Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ba73IPffmKSKK9DFDoXNC4Y9YNk.roa
File: ba73IPffmKSKK9DFDoXNC4Y9YNk.roa (raw, json)
Hash identifier: t/gHUljPs1ACa8ElAB5fM90FPR1WPQYxp8iIB9819BI=
Subject key identifier: 6D:AE:F7:20:F7:DF:98:A4:8A:2B:D0:C5:0E:85:CD:0B:86:3D:60:D9
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019832229CC1E11F96CA288F9AC156362140
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ba73IPffmKSKK9DFDoXNC4Y9YNk.roa
Signing time: Tue 22 Jul 2025 12:36:25 +0000
ROA not before: Tue 22 Jul 2025 12:36:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 95.155.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:22:9c:c1:e1:1f:96:ca:28:8f:9a:c1:56:36:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 22 12:36:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6daef720f7df98a48a2bd0c50e85cd0b863d60d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:8c:42:36:2a:b6:88:33:9a:63:12:6d:13:
86:8f:c0:ba:15:98:6a:db:22:cb:97:12:f6:fb:4e:
20:ed:1f:6c:77:8b:82:9b:f0:b9:bf:a0:39:2f:68:
89:33:0c:b5:dc:7c:78:57:e8:c5:23:de:91:6b:3f:
52:52:ed:21:f5:4f:31:0d:76:56:5d:4a:b7:f8:5b:
2e:22:51:ee:65:73:db:b7:54:ae:ce:58:1b:1a:6b:
8d:bf:db:e9:83:f9:96:7e:9f:1e:6a:6e:00:0d:a8:
cc:34:a1:8a:16:67:ae:a9:2c:af:12:d2:19:43:46:
3a:02:29:f2:00:2b:98:b3:58:b4:3d:56:6f:a4:4f:
31:38:fb:48:db:22:d7:b0:b2:7d:18:7c:f2:22:68:
34:0f:a6:d2:90:93:b4:b0:07:05:5c:03:9b:31:9f:
71:8d:55:44:67:52:b1:91:28:62:38:8a:f3:a9:53:
e5:24:fe:7f:c0:56:36:f2:d3:1d:c0:ec:f4:7f:72:
86:e8:c4:fe:6e:31:bc:f2:03:92:50:b6:28:24:ae:
d8:16:65:9b:75:75:24:c6:51:5f:e3:1a:5f:91:6f:
0b:6e:54:5c:35:e2:35:1c:a2:be:6e:56:d4:fe:03:
28:b5:69:1e:bc:51:75:21:a7:82:d3:8f:66:b2:06:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AE:F7:20:F7:DF:98:A4:8A:2B:D0:C5:0E:85:CD:0B:86:3D:60:D9
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ba73IPffmKSKK9DFDoXNC4Y9YNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.128.0/24
Signature Algorithm: sha256WithRSAEncryption
75:22:74:51:6f:4c:a9:0a:49:06:c0:51:65:fe:b2:2b:8e:f3:
dd:8e:4d:06:61:d1:22:5b:1f:fe:b7:aa:4a:3a:6f:cd:aa:02:
fc:25:b1:27:19:d1:80:d1:0c:e4:13:cf:72:e4:02:5c:46:c7:
be:11:57:e1:00:b3:4e:91:05:f1:c9:d2:75:16:cd:2b:63:c7:
38:b4:b1:eb:31:3b:97:82:35:0a:c0:2c:84:28:10:35:94:13:
b8:f9:8c:9f:e7:1c:75:62:e6:82:c6:de:6c:d7:6c:df:c0:8c:
e8:cd:08:00:84:9d:3a:7d:d0:8b:dc:bf:39:e4:a0:ae:7c:8f:
56:7f:49:80:00:89:d4:e9:f8:42:ce:df:15:7e:e2:4e:6e:ce:
fa:0d:7f:ff:f3:e8:d4:12:79:63:2d:25:44:ee:89:cf:3f:29:
d6:57:58:f6:dd:6c:d3:cd:40:ef:db:e3:2f:48:2b:2d:ca:76:
e9:27:df:f2:ad:cd:7d:c4:8d:0c:56:b0:ca:49:34:9c:29:cc:
8c:43:8a:73:f6:c8:73:5b:1c:0b:c2:3e:73:48:87:eb:06:f7:
b9:70:98:dc:fd:d7:2a:08:ea:7a:ad:1e:07:d8:1e:71:b6:68:
2a:b3:f6:86:e2:b3:46:e8:24:fa:34:bd:0e:2e:66:75:be:a1:
d7:b7:6b:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgyIpzB4R+WyiiPmsFWNiFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjUwNzIyMTIzNjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGFlZjcyMGY3ZGY5OGE0OGEyYmQwYzUwZTg1Y2QwYjg2M2Q2MGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGOMQjYqtogzmmMSbROGj8C6FZhq
2yLLlxL2+04g7R9sd4uCm/C5v6A5L2iJMwy13Hx4V+jFI96Raz9SUu0h9U8xDXZW
XUq3+FsuIlHuZXPbt1SuzlgbGmuNv9vpg/mWfp8eam4ADajMNKGKFmeuqSyvEtIZ
Q0Y6AinyACuYs1i0PVZvpE8xOPtI2yLXsLJ9GHzyImg0D6bSkJO0sAcFXAObMZ9x
jVVEZ1KxkShiOIrzqVPlJP5/wFY28tMdwOz0f3KG6MT+bjG88gOSULYoJK7YFmWb
dXUkxlFf4xpfkW8LblRcNeI1HKK+blbU/gMotWkevFF1IaeC049msgb6gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG2u9yD335ikiivQxQ6FzQuGPWDZMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvYmE3M0lQZmZtS1NLSzlERkRvWE5DNFk5WU5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5uAMA0G
CSqGSIb3DQEBCwUAA4IBAQB1InRRb0ypCkkGwFFl/rIrjvPdjk0GYdEiWx/+t6pK
Om/NqgL8JbEnGdGA0QzkE89y5AJcRse+EVfhALNOkQXxydJ1Fs0rY8c4tLHrMTuX
gjUKwCyEKBA1lBO4+Yyf5xx1YuaCxt5s12zfwIzozQgAhJ06fdCL3L855KCufI9W
f0mAAInU6fhCzt8VfuJObs76DX//8+jUEnljLSVE7onPPynWV1j23WzTzUDv2+Mv
SCstynbpJ9/yrc19xI0MVrDKSTScKcyMQ4pz9shzWxwLwj5zSIfrBve5cJjc/dcq
COp6rR4H2B5xtmgqs/aG4rNG6CT6NL0OLmZ1vqHXt2vH
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:08:01 2025 by rpki-client