Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ZUQyPtsQSG2-82dh1ccUQgyaC3U.roa
File: ZUQyPtsQSG2-82dh1ccUQgyaC3U.roa (raw, json)
Hash identifier: F5s94k1GhD0QSyMs8GhlHlBwNgpTYkiuTjgDbM5XTDc=
Subject key identifier: 65:44:32:3E:DB:10:48:6D:BE:F3:67:61:D5:C7:14:42:0C:9A:0B:75
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0F14C876E1E3C1A7AED590DEA8CF38F7B
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ZUQyPtsQSG2-82dh1ccUQgyaC3U.roa
Signing time: Wed 30 Sep 2026 07:51:59 +0000
ROA not before: Wed 30 Sep 2026 07:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 95.155.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:4c:87:6e:1e:3c:1a:7a:ed:59:0d:ea:8c:f3:8f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 30 07:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6544323edb10486dbef36761d5c714420c9a0b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8b:e6:4b:20:67:b2:9e:1e:5e:26:a7:6a:ba:
57:0f:ed:31:60:48:f2:87:41:d3:6a:ab:41:0f:7b:
59:c6:a5:29:27:b9:36:85:85:d0:03:fc:02:3b:35:
2a:8c:94:45:4b:fc:1c:fc:97:ac:c9:28:c8:be:bc:
cf:fc:ec:12:c3:30:e4:90:9f:9a:67:89:ea:2f:8f:
d9:e1:cb:e5:72:b5:b0:31:12:1d:8c:2c:a9:ce:b0:
a2:0c:15:bd:c8:3d:23:36:e4:b5:80:a1:c0:2f:d9:
66:91:7a:23:b3:33:07:fb:2d:15:45:0c:c8:ba:a0:
f3:3d:0c:26:55:7f:d3:08:04:f9:8b:ae:93:63:74:
a5:f4:66:9d:08:e6:73:57:37:dd:8b:0c:81:03:68:
d5:a3:cb:f8:2e:6a:f1:83:62:c8:f0:76:1a:aa:4f:
ec:cc:2a:b6:12:85:ef:78:1f:fd:07:40:42:9e:1d:
4d:b5:ed:ca:7f:18:21:6c:97:50:b6:f3:9f:cc:05:
5d:fd:4d:94:e1:9e:a7:65:2d:91:7c:e8:4d:b5:3c:
35:fc:68:ff:72:66:bc:72:6d:5e:f6:d3:1a:5c:a8:
7a:00:23:48:23:ae:a3:fe:9b:ca:76:45:e5:25:79:
20:0d:ba:04:09:d3:ed:6b:91:ac:5b:c1:b3:e9:52:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:32:3E:DB:10:48:6D:BE:F3:67:61:D5:C7:14:42:0C:9A:0B:75
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ZUQyPtsQSG2-82dh1ccUQgyaC3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.154.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9b:aa:af:93:6c:b7:31:16:41:e3:ae:ad:66:4e:48:c4:d5:
c4:ec:94:51:dd:ea:03:00:49:13:bf:02:79:f5:42:4f:64:26:
30:16:32:43:e3:8d:2d:1c:6f:73:e5:90:8c:f5:ca:59:63:0d:
90:7a:7e:86:8b:5d:3c:0a:a1:b9:2b:7a:1f:f1:16:d9:49:d9:
20:a5:7e:4a:da:02:28:0c:6c:36:97:69:55:6e:21:77:37:17:
22:44:3c:2f:d1:44:82:7a:52:49:dd:ac:da:63:2f:c4:ee:02:
c3:55:97:9b:9b:5a:25:73:95:99:45:a3:d2:79:b3:4c:26:2c:
65:a4:e7:d1:6d:a6:3f:54:49:b9:7f:86:06:e6:e2:af:fe:32:
cc:f3:2c:e2:2d:7d:11:08:38:5f:3b:29:b1:16:91:c2:59:fe:
02:8b:e0:50:00:19:df:5b:58:31:51:33:02:ae:e4:d3:58:6e:
33:58:c2:af:19:7b:1b:c4:8a:0a:6a:62:46:fe:17:e0:c7:8b:
2e:53:89:be:0d:47:da:2b:65:42:19:b5:1b:3c:42:41:20:28:
2e:54:91:d7:4d:f6:59:45:6b:e9:a0:9a:76:52:80:d5:bc:4d:
2d:f4:bd:89:52:44:b2:5a:00:85:c8:dc:7d:72:95:df:46:b6:
9e:b8:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:32:00 2026 by rpki-client