Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/UlWbHAAt0Coao4bfiAhi-yGwmhU.roa
File: UlWbHAAt0Coao4bfiAhi-yGwmhU.roa (raw, json)
Hash identifier: bQ3IsR5/D5IYcYHweCs+lcmYy0kCNh7yjDdcFgbStv0=
Subject key identifier: 52:55:9B:1C:00:2D:D0:2A:1A:A3:86:DF:88:08:62:FB:21:B0:9A:15
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019FD7EC976709BBDBDD22DD7CD62563628D
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/UlWbHAAt0Coao4bfiAhi-yGwmhU.roa
Signing time: Thu 06 Aug 2026 16:33:54 +0000
ROA not before: Thu 06 Aug 2026 16:33:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 95.155.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:ec:97:67:09:bb:db:dd:22:dd:7c:d6:25:63:62:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 6 16:33:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52559b1c002dd02a1aa386df880862fb21b09a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:ec:c8:8a:74:d0:8d:a3:13:64:62:61:e2:
72:2d:3a:5a:5c:f4:4e:1f:39:c3:e9:16:cf:1c:57:
2c:65:4d:0f:fd:26:9f:34:8f:64:c5:69:97:84:84:
fe:5a:0f:70:24:bc:8c:aa:52:5e:4b:88:ce:a9:4c:
3f:0e:0a:be:e6:02:68:b8:14:e8:46:56:89:61:6a:
e5:6b:53:a8:f9:7e:c8:e4:0d:3e:f2:b9:62:90:87:
ea:35:7e:a3:6e:60:72:65:f5:ce:75:7a:cb:5e:4f:
24:f0:2a:34:d4:f9:e1:8e:a2:6a:4e:f7:11:b0:2d:
7c:01:ea:9d:7f:8b:c2:99:6d:a0:e4:86:fa:74:cf:
ad:82:df:c6:0f:97:ab:f7:48:d3:68:5d:bd:6d:c4:
1b:3e:fd:f3:cf:ad:b5:6e:4e:fb:46:06:a8:9e:d7:
fa:a8:58:54:69:d2:e1:f1:b6:31:91:7a:cf:3c:91:
eb:a0:a7:54:00:b7:26:e3:a4:e8:3e:b8:4c:ec:1b:
0f:8e:f5:4c:32:6a:11:d1:1d:95:94:79:77:c1:36:
cc:f6:40:73:49:ea:0b:57:8a:f8:c4:15:37:00:a1:
47:88:61:f1:26:ba:6f:f8:69:2b:05:27:2f:5b:de:
00:59:7b:c6:d7:74:cb:38:11:f1:ac:96:20:22:ab:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:55:9B:1C:00:2D:D0:2A:1A:A3:86:DF:88:08:62:FB:21:B0:9A:15
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/UlWbHAAt0Coao4bfiAhi-yGwmhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.134.0/24
Signature Algorithm: sha256WithRSAEncryption
03:68:aa:67:47:67:ad:de:c3:be:6a:03:85:f0:0f:1e:9a:8f:
bd:98:4e:be:46:7c:0f:61:54:c3:5f:68:88:cb:a1:80:93:f2:
a7:ce:5d:9c:4d:a8:1b:59:e8:19:e5:e2:3a:f6:aa:aa:82:0f:
a9:e2:14:76:4a:0e:c1:67:8c:21:70:6f:75:cc:a1:14:39:6e:
41:72:2e:4c:23:c1:2e:7a:92:39:0a:31:30:0e:d9:2e:3a:a8:
93:e3:2e:1a:14:3b:ad:1b:bf:a5:78:cd:15:b0:51:a6:9e:b1:
68:ea:61:f6:32:fa:cb:ab:06:cf:52:c5:21:c7:eb:18:e6:25:
ba:78:89:a2:d2:4d:19:33:d6:82:ed:e8:c8:2e:da:1f:0e:71:
19:ec:85:39:41:fa:89:53:ff:20:95:28:1a:74:57:7a:de:44:
01:22:06:33:33:d1:a6:08:d8:7b:95:07:a9:80:b8:1e:91:e7:
2f:f2:b0:2d:15:d6:ff:7e:7d:90:9a:8c:8e:a8:7d:8f:cd:96:
4d:ce:db:6f:d5:bd:d9:30:87:4f:0d:54:eb:82:0a:06:c2:8f:
aa:9d:01:9d:de:f3:8d:05:b8:8e:f8:15:41:09:6b:d8:43:42:
95:d9:11:a1:7d:4a:58:e3:19:5b:06:de:a8:7f:c3:7b:39:d1:
91:c6:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:23 2026 by rpki-client