Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5OVY2N05yrlacTBsS5Papev7Ih8.roa
File: 5OVY2N05yrlacTBsS5Papev7Ih8.roa (raw, json)
Hash identifier: x+/SlTukTABXqgeHj+AOrpAeYdoiHaqU4Vr0zHmOuUY=
Subject key identifier: E4:E5:58:D8:DD:39:CA:B9:5A:71:30:6C:4B:93:DA:A5:EB:FB:22:1F
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019FC767C94460AEB19DB58141B903C703BC
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5OVY2N05yrlacTBsS5Papev7Ih8.roa
Signing time: Mon 03 Aug 2026 11:34:55 +0000
ROA not before: Mon 03 Aug 2026 11:34:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 95.155.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:67:c9:44:60:ae:b1:9d:b5:81:41:b9:03:c7:03:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 3 11:34:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4e558d8dd39cab95a71306c4b93daa5ebfb221f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:d1:8a:6a:91:0f:be:ab:21:41:bb:f3:19:
a5:bb:b9:7f:cc:20:c0:ae:a9:67:9d:99:61:f3:57:
a4:76:9a:1b:c1:b2:56:a2:d6:37:02:13:60:12:f3:
3b:bb:be:49:51:99:69:72:ff:32:f7:79:59:5a:dd:
1b:96:67:9c:81:c9:01:b5:1a:32:c0:4d:7d:22:76:
7c:5e:29:a0:fa:db:3d:96:e1:82:45:f2:91:27:22:
a5:1b:48:47:8e:31:31:50:05:85:a7:62:c8:50:7b:
cd:b0:79:82:3e:77:63:8d:24:a2:c1:3a:37:11:e6:
97:41:cc:8b:ab:76:a9:34:97:16:77:88:89:34:68:
7d:d1:f4:43:27:4b:9e:aa:50:cf:c1:7b:bd:01:41:
a7:ca:7e:c7:03:a2:c1:f2:3d:a1:cb:a2:5e:d8:71:
00:22:66:6f:80:db:06:96:19:3e:29:41:37:6d:b6:
9b:4d:31:85:99:d6:c6:58:55:be:be:ac:25:49:9a:
26:4f:35:9c:f5:0a:8a:91:72:79:94:64:a8:4d:21:
4d:38:7e:8f:cd:56:3a:8d:52:a5:9a:1e:22:3e:55:
85:2e:bc:07:f4:9c:83:59:8f:47:02:cc:b2:9e:9d:
dd:c8:87:9d:52:17:96:5c:04:8a:17:ac:e9:35:f1:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E5:58:D8:DD:39:CA:B9:5A:71:30:6C:4B:93:DA:A5:EB:FB:22:1F
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5OVY2N05yrlacTBsS5Papev7Ih8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.178.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0f:68:63:02:a9:95:1b:67:1c:ea:f5:9d:5a:4e:32:d1:fb:
90:e4:52:e2:e8:b5:88:1d:ef:16:70:a1:b5:09:a0:84:69:88:
8c:9c:ad:cb:8f:7f:42:35:23:5b:eb:e5:ef:3a:73:44:9c:64:
0b:e3:19:b9:54:2e:f6:6a:21:b6:47:e8:d6:29:04:03:66:8b:
69:4e:a0:46:3d:51:ea:5d:d8:f7:72:6f:00:f5:4e:0d:7c:ce:
1a:30:51:1c:2e:fa:41:7b:d7:a0:62:ef:8a:6c:dc:0e:c8:56:
2a:13:85:8a:96:3f:1f:fa:dc:bc:b7:94:17:50:ef:d1:8e:a6:
af:29:1c:4d:f6:cc:40:a3:50:94:39:f2:f3:6b:3e:77:dd:d8:
64:6d:7e:be:78:f0:18:c1:86:4c:49:e3:5e:c6:c2:bb:c5:ed:
46:07:af:ed:0e:af:4e:e2:18:73:32:14:b7:ee:a2:01:7c:f0:
5e:d9:df:2c:8f:5c:6f:23:b7:b1:94:ec:60:b4:4a:10:74:80:
63:77:ab:d7:93:fa:6c:32:58:aa:4b:ea:cb:65:09:e8:a1:97:
a7:b5:5e:85:0c:c5:af:06:d4:c2:44:4a:1c:22:44:a3:9e:f0:
43:0e:58:fd:c2:dd:02:23:5a:86:c7:b6:2b:7e:2b:cc:93:3c:
ad:ca:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:47 2026 by rpki-client