Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa
File: W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa (raw, json)
Hash identifier: r/0RiCOSE+WrdRBD5qqcgjI3IcYBeed6dA+B48z6B+E=
Subject key identifier: 5B:D0:1E:1A:7F:F8:11:84:EB:FB:3F:08:6F:32:49:5D:8A:0B:39:CD
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019ED5BDD44BE2A129D3BDE354C2E132A32C
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa
Signing time: Wed 17 Jun 2026 13:20:48 +0000
ROA not before: Wed 17 Jun 2026 13:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 95.155.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 12:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:bd:d4:4b:e2:a1:29:d3:bd:e3:54:c2:e1:32:a3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jun 17 13:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bd01e1a7ff81184ebfb3f086f32495d8a0b39cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:25:51:39:61:32:18:12:5c:fc:0d:2a:38:
f1:de:13:8b:71:bf:ae:76:f1:b7:b2:f9:32:97:81:
8a:fb:bd:a8:92:7f:bf:23:ce:7a:8d:2e:5e:4c:d5:
08:1e:1d:c4:8c:05:de:24:1e:76:f7:3a:a8:9b:dc:
5f:5b:16:23:05:df:84:77:68:1b:bb:bc:56:a7:46:
04:24:16:5b:8b:fb:2a:ff:76:73:92:47:92:a8:88:
cf:17:7d:9a:a1:f0:4d:f0:a0:6a:db:26:5b:fb:64:
73:a3:08:e8:a2:df:01:57:89:17:ca:5b:c2:ce:f1:
35:13:e3:21:fc:d5:2a:da:b3:56:cb:3f:34:57:9b:
a2:2d:e8:d8:29:aa:45:a1:a2:30:1f:15:df:13:28:
98:51:71:4c:49:c6:2c:a4:24:47:51:fb:fd:57:bb:
8e:0f:3f:a5:d1:94:36:e9:99:2a:d1:6d:a4:66:fa:
3e:f2:96:f3:4f:b5:db:d0:87:82:78:5f:db:84:ac:
0b:ea:1d:98:e4:eb:23:98:02:04:7e:ca:0a:65:73:
81:0f:73:e4:d6:36:1c:1d:9a:9b:28:c1:da:50:c6:
17:c2:13:0b:ac:0a:bf:d6:8c:f2:97:70:0c:41:09:
c0:6a:fe:1d:67:67:94:a9:dc:9d:e4:c2:6d:8e:15:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:1E:1A:7F:F8:11:84:EB:FB:3F:08:6F:32:49:5D:8A:0B:39:CD
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.182.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:47:1a:95:3b:d6:4e:34:5f:6b:75:ef:73:18:56:ed:9e:9e:
c4:e4:c6:81:10:3a:20:55:27:44:34:b7:38:5f:0e:26:97:88:
75:bf:c5:05:66:a7:01:c2:11:ef:71:7c:a7:a4:80:9e:33:82:
da:ae:5a:25:89:7b:4a:93:32:c3:68:da:d9:b5:83:dd:e2:a5:
45:82:18:85:bd:6f:f2:03:bf:ec:9e:09:a7:dd:fa:34:3c:73:
72:e7:76:02:23:6d:0a:75:c3:f8:5d:82:98:97:a5:3a:a8:1a:
54:ea:00:ef:66:07:28:3b:96:a5:21:1c:89:15:bc:1f:81:1b:
47:37:f2:e7:5e:a2:0e:a1:9b:e2:7c:73:2f:69:1d:3a:35:3a:
ad:2b:f5:4d:aa:52:63:13:5d:54:fc:cc:b0:8a:2a:80:e5:37:
f5:25:b3:b1:8a:4a:5d:6b:49:53:29:8f:a2:eb:ed:2d:ce:bf:
eb:8b:d4:68:37:d1:39:ad:71:80:bb:4c:0b:56:75:99:70:8d:
bb:ed:3e:56:76:22:f5:2c:6a:82:a0:f0:7c:5c:63:09:13:33:
56:96:69:41:6c:da:3b:86:39:91:e3:61:b0:e7:d0:7b:a7:73:
f2:cb:e7:e2:13:c7:5e:3a:1d:ea:23:a6:e0:ce:e8:c1:1b:18:
6e:c4:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 18:20:44 2026 by rpki-client