Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/MIWe6_AUcHSjRgC4Sn1hvPGPAVQ.roa
File: MIWe6_AUcHSjRgC4Sn1hvPGPAVQ.roa (raw, json)
Hash identifier: RHnTGPBWdCvZaUsgPteZ8dK8qDQOfdI5+BZrUWBa1No=
Subject key identifier: 30:85:9E:EB:F0:14:70:74:A3:46:00:B8:4A:7D:61:BC:F1:8F:01:54
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019F03FE96042D1D4AEB9F132EA1EB34369C
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/MIWe6_AUcHSjRgC4Sn1hvPGPAVQ.roa
Signing time: Fri 26 Jun 2026 12:54:03 +0000
ROA not before: Fri 26 Jun 2026 12:54:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 95.128.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:fe:96:04:2d:1d:4a:eb:9f:13:2e:a1:eb:34:36:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Jun 26 12:54:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30859eebf0147074a34600b84a7d61bcf18f0154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:21:58:3a:18:52:6f:09:07:84:24:d9:fe:
dc:16:f3:fc:5b:fd:ae:df:0e:d6:2f:eb:46:ca:60:
20:55:4e:64:1b:f0:fc:c6:7d:17:8d:69:27:65:78:
bf:35:42:0c:1f:60:1e:e2:ad:e6:94:8f:d6:b2:99:
a2:d9:38:dd:2e:53:01:c7:e5:1a:d0:c5:2f:36:71:
33:bf:dc:09:05:29:df:cb:83:44:b0:8d:99:95:1e:
e3:a4:4b:a9:0b:ab:ec:1f:fa:89:79:53:39:91:13:
1d:1f:04:32:97:d1:77:a1:8d:6b:4f:33:ab:bc:be:
01:ae:97:ad:5c:76:15:5f:39:9e:9a:b9:4b:e2:71:
e2:f4:a6:e6:67:c8:49:32:cd:c0:40:11:d0:e7:22:
ec:c2:81:b2:51:eb:78:2e:a1:13:6b:36:ba:98:4a:
a4:eb:a4:3f:c9:0b:46:03:34:77:0b:5e:2c:5c:08:
d8:3b:18:a2:20:94:58:76:05:5d:0e:0d:b5:b8:98:
7d:ad:c0:54:27:20:1e:b3:56:80:31:0f:34:f4:dc:
1a:fb:2e:08:33:75:e4:f4:ff:81:7e:84:4a:3e:8d:
55:46:69:e6:f9:2f:ed:78:b7:9a:86:d4:ca:cc:94:
04:2b:fb:1b:42:40:57:50:2c:d6:01:7b:ae:9d:7b:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:9E:EB:F0:14:70:74:A3:46:00:B8:4A:7D:61:BC:F1:8F:01:54
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/MIWe6_AUcHSjRgC4Sn1hvPGPAVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.195.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f8:c1:45:41:39:01:72:11:4d:c7:5a:d8:44:80:d3:33:0a:
fb:8d:7e:fa:bc:df:57:17:01:77:8f:fb:18:cb:95:8c:95:e7:
b8:e3:74:70:19:d9:8b:3a:35:62:27:e3:a8:08:48:8a:c5:84:
c9:38:6b:93:08:8c:78:b6:d1:66:96:58:35:33:95:60:fe:c2:
3d:39:43:0a:90:5b:e2:39:e1:57:ad:4d:9c:02:dd:18:f5:8a:
1f:86:6a:b7:46:06:fe:da:ba:59:83:0e:c7:1f:2d:9a:cf:81:
64:56:ba:ba:fa:a9:f9:22:da:53:1b:36:ad:9f:83:4d:a5:12:
59:74:24:bd:ca:5f:7b:25:05:1f:17:75:44:11:aa:21:2d:d1:
9d:57:bd:d3:ff:16:f3:de:4e:72:0d:d4:30:92:4a:aa:95:4e:
a5:72:e1:f8:0c:f7:ce:08:3c:a3:a1:b3:21:ee:54:2f:64:ad:
72:8f:b0:7e:81:9f:21:9c:bd:86:fc:cb:e3:09:bc:bb:79:29:
22:9c:be:ff:79:e2:c0:e6:33:6c:40:57:43:85:b3:e3:e6:56:
1c:3f:0c:5c:a2:e8:47:7d:d0:91:2a:d6:67:7e:3c:7f:72:af:
f7:f4:ac:1b:59:9a:4f:d9:98:0e:56:cd:10:85:86:e3:6f:49:
d6:04:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:57 2026 by rpki-client