Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Cr7MinNZgsKeYbgv62BPtYM3a3o.roa
File: Cr7MinNZgsKeYbgv62BPtYM3a3o.roa (raw, json)
Hash identifier: /4rM42gfBZ7uv4DqkkuBjhcLxWD2JWiaRwOSDEWpqEo=
Subject key identifier: 0A:BE:CC:8A:73:59:82:C2:9E:61:B8:2F:EB:60:4F:B5:83:37:6B:7A
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019FB24D42D829A1C2B8048762524A61D3E8
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Cr7MinNZgsKeYbgv62BPtYM3a3o.roa
Signing time: Thu 30 Jul 2026 09:13:55 +0000
ROA not before: Thu 30 Jul 2026 09:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 95.155.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:4d:42:d8:29:a1:c2:b8:04:87:62:52:4a:61:d3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 30 09:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0abecc8a735982c29e61b82feb604fb583376b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:d1:11:a1:aa:ac:9f:7c:22:d7:2e:ee:23:
21:0d:a4:d0:af:c5:6c:ce:4c:d1:cc:85:a2:42:32:
6b:2b:a1:ef:9d:a0:52:52:5b:3f:6b:ea:24:33:6a:
7b:02:73:29:f3:4f:a1:7b:51:83:a2:33:43:40:d9:
4a:db:7d:f4:a7:73:56:03:db:e9:e4:39:b8:33:33:
60:e6:bb:5f:87:a3:b9:57:87:51:bb:e0:ca:ee:18:
d0:2f:aa:98:e2:20:d1:19:e3:29:f2:dc:4e:65:2f:
34:6f:9f:73:71:25:30:33:66:4a:4c:11:7a:5b:fc:
a7:d0:f0:51:bd:30:4a:59:19:85:ec:93:b6:fe:29:
c7:0b:a6:5c:10:d8:13:bf:f4:82:79:b3:2a:2e:41:
92:97:d3:29:00:01:f8:ad:f0:90:37:25:84:cd:90:
46:f6:c2:2c:71:42:f2:35:6b:de:ee:f5:9a:1d:19:
f5:1f:8b:5d:4a:cc:cb:ed:2c:ed:a6:90:b1:58:ed:
aa:e9:f5:e9:51:ed:93:d7:85:f5:8c:5d:60:37:de:
f7:56:f8:4b:9f:c3:23:c2:47:b7:6a:6b:fc:8b:90:
91:51:bc:31:63:af:71:78:06:08:9f:f4:6c:86:55:
98:78:69:bb:ca:cb:38:5a:b4:da:44:0c:f4:a1:f3:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BE:CC:8A:73:59:82:C2:9E:61:B8:2F:EB:60:4F:B5:83:37:6B:7A
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Cr7MinNZgsKeYbgv62BPtYM3a3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b6:9b:ed:44:c6:5b:b7:d9:d5:ed:e7:e0:a7:f5:7a:fc:57:
3b:76:b5:3f:92:b0:1f:dc:44:85:9e:11:eb:af:9c:76:58:70:
08:22:27:ef:4c:f9:6c:42:09:7a:fb:74:93:bc:25:29:75:c7:
95:cc:f2:53:a5:92:ff:98:a8:48:6f:7a:ed:f6:ea:cc:5a:bb:
27:96:eb:82:6d:e5:94:7f:f8:dd:e6:ae:35:d3:2a:15:71:87:
9b:ce:fb:cd:bf:0e:87:5e:b7:80:4c:c4:dd:8d:05:b9:6d:77:
d5:f1:39:76:d2:95:ca:c7:e0:69:57:e7:03:23:51:70:d0:87:
b5:57:87:0d:d0:fe:77:5e:ba:b6:50:fc:a0:c4:d9:93:fa:d1:
ff:f8:2b:57:cc:c4:9f:b3:26:17:37:ab:37:5d:86:ad:d5:79:
a8:b6:fc:a8:7e:af:56:25:52:3c:0c:52:62:03:46:a0:a4:eb:
ea:47:ca:87:f7:d1:ed:d5:17:c5:0a:1f:ba:40:8b:35:64:88:
b8:29:5a:ae:ad:68:e9:be:44:6b:f0:49:1d:6e:02:33:67:8d:
28:f1:3c:81:09:5b:53:67:d5:f1:3b:be:b2:1c:5b:44:75:90:
6f:72:9e:c0:29:88:de:70:08:f6:7a:b7:52:96:89:00:72:83:
fd:25:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 04:00:16 2026 by rpki-client