Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/M_egcGv360TAH2mrNW0CHAZ-vPM.roa
File: M_egcGv360TAH2mrNW0CHAZ-vPM.roa (raw, json)
Hash identifier: kx7DcmozyqehG6hYGXDacURCfX5dT5W8fn2SIvlEnKo=
Subject key identifier: 33:F7:A0:70:6B:F7:EB:44:C0:1F:69:AB:35:6D:02:1C:06:7E:BC:F3
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019FE208BCB1844C53D5C3DB8C5D2A0A34F7
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/M_egcGv360TAH2mrNW0CHAZ-vPM.roa
Signing time: Sat 08 Aug 2026 15:40:51 +0000
ROA not before: Sat 08 Aug 2026 15:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 95.155.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:08:bc:b1:84:4c:53:d5:c3:db:8c:5d:2a:0a:34:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 8 15:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33f7a0706bf7eb44c01f69ab356d021c067ebcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:2d:40:46:a5:5e:c9:36:1b:9e:75:bd:ef:
1b:cb:27:fc:ce:19:d5:f3:27:be:80:f9:76:70:d7:
b2:bd:30:93:1e:c3:a6:19:e6:48:9f:a1:15:a2:85:
28:20:b1:5d:64:a5:dc:bf:cc:fb:0b:35:74:66:2b:
00:2b:e6:d6:49:9b:09:02:de:95:32:a7:04:54:ff:
97:b9:fe:df:6f:5e:87:7b:60:f2:3b:a7:dd:3a:8a:
ba:c0:4e:9c:e3:91:90:c1:ec:91:b2:c4:eb:58:81:
f0:9a:b8:ed:45:7d:da:3a:f1:a8:a4:a9:ce:85:20:
c3:4c:33:a2:ef:50:dd:1a:37:ed:3e:5d:9f:bb:9f:
90:ea:ea:fd:60:43:3f:50:ca:5a:cf:31:c3:f6:f6:
f2:55:fe:67:fd:a8:a9:e8:f3:80:18:69:d6:b5:33:
aa:85:37:d2:86:3b:37:8c:64:77:53:13:8d:00:f8:
86:1a:7d:50:c0:4b:a8:b7:c5:86:e4:65:ed:b8:3b:
30:bc:5e:99:5e:42:0e:2c:b7:e9:b7:6a:c1:28:a4:
d3:c6:5b:7c:d2:c8:f3:ef:8e:08:95:fc:e9:a5:ee:
a2:b4:06:da:e9:4e:92:5d:91:38:3f:3d:e5:30:1a:
99:bc:6a:94:ba:0f:29:00:91:7f:74:84:1b:a6:bf:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F7:A0:70:6B:F7:EB:44:C0:1F:69:AB:35:6D:02:1C:06:7E:BC:F3
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/M_egcGv360TAH2mrNW0CHAZ-vPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:72:c1:5e:79:3f:ad:cf:ca:ba:bb:d2:d8:e7:c6:ad:76:90:
2a:ba:89:22:56:a1:52:06:a2:35:07:ce:2b:6f:10:b5:7c:2a:
a8:fa:ce:fa:b3:5a:11:09:a0:e7:49:3c:1a:87:bf:25:2f:cc:
25:bf:7b:aa:76:d8:6c:a8:49:75:25:2a:f9:2a:93:0c:85:0b:
29:cb:df:48:12:13:2e:a4:30:0d:0c:f3:85:b7:03:ab:71:d1:
02:42:94:a1:2b:05:17:02:45:40:a8:60:a2:e6:7a:9c:ff:cf:
2d:b8:50:df:95:f0:2a:d9:62:41:88:2b:82:dc:e9:fe:8f:d0:
c4:b7:8f:d2:53:3f:9a:a0:4b:28:e0:e4:34:f7:46:24:b5:1e:
ab:df:b2:17:cb:34:7d:c2:a1:31:61:86:21:54:27:cf:87:ae:
6a:17:94:6d:16:d5:bc:e1:bf:15:5e:61:40:e4:c2:bd:24:82:
d6:d8:1b:04:08:47:fa:7f:6a:b5:0e:90:d1:3f:3e:9b:df:d8:
ac:15:90:5d:b8:10:bf:64:f3:a4:6d:56:59:f6:1c:14:b5:ca:
4a:85:3d:36:be:b2:62:51:e1:04:58:b8:cc:dd:d3:bc:b3:cd:
9f:bc:d5:bb:70:77:f2:36:f4:28:1c:5a:31:52:81:f8:78:33:
01:74:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 01:53:19 2026 by rpki-client