Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/1jfZW_D7UOXSu39RlXiUyL_tLjk.roa
File: 1jfZW_D7UOXSu39RlXiUyL_tLjk.roa (raw, json)
Hash identifier: Wm52sVxYb4B7EnFd3mHTcBpVOHveBj16ZYTfOT8EX/A=
Subject key identifier: D6:37:D9:5B:F0:FB:50:E5:D2:BB:7F:51:95:78:94:C8:BF:ED:2E:39
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019E6F8FFB254DB53F9846560063984AC76C
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/1jfZW_D7UOXSu39RlXiUyL_tLjk.roa
Signing time: Thu 28 May 2026 17:09:27 +0000
ROA not before: Thu 28 May 2026 17:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 95.155.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:8f:fb:25:4d:b5:3f:98:46:56:00:63:98:4a:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 28 17:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d637d95bf0fb50e5d2bb7f51957894c8bfed2e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:62:b1:29:db:15:b4:01:e1:4a:1b:61:7f:
8f:57:32:dc:89:4e:db:6f:a4:52:da:f8:97:f4:9e:
2d:21:a5:8d:c5:9a:ec:b2:df:4c:b0:d8:ac:04:e3:
c6:e4:ab:8a:d0:21:d1:78:20:34:d6:34:91:e4:e3:
e5:f9:08:e6:e7:f0:3e:45:3c:4e:97:e5:53:34:69:
b3:25:99:df:1a:51:65:3b:fc:82:93:da:29:f5:58:
cd:a5:b6:bd:3c:a5:15:c3:37:6f:de:33:62:8d:42:
a5:b1:d0:70:fd:43:92:e0:26:e5:33:43:32:5c:fe:
a5:ba:cb:5b:a3:ff:fc:3e:fd:94:46:e7:cd:a4:1a:
e2:41:20:47:64:0b:91:e3:dc:a8:bb:41:9e:74:e4:
57:ef:f2:31:55:f0:a5:4a:45:b9:fc:f9:25:d8:40:
19:6d:f6:5d:03:cb:51:91:b0:4c:ae:24:8f:86:41:
27:cb:ff:7e:16:2c:7e:59:4c:c8:34:32:e7:56:19:
1b:dd:ab:d8:82:88:8d:ec:35:70:93:d3:19:df:83:
99:14:b4:5f:e1:bd:7c:6c:04:fa:1d:79:18:d2:58:
7f:08:36:78:8c:d9:62:ae:83:68:e3:84:7e:3c:d4:
e2:f2:ec:f7:d4:ae:12:67:5b:3c:06:5e:0f:24:d1:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:D9:5B:F0:FB:50:E5:D2:BB:7F:51:95:78:94:C8:BF:ED:2E:39
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/1jfZW_D7UOXSu39RlXiUyL_tLjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.132.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e1:99:78:81:bf:f9:fa:40:b3:6d:18:50:c0:da:d3:64:ce:
da:a0:e9:ae:40:e7:44:5e:5b:b6:20:49:06:18:f0:77:60:ba:
0d:85:1e:0d:38:fc:8d:66:44:1f:92:3a:5f:36:04:4a:3d:40:
9b:f7:65:f8:49:75:bd:6d:77:7d:ee:d1:35:1e:62:ce:6e:00:
60:be:42:47:3a:42:d6:59:b8:59:ba:81:3e:08:cf:68:0b:0e:
eb:b2:d0:9b:e4:bd:ba:8b:9e:44:33:02:d2:ff:d2:09:cc:f3:
cb:a6:15:02:21:19:62:52:95:24:92:e0:a3:16:99:f4:ff:54:
2d:55:15:fd:76:8d:a9:66:6d:39:39:9a:5c:5e:7d:9f:8a:e9:
ed:03:f0:12:a6:47:a9:89:d3:37:86:0a:00:fd:6d:25:d8:51:
75:f4:29:02:7c:45:c6:9f:78:50:4b:5e:b5:0b:92:3c:1c:f0:
cf:1d:80:6e:04:0f:b6:4f:87:03:ae:9d:01:a7:c5:fd:6e:f1:
9b:2d:6c:2d:49:fa:f1:f1:1d:62:b4:a1:07:f2:7f:38:46:af:
b6:6b:48:b7:65:52:a0:3f:e7:67:20:a2:0a:e1:55:d3:49:d6:
a8:be:22:6d:fc:a6:bd:5c:42:08:60:2a:dc:92:e3:8a:4d:6f:
8f:ae:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:33:22 2026 by rpki-client