Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Zv4nzA8pV-KrpsjtPCzN_eTYhEc.roa
File: Zv4nzA8pV-KrpsjtPCzN_eTYhEc.roa (raw, json)
Hash identifier: E7fCsz1UYKF/q4+Vw/VDSnDmB+BvqozpSiqsVZx75LY=
Subject key identifier: 66:FE:27:CC:0F:29:57:E2:AB:A6:C8:ED:3C:2C:CD:FD:E4:D8:84:47
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019FA8ADDDE799722764F032DF4283226B44
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Zv4nzA8pV-KrpsjtPCzN_eTYhEc.roa
Signing time: Tue 28 Jul 2026 12:23:14 +0000
ROA not before: Tue 28 Jul 2026 12:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39249
IP address blocks: 95.164.71.0/24 maxlen: 24
193.104.254.0/24 maxlen: 24
195.149.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:ad:dd:e7:99:72:27:64:f0:32:df:42:83:22:6b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 28 12:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66fe27cc0f2957e2aba6c8ed3c2ccdfde4d88447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:a9:8b:2a:cd:e4:dd:af:a1:94:4d:9d:c4:
3e:da:51:68:b3:04:c0:0c:5d:15:5e:05:1a:6b:aa:
0a:5e:99:dd:60:ec:cd:a9:c1:5e:ad:5d:48:25:94:
b8:07:da:06:8d:0e:b8:81:c1:3c:1d:6c:8c:dc:a4:
94:47:7c:71:44:37:69:58:cb:2d:0e:1f:0c:be:ff:
e0:57:25:83:81:97:39:30:72:a4:d9:65:97:f1:07:
30:03:bc:2b:5e:f1:64:69:0a:6b:0e:45:24:df:de:
31:cd:10:de:00:7c:31:8d:40:d3:dd:fa:75:cf:e4:
9f:f4:8b:03:2b:da:a1:56:7c:a5:cf:36:f2:df:cd:
bc:04:68:18:b8:2d:b8:9c:ba:21:44:80:15:dc:d9:
b2:3c:d8:3d:e6:e9:0b:de:06:37:b7:5f:d7:9e:5f:
3b:8c:df:d4:10:c6:8e:be:5e:ad:da:50:70:b3:7c:
01:86:b2:ec:e1:86:66:13:18:7f:eb:5f:df:a4:8a:
46:a0:40:4b:2c:b2:61:db:09:92:02:ad:55:50:fd:
39:1a:6a:35:ec:51:5b:b4:62:22:ea:63:11:e2:82:
55:53:04:1e:2f:f6:55:f0:54:be:27:81:7c:0e:14:
2c:dc:a6:f3:65:98:70:a0:9e:b9:64:dd:9b:b3:c3:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:27:CC:0F:29:57:E2:AB:A6:C8:ED:3C:2C:CD:FD:E4:D8:84:47
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Zv4nzA8pV-KrpsjtPCzN_eTYhEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.71.0/24
193.104.254.0/24
195.149.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:14:6d:46:67:42:f1:f5:45:24:c7:f0:f7:e7:b2:2c:27:40:
32:52:2c:d5:a1:f9:0f:fa:f9:03:ab:e1:af:7b:40:ef:69:09:
77:d3:ad:32:2d:b1:a6:38:4b:b1:2c:49:41:85:03:de:ae:01:
31:5c:16:b9:4b:f9:14:b0:89:f3:bf:03:1b:77:07:a6:de:61:
34:2f:9a:7f:09:47:19:5a:a5:23:b4:a6:de:dc:24:93:87:ac:
fd:c0:4e:70:03:59:c1:7d:09:89:2f:b9:69:39:3e:d6:55:80:
25:23:47:0e:98:bf:10:e3:08:a6:88:27:9e:6d:3f:53:e8:16:
69:10:1e:9c:d7:a9:95:68:ed:17:20:13:d0:f2:54:d8:8e:41:
72:0e:64:c6:df:76:aa:50:7a:28:bf:6a:8f:76:8e:41:25:5d:
5d:7c:f1:82:d6:21:a6:e9:fe:5e:56:7f:74:e7:be:a8:16:ff:
5b:c2:8a:f8:6a:c2:30:3d:2f:b2:d1:78:00:2d:d8:fe:9d:4f:
1a:c8:26:c1:5f:68:9f:11:4f:f4:72:5f:05:45:4a:03:ff:72:
0f:ed:0c:b0:11:b1:dd:23:c7:bb:64:10:8e:6a:e8:46:55:6f:
4b:86:d7:2a:10:0f:a6:4b:11:0b:02:fa:32:39:fc:4c:78:e8:
7a:34:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:30:25 2026 by rpki-client