Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7qbWrERi-ZB_UDqyNvqfTaD1ZSU.roa
File: 7qbWrERi-ZB_UDqyNvqfTaD1ZSU.roa (raw, json)
Hash identifier: goE2128mhw477UYFVBxjZxeafdneEUnERrdg7dgvL9A=
Subject key identifier: EE:A6:D6:AC:44:62:F9:90:7F:50:3A:B2:36:FA:9F:4D:A0:F5:65:25
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019F0FAF06C67B0F6F6CCBAD1AAB74419350
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7qbWrERi-ZB_UDqyNvqfTaD1ZSU.roa
Signing time: Sun 28 Jun 2026 19:22:36 +0000
ROA not before: Sun 28 Jun 2026 19:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402221
IP address blocks: 95.155.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:af:06:c6:7b:0f:6f:6c:cb:ad:1a:ab:74:41:93:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jun 28 19:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eea6d6ac4462f9907f503ab236fa9f4da0f56525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:35:13:36:17:d1:6a:0a:d1:84:a8:8f:f1:
25:ee:63:c1:a5:78:f3:1d:72:0e:a1:93:df:3a:ba:
01:5d:2e:1e:89:78:67:d6:e9:1f:32:b2:20:a4:c3:
18:c7:9c:af:89:01:13:1a:0e:23:cc:6e:32:a3:f1:
01:0d:e2:01:e8:50:b0:ec:54:b1:bb:57:f0:33:66:
1f:04:a9:7d:e3:7c:2f:38:9b:fe:fa:6b:15:41:aa:
d8:53:6f:43:e4:9a:13:d6:93:b1:c2:9c:d8:2f:b5:
a7:b4:34:ef:da:39:1c:39:f4:45:6c:2f:13:e6:40:
f9:db:e4:f9:cf:8e:f3:bb:da:c7:c9:81:d1:a7:b9:
9a:5d:e8:8e:30:69:a4:d5:aa:e5:60:4c:74:d9:3e:
d0:38:04:50:99:e4:c6:78:2e:48:bf:b8:65:e2:0f:
3d:f0:9e:f3:81:9b:a4:d0:9c:c4:4e:f6:56:d0:81:
ee:16:af:0d:67:dd:a5:46:5a:eb:56:45:87:82:5d:
8c:71:d7:84:26:ca:41:41:13:89:47:8c:e5:3b:80:
47:3d:a7:5d:d9:90:a3:40:e3:13:6b:d2:94:99:8a:
f8:8a:36:3c:9f:bc:f8:54:5d:47:7c:a9:f5:47:11:
64:e3:7c:bf:85:dd:07:b5:0e:e7:41:23:42:da:4f:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A6:D6:AC:44:62:F9:90:7F:50:3A:B2:36:FA:9F:4D:A0:F5:65:25
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7qbWrERi-ZB_UDqyNvqfTaD1ZSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.144.0/24
Signature Algorithm: sha256WithRSAEncryption
20:99:91:a8:c0:61:f3:2c:12:37:83:a5:b4:51:f3:60:e5:09:
8e:fe:81:3b:ae:d2:dd:ed:a4:44:cb:ae:1a:5f:57:b0:e6:91:
91:95:34:73:9f:2f:8d:89:64:2c:03:b1:38:58:3b:10:07:ae:
b1:19:c0:db:ed:db:c5:59:0f:65:59:fa:db:48:e2:b8:a6:94:
22:6c:0e:19:2c:bc:f4:c8:8a:0c:bb:cd:17:0a:3b:99:b9:be:
c6:36:ad:87:a1:08:f8:82:3a:62:53:39:10:6d:f7:8b:06:79:
a4:0a:43:27:c4:1d:e7:d4:ba:90:1e:44:16:cb:07:cb:5a:96:
2b:a9:89:e1:53:02:39:55:b9:9b:21:43:8d:26:d1:79:a7:f4:
6c:16:b9:16:8b:20:23:3d:30:7c:8c:ae:1b:ab:31:15:44:c2:
f7:89:94:7e:1b:24:4d:1f:98:da:bd:cc:6d:5f:3f:aa:4d:42:
70:ea:13:7a:ad:b2:72:35:63:53:4e:25:5d:fa:33:5e:3b:61:
ae:57:d7:bb:22:de:41:ca:57:8a:49:fb:84:5a:ad:7e:aa:c5:
0a:d5:21:c3:11:cd:c9:ab:aa:04:f9:ca:a9:86:f6:32:c5:5d:
21:d4:44:77:54:36:ca:66:97:f5:d8:5b:99:d3:2a:4c:ca:e2:
d5:a6:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:33 2026 by rpki-client