Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/n3z1BrcrJJiu7Hcuv_B2v_5F6XU.roa
File: n3z1BrcrJJiu7Hcuv_B2v_5F6XU.roa (raw, json)
Hash identifier: pHSKP6x04OxMC7fdYY2ivdUheOazHyRyV0V+hl8Y7YY=
Subject key identifier: 9F:7C:F5:06:B7:2B:24:98:AE:EC:77:2E:BF:F0:76:BF:FE:45:E9:75
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019EBC939EE759BB7EBB83F8A136BFEAFF09
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/n3z1BrcrJJiu7Hcuv_B2v_5F6XU.roa
Signing time: Fri 12 Jun 2026 16:04:11 +0000
ROA not before: Fri 12 Jun 2026 16:04:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 95.164.6.0/23 maxlen: 24
95.164.19.0/24 maxlen: 24
95.164.45.0/24 maxlen: 24
95.164.113.0/24 maxlen: 24
95.164.114.0/24 maxlen: 24
95.164.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:93:9e:e7:59:bb:7e:bb:83:f8:a1:36:bf:ea:ff:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 12 16:04:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f7cf506b72b2498aeec772ebff076bffe45e975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:84:4e:2f:96:b5:e0:c0:60:44:53:b2:69:
c3:fa:57:e3:cf:fc:15:d3:bc:fe:e8:d8:35:ba:12:
61:6e:40:06:e6:1c:5d:1f:30:ef:b4:3e:b1:38:68:
01:a2:e8:02:01:51:f9:a1:3f:02:9a:26:24:71:af:
cc:38:44:53:23:1f:0a:9f:b3:39:04:e1:89:9f:fa:
13:ba:5b:1c:4b:3c:e6:a9:8b:c4:e3:a0:15:18:19:
ac:10:36:2d:67:13:87:01:7b:0f:f6:18:8d:af:73:
e4:3c:80:48:b5:a1:8e:a0:64:1f:e5:15:5c:2a:b1:
d5:3f:8e:f3:33:e9:8b:76:0c:39:97:a4:bc:88:58:
7c:7d:12:31:c6:ed:d3:40:52:0b:59:55:5a:9d:e8:
9c:46:bf:70:c9:22:ef:bd:62:38:ea:ef:f3:52:61:
3e:1c:e2:64:7e:d3:87:a2:44:21:c7:94:88:d6:ba:
4a:a7:d4:61:11:b6:a2:62:cc:db:8d:f6:a0:0e:70:
2c:40:25:ea:38:65:66:31:91:46:e3:a2:cf:17:58:
a2:8b:86:39:17:cd:dc:34:fb:18:a9:6f:6d:0d:1c:
f3:fb:79:87:a6:4a:06:32:78:d4:c4:37:0e:9c:d5:
62:ea:a2:65:69:75:ef:7c:eb:9c:21:65:9b:6d:fd:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:F5:06:B7:2B:24:98:AE:EC:77:2E:BF:F0:76:BF:FE:45:E9:75
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/n3z1BrcrJJiu7Hcuv_B2v_5F6XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.6.0/23
95.164.19.0/24
95.164.45.0/24
95.164.113.0-95.164.114.255
95.164.116.0/24
Signature Algorithm: sha256WithRSAEncryption
20:13:13:c3:e2:eb:bb:31:c4:39:31:b1:43:a4:7e:4e:5f:d8:
78:a8:af:1f:d7:3f:d5:d7:cb:67:a6:29:1c:05:a6:96:2a:8a:
9a:cc:03:79:bd:7e:7b:c1:75:d7:36:cd:9b:92:e6:72:07:ee:
97:86:22:10:b9:7e:0e:2b:97:8c:41:b7:27:60:c8:d2:94:ea:
f4:b1:3e:39:44:da:53:8c:9d:eb:b5:ea:8f:d8:b1:d6:4b:ec:
f0:2c:fd:d9:91:3e:13:82:cb:9d:51:61:de:e8:39:48:b7:5f:
5f:2e:a1:ec:37:c8:9e:b6:39:52:e3:45:30:2f:d3:bd:46:ec:
6a:17:4f:64:f0:f7:18:63:9a:11:b5:13:90:98:69:30:44:82:
32:b5:d2:b5:21:dd:4e:2b:44:28:f0:32:a4:b1:b4:ed:ca:2c:
eb:f8:94:e1:a3:57:82:10:bc:37:c1:29:18:89:2d:08:ab:94:
1c:09:16:86:fb:26:b4:5a:b2:24:11:fa:63:a6:b0:58:04:68:
6c:ac:cf:71:02:aa:2a:c0:40:f6:9b:af:eb:7b:1e:b1:d7:a4:
e7:ac:84:7c:78:38:80:b2:e7:cf:fd:22:8e:c5:dd:ad:95:6a:
5d:52:d3:96:2a:7e:ba:2e:a1:ef:cc:26:87:65:e3:12:c9:4d:
29:e3:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:34:42 2026 by rpki-client