Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/1scAzSfF6-O4qi-AFUEj_37aURo.roa
File: 1scAzSfF6-O4qi-AFUEj_37aURo.roa (raw, json)
Hash identifier: eTH807xo4Op+ZKawsAc+aiv/dB4TYhJguB/r2EFj3ME=
Subject key identifier: D6:C7:00:CD:27:C5:EB:E3:B8:AA:2F:80:15:41:23:FF:7E:DA:51:1A
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A02314E955EDED2DB45EB143184410E093
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/1scAzSfF6-O4qi-AFUEj_37aURo.roa
Signing time: Fri 21 Aug 2026 06:49:27 +0000
ROA not before: Fri 21 Aug 2026 06:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141738
IP address blocks: 95.155.168.0/24 maxlen: 24
95.155.169.0/24 maxlen: 24
95.155.170.0/24 maxlen: 24
95.155.171.0/24 maxlen: 24
95.155.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:14:e9:55:ed:ed:2d:b4:5e:b1:43:18:44:10:e0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 21 06:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6c700cd27c5ebe3b8aa2f80154123ff7eda511a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0b:35:b8:20:9c:5d:7e:11:4b:77:71:35:fb:
12:45:d3:f5:a3:c8:3f:7c:bf:33:87:6c:2c:bb:00:
75:e2:6e:17:ab:53:be:5e:9f:a1:b1:80:d1:00:29:
6d:4b:3e:41:51:14:13:d8:94:fc:95:c6:e1:f6:5d:
b0:e2:28:00:2a:c2:c0:08:dd:36:b6:97:ce:96:71:
11:1b:88:2c:66:87:3c:73:73:0d:51:40:4c:d7:a3:
9c:8c:db:9c:b5:8c:64:76:d9:a5:18:b1:9f:9f:70:
a0:6d:a0:3d:8a:59:dd:6a:d8:6b:17:82:db:18:69:
59:fc:4b:94:4e:1e:33:9f:97:78:c7:69:29:93:57:
4c:3b:d1:8d:de:e0:3e:c2:ab:74:34:9d:56:46:99:
15:bb:cb:1a:5b:2e:77:85:6a:af:24:7d:88:26:cd:
90:e2:cb:e4:10:30:5e:fb:7c:8a:ac:ab:a2:16:5e:
18:66:91:68:53:bf:5b:70:fa:76:b2:2a:ce:12:41:
ab:6e:b8:65:e2:a8:a1:60:5b:74:c9:ab:62:54:dd:
c9:11:da:b9:e8:d4:fa:0f:b7:3f:90:d8:cd:f5:e1:
ea:10:93:41:28:56:52:88:64:aa:93:40:19:10:c3:
33:a9:b8:25:df:6b:86:c5:ae:05:ad:7d:da:d1:fd:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C7:00:CD:27:C5:EB:E3:B8:AA:2F:80:15:41:23:FF:7E:DA:51:1A
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/1scAzSfF6-O4qi-AFUEj_37aURo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.168.0/22
95.155.175.0/24
Signature Algorithm: sha256WithRSAEncryption
83:84:c7:12:07:6c:0c:0e:53:e4:7a:3d:6b:c7:96:c5:5e:cf:
e4:de:45:cf:16:5d:77:64:6c:59:b3:9a:f5:aa:35:17:d1:12:
d1:53:05:16:ea:80:0f:9f:c0:ff:50:f1:e0:ef:24:2b:80:d6:
3d:e5:1b:46:ca:b8:10:18:85:66:da:2f:6a:93:b4:13:d1:12:
ee:a7:e8:c4:2b:bc:01:a7:26:09:4e:57:3e:63:b4:3d:c6:8c:
f6:d4:d1:12:a0:49:85:aa:37:40:3d:2f:42:a3:0a:f6:47:18:
9b:a1:2e:83:d7:53:da:b6:79:78:da:f7:71:9c:7a:69:a1:2e:
e0:4d:60:b1:92:35:28:7a:cf:04:4f:58:66:87:4f:6e:87:d9:
3b:81:c3:6b:bc:c3:dd:f4:cf:77:84:9d:2e:a0:94:a6:df:ab:
62:41:19:39:9f:ac:c9:bf:53:4c:af:ce:b6:40:7b:fa:e4:28:
df:19:38:0c:a7:60:9e:57:64:ff:72:7e:91:34:03:9c:e0:b9:
55:85:c5:c2:34:64:1e:2f:cf:43:c9:d2:eb:49:94:03:fa:de:
8a:55:bf:c1:cf:15:bb:e6:ce:29:31:94:87:4f:22:fb:75:83:
c1:e0:3c:6c:2f:7b:84:20:9d:8d:af:fc:ae:a9:f5:00:05:cf:
34:da:0b:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAjFOlV7e0ttF6xQxhEEOCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwODIxMDY0OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmM3MDBjZDI3YzVlYmUzYjhhYTJmODAxNTQxMjNmZjdlZGE1MTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ws1uCCcXX4RS3dxNfsSRdP1o8g/
fL8zh2wsuwB14m4Xq1O+Xp+hsYDRACltSz5BURQT2JT8lcbh9l2w4igAKsLACN02
tpfOlnERG4gsZoc8c3MNUUBM16OcjNuctYxkdtmlGLGfn3CgbaA9ilndathrF4Lb
GGlZ/EuUTh4zn5d4x2kpk1dMO9GN3uA+wqt0NJ1WRpkVu8saWy53hWqvJH2IJs2Q
4svkEDBe+3yKrKuiFl4YZpFoU79bcPp2sirOEkGrbrhl4qihYFt0yatiVN3JEdq5
6NT6D7c/kNjN9eHqEJNBKFZSiGSqk0AZEMMzqbgl32uGxa4FrX3a0f314wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNbHAM0nxevjuKovgBVBI/9+2lEaMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvMXNjQXpTZkY2LU80cWktQUZVRWpfMzdhVVJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX5uoAwQA
X5uvMA0GCSqGSIb3DQEBCwUAA4IBAQCDhMcSB2wMDlPkej1rx5bFXs/k3kXPFl13
ZGxZs5r1qjUX0RLRUwUW6oAPn8D/UPHg7yQrgNY95RtGyrgQGIVm2i9qk7QT0RLu
p+jEK7wBpyYJTlc+Y7Q9xoz21NESoEmFqjdAPS9Cowr2RxiboS6D11Patnl42vdx
nHppoS7gTWCxkjUoes8ET1hmh09uh9k7gcNrvMPd9M93hJ0uoJSm36tiQRk5n6zJ
v1NMr862QHv65CjfGTgMp2CeV2T/cn6RNAOc4LlVhcXCNGQeL89DydLrSZQD+t6K
Vb/BzxW75s4pMZSHTyL7dYPB4DxsL3uEIJ2Nr/yuqfUABc802gtd
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:48 2026 by rpki-client