Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/847QYcUP5hjUb-CFADZoXL-2EAA.roa
File: 847QYcUP5hjUb-CFADZoXL-2EAA.roa (raw, json)
Hash identifier: 7A5j1ayEySWaguXhxHGqbzXvWLgn70DxblNYwzAZz1k=
Subject key identifier: F3:8E:D0:61:C5:0F:E6:18:D4:6F:E0:85:00:36:68:5C:BF:B6:10:00
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0808B8000C8935A0810C058433992FC8F
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/847QYcUP5hjUb-CFADZoXL-2EAA.roa
Signing time: Tue 08 Sep 2026 10:23:40 +0000
ROA not before: Tue 08 Sep 2026 10:23:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 95.155.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:8b:80:00:c8:93:5a:08:10:c0:58:43:39:92:fc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 8 10:23:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f38ed061c50fe618d46fe0850036685cbfb61000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:a0:bf:f5:b1:5d:31:50:9b:32:bb:df:a1:
76:85:76:e5:24:28:c9:fd:92:25:ba:e5:95:9d:70:
2b:f6:e1:12:e5:85:e1:15:69:1b:54:69:b2:12:cd:
aa:19:9c:47:a4:75:3b:07:17:c6:e4:67:eb:d4:1a:
a8:8e:41:94:b0:f7:51:23:0f:86:78:8d:21:c7:94:
1f:85:a7:6a:3e:03:68:6a:f5:14:14:7d:d6:43:52:
f1:4e:86:58:2e:79:a7:83:68:49:d5:1a:c0:aa:8d:
6a:63:03:06:fd:8b:65:77:7f:f4:8b:f6:3c:7a:18:
6f:8b:a1:84:f4:2e:6a:ad:99:c4:a4:cd:82:a2:d5:
21:fa:d0:cb:79:c9:44:98:79:4d:e6:88:40:5c:3e:
56:87:1f:88:ce:53:b9:47:c4:d5:17:19:14:69:09:
a0:46:7d:a0:b9:5e:70:2b:4f:09:6a:ad:ae:fc:27:
24:ca:46:36:ed:00:ee:61:ac:c1:94:95:bf:94:74:
bc:54:83:76:dc:73:75:24:a1:ad:2c:0f:5e:ad:f8:
59:15:a3:76:32:19:d9:a4:a3:ed:7d:80:bf:0d:20:
dc:9d:27:aa:1c:d9:4b:df:2c:7d:ec:73:3a:ba:06:
25:b7:29:f5:73:d5:c6:09:5e:4c:74:ce:ef:b5:c3:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8E:D0:61:C5:0F:E6:18:D4:6F:E0:85:00:36:68:5C:BF:B6:10:00
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/847QYcUP5hjUb-CFADZoXL-2EAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fe:9b:0b:a2:dd:bd:e6:b9:90:80:16:f0:99:9d:2b:af:8d:
76:6e:77:96:ac:ef:1b:5f:a1:90:b2:fb:a0:88:a6:8c:80:af:
93:fb:ad:a8:ee:40:04:48:27:54:ff:01:a6:a0:4e:25:91:da:
1f:e1:65:0f:34:e0:82:c2:0d:1a:60:71:89:cb:bd:2f:b5:2d:
e0:1f:87:5d:6d:d4:e1:58:32:72:9b:0d:3a:17:67:bc:7f:05:
83:a0:0f:b4:71:08:f9:a9:b4:69:d9:3c:7a:6c:7d:47:7e:cd:
af:e3:37:8b:8b:05:03:c4:a0:b8:fd:67:4c:ba:97:f8:fb:95:
75:fc:61:74:f5:46:79:b1:d2:16:01:e6:31:4e:2d:fb:ce:ee:
2b:20:38:59:34:2e:45:e8:be:9e:19:5a:b1:3f:ce:13:59:4f:
4a:43:d7:fa:54:52:dd:2f:42:ec:e3:40:05:3c:4b:1b:b3:90:
ba:bf:12:4e:c5:47:34:3d:b7:c7:fb:33:cb:62:47:b4:bb:c1:
b2:57:5e:56:c4:d5:f7:a5:bb:28:bc:bb:12:3c:18:27:65:17:
f3:5b:e6:ca:4c:45:d1:84:6c:b3:3f:17:a2:d8:78:50:b5:d1:
9c:e5:3d:0d:64:56:5d:0d:4a:6e:1f:de:4b:29:11:85:b9:f4:
59:b7:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 01:23:30 2026 by rpki-client