Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/6mmFVJN63dSmtFK1y3w0gphk85A.roa
File: 6mmFVJN63dSmtFK1y3w0gphk85A.roa (raw, json)
Hash identifier: kME4UHcqj5xtMkGcCvhaVGmxqtbj4XMdy8wHwpdN+DU=
Subject key identifier: EA:69:85:54:93:7A:DD:D4:A6:B4:52:B5:CB:7C:34:82:98:64:F3:90
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019FDC878DC7E42394BD85C445AAA5888CAA
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/6mmFVJN63dSmtFK1y3w0gphk85A.roa
Signing time: Fri 07 Aug 2026 14:01:38 +0000
ROA not before: Fri 07 Aug 2026 14:01:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141738
IP address blocks: 95.155.168.0/24 maxlen: 24
95.155.169.0/24 maxlen: 24
95.155.170.0/24 maxlen: 24
95.155.171.0/24 maxlen: 24
95.155.174.0/24 maxlen: 24
95.155.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:87:8d:c7:e4:23:94:bd:85:c4:45:aa:a5:88:8c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 7 14:01:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea698554937addd4a6b452b5cb7c34829864f390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:16:2e:f5:15:96:4c:de:91:0e:2e:d9:47:8f:
44:6a:96:b0:1f:fe:d1:43:4c:65:14:d4:ea:04:2c:
83:a9:ce:4c:f7:51:4c:91:dc:aa:a3:49:56:2c:be:
97:88:8e:0f:ca:3a:7a:e0:a0:29:71:83:74:c1:fc:
6f:cf:84:04:e4:f4:73:26:4a:af:80:e5:23:11:be:
25:ed:d0:fe:48:37:46:e5:b9:0d:3d:88:5a:e0:f2:
29:c1:4c:06:d1:1d:26:41:01:80:2a:2a:ef:b8:26:
26:c1:23:d4:ff:f6:51:11:af:ac:58:3f:c5:ab:39:
ec:bd:b0:9d:b2:01:6b:57:f3:b5:47:09:87:be:bc:
2f:97:f7:ae:88:b0:ab:30:a1:57:6e:df:f3:7b:41:
1f:7f:09:d3:1b:95:30:db:06:d6:d7:88:03:1e:ca:
5e:e0:bd:54:11:a3:c5:6a:f2:4c:cf:51:62:79:7f:
9a:e0:5e:ae:af:a6:95:77:a1:46:65:5d:6d:dd:94:
e7:b8:11:50:e0:65:54:76:c6:3e:3c:7b:2a:90:a1:
95:07:5f:9c:ae:c3:f9:c8:24:4e:52:74:63:a7:32:
02:b6:5c:a0:b2:a8:06:3e:17:42:f2:2b:f7:48:28:
84:bf:e6:ea:f8:2c:c5:3e:70:88:98:a5:bd:ea:cc:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:85:54:93:7A:DD:D4:A6:B4:52:B5:CB:7C:34:82:98:64:F3:90
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/6mmFVJN63dSmtFK1y3w0gphk85A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.168.0/22
95.155.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:9c:fc:dc:5f:cb:4b:dd:96:a4:59:9a:9c:8e:81:7d:47:2e:
97:de:d7:49:f0:b2:e3:64:0b:e2:63:20:9e:9a:40:48:24:96:
2d:37:28:f8:83:67:a9:0a:27:2e:c2:d2:d3:0a:c4:4f:34:66:
ce:c6:19:c1:4e:8a:2c:3f:71:ff:11:9b:b4:68:91:f7:b0:f8:
87:1a:75:09:d5:b5:c6:a2:ae:ec:fb:6b:72:b9:b7:9f:b9:cc:
9f:01:1a:ce:9c:a7:b4:40:4c:fa:a7:99:0f:e7:7e:a7:bc:b1:
77:c7:55:cf:7a:6b:9a:58:05:d5:89:77:6c:ef:9d:d2:41:b3:
58:b6:82:fd:4f:5f:0f:37:09:68:78:11:c1:bf:07:48:d2:bf:
e2:e7:54:bf:3d:3d:9f:99:80:bb:f0:00:d9:cf:7b:0f:4a:a4:
62:a8:65:b0:25:8c:fe:a9:6f:ca:89:56:0f:98:04:c3:a1:19:
bb:29:ca:c3:f5:77:a5:93:4e:12:71:98:9a:54:79:57:06:11:
d8:93:7e:e8:37:80:6f:4a:8d:fb:94:03:a0:23:da:ae:db:ae:
a1:a1:ea:19:02:38:92:3c:2c:53:bb:39:ce:d8:38:1d:c9:bc:
e4:42:3e:2e:ce:fa:85:26:46:46:4a:07:b5:2a:ad:ef:43:8c:
1b:07:19:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/ch43H5COUvYXERaqliIyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwODA3MTQwMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTY5ODU1NDkzN2FkZGQ0YTZiNDUyYjVjYjdjMzQ4Mjk4NjRmMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BYu9RWWTN6RDi7ZR49EapawH/7R
Q0xlFNTqBCyDqc5M91FMkdyqo0lWLL6XiI4Pyjp64KApcYN0wfxvz4QE5PRzJkqv
gOUjEb4l7dD+SDdG5bkNPYha4PIpwUwG0R0mQQGAKirvuCYmwSPU//ZREa+sWD/F
qznsvbCdsgFrV/O1RwmHvrwvl/euiLCrMKFXbt/ze0EffwnTG5Uw2wbW14gDHspe
4L1UEaPFavJMz1FieX+a4F6ur6aVd6FGZV1t3ZTnuBFQ4GVUdsY+PHsqkKGVB1+c
rsP5yCROUnRjpzICtlygsqgGPhdC8iv3SCiEv+bq+CzFPnCImKW96swi3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOpphVSTet3UprRStct8NIKYZPOQMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvNm1tRlZKTjYzZFNtdEZLMXkzdzBncGhrODVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX5uoAwQB
X5uuMA0GCSqGSIb3DQEBCwUAA4IBAQB8nPzcX8tL3ZakWZqcjoF9Ry6X3tdJ8LLj
ZAviYyCemkBIJJYtNyj4g2epCicuwtLTCsRPNGbOxhnBToosP3H/EZu0aJH3sPiH
GnUJ1bXGoq7s+2tyubefucyfARrOnKe0QEz6p5kP536nvLF3x1XPemuaWAXViXds
753SQbNYtoL9T18PNwloeBHBvwdI0r/i51S/PT2fmYC78ADZz3sPSqRiqGWwJYz+
qW/KiVYPmATDoRm7KcrD9Xelk04ScZiaVHlXBhHYk37oN4BvSo37lAOgI9qu266h
oeoZAjiSPCxTuznO2DgdybzkQj4uzvqFJkZGSge1Kq3vQ4wbBxlo
-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:29 2026 by rpki-client