Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Y_Sf_0WnrKZUhbgZMBO-_juGCYw.roa
File: Y_Sf_0WnrKZUhbgZMBO-_juGCYw.roa (raw, json)
Hash identifier: nfvPoXkuJ9QVVvi7TfEOMmI5/p7cAk5qkN02FVZfDBY=
Subject key identifier: 63:F4:9F:FF:45:A7:AC:A6:54:85:B8:19:30:13:BE:FE:3B:86:09:8C
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A04448FF6FBAF5BF9C1CF2572084E7EE62
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Y_Sf_0WnrKZUhbgZMBO-_juGCYw.roa
Signing time: Thu 27 Aug 2026 17:33:49 +0000
ROA not before: Thu 27 Aug 2026 17:33:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 95.155.128.0/24 maxlen: 24
95.155.135.0/24 maxlen: 24
95.155.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:48:ff:6f:ba:f5:bf:9c:1c:f2:57:20:84:e7:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 27 17:33:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63f49fff45a7aca65485b8193013befe3b86098c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:30:9d:5e:f2:91:54:29:da:c8:68:08:68:
15:41:88:2e:cd:84:6b:56:f2:8e:de:7d:b7:a0:71:
14:81:46:d7:76:8d:05:20:7f:4b:cb:46:ce:4a:91:
f6:06:b0:d9:5f:23:0c:98:48:55:73:58:11:a7:62:
92:56:7a:07:af:8c:80:ac:4d:b4:66:e0:23:38:75:
34:f6:fe:ed:6d:ed:68:c9:e2:23:ce:b2:63:0a:1b:
99:70:97:29:59:96:ed:16:ae:3b:e3:da:10:25:f4:
6a:60:a3:7d:58:75:e8:8c:3a:71:35:3c:53:f9:13:
10:3c:3b:21:0a:86:57:a0:bd:3c:73:e6:2b:a4:79:
1a:5c:fb:de:c4:7e:f9:26:38:4d:66:26:a3:87:b8:
75:c9:f8:b2:5e:31:3c:e5:27:55:da:a6:a1:31:c9:
e6:b3:33:e6:2e:12:af:92:77:d2:2f:bc:8b:73:98:
00:cf:c0:2e:5e:92:d0:e1:57:a4:50:5a:77:c3:1d:
00:7f:72:9b:9f:8e:b6:59:4a:5c:76:86:fe:e5:da:
b2:45:fc:61:63:f8:18:f1:a9:f0:7e:bf:6e:9c:01:
db:08:6d:6b:5b:78:c5:d2:70:78:db:81:b8:f0:20:
c0:9d:ed:19:1f:d2:1e:35:b0:1a:59:f7:25:bb:ff:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F4:9F:FF:45:A7:AC:A6:54:85:B8:19:30:13:BE:FE:3B:86:09:8C
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Y_Sf_0WnrKZUhbgZMBO-_juGCYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.128.0/24
95.155.135.0/24
95.155.148.0/24
Signature Algorithm: sha256WithRSAEncryption
51:cb:09:6c:68:b9:cf:5b:16:38:7c:9d:b2:c0:ef:86:4e:c7:
06:9e:fa:9d:0c:bb:8a:f4:26:aa:27:05:b5:ed:7f:03:33:1b:
9b:d3:3d:ac:1b:80:0c:ce:1e:da:35:87:07:32:5a:6e:99:08:
d4:aa:ca:fb:a7:fe:eb:0a:56:f7:8e:42:68:ea:93:1a:10:4f:
cc:ef:e6:c1:72:09:57:c7:66:ff:53:7e:17:bb:9d:b7:b2:f3:
8b:3f:21:4b:f6:d9:e2:21:c3:d6:f9:78:cd:de:3a:27:79:d0:
47:c6:85:4a:b0:6e:ed:65:b0:e9:4f:53:f1:a7:28:1d:21:97:
82:0a:c9:80:06:a5:c3:a1:bf:78:c0:5e:bc:d7:72:35:ab:98:
a2:bb:cf:2d:1d:fa:7d:a7:e0:7d:a5:ab:a4:55:0d:7c:59:45:
1d:b6:3c:2d:6d:c5:68:cf:47:f3:78:07:69:a0:af:9b:b2:7c:
e2:31:08:f7:bd:6b:9f:6a:6e:03:2b:d9:2e:27:86:58:9a:2d:
54:e3:d4:52:be:8e:5a:23:c3:0f:5d:13:a5:9a:9c:27:e6:d6:
83:9e:fc:4f:74:b6:90:73:f1:54:a3:3d:68:fb:97:20:06:6b:
15:3f:b8:d9:90:0c:07:22:79:7a:9c:32:37:4f:be:05:9b:29:
a9:64:5b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:25 2026 by rpki-client