec:dd:5e:cd:0c:a6:36:
9d:c1:9b:96:ad:a3:58:9c:66:91:03:2e:e6:57:f2:29:68:ab:
d6:eb:1a:98:76:38:c8:38:5a:d3:00:49:f8:1d:80:d9:66:da:
1c:68:e4:d1:16:5e:fe:df:1b:c8:85:e0:12:b5:8a:e5:d1:ac:
bc:4f:da:2e:3f:62:a4:c8:da:dd:e2:9b:1f:86:00:12:f4:0f:
39:49:7e:9b:4e:56:d8:36:4c:8f:73:b4:d0:8b:8b:85:b9:0c:
a0:d8:f1:5a:14:6c:75:fb:99:2d:49:84:48:32:50:d1:e2:85:
b9:3a:33:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:49 2025 by rpki-client