Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/_8zCTGBJxw-u7lVEsPTjCM3nWwA.roa
File: _8zCTGBJxw-u7lVEsPTjCM3nWwA.roa (raw, json)
Hash identifier: LjXxLmtwWhA2Mlf9B9WEsLpzMalKSd7C+ucRfQqnP4k=
Subject key identifier: FF:CC:C2:4C:60:49:C7:0F:AE:EE:55:44:B0:F4:E3:08:CD:E7:5B:00
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0198ED50FC4594F372BE9408D05169A3FBB1
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/_8zCTGBJxw-u7lVEsPTjCM3nWwA.roa
Signing time: Wed 27 Aug 2025 20:56:04 +0000
ROA not before: Wed 27 Aug 2025 20:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 95.155.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ed:50:fc:45:94:f3:72:be:94:08:d0:51:69:a3:fb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 27 20:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffccc24c6049c70faeee5544b0f4e308cde75b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:ea:54:6e:9f:a5:a6:01:91:e0:62:46:de:
1b:8d:9c:06:1c:5c:12:c2:8b:51:2c:2a:48:e6:df:
46:79:94:f2:ed:48:ce:ec:0c:ce:1f:13:24:a1:77:
8a:61:bb:3e:fe:ef:71:d6:58:08:c2:d2:ad:03:d7:
5e:a5:5c:79:72:4d:60:5a:5e:87:a0:70:69:8b:5f:
92:a1:72:69:34:4e:3b:87:ee:22:c7:a7:92:85:a5:
68:29:7d:d4:f9:94:6c:f1:3e:28:22:54:99:88:37:
6d:42:f5:ef:07:a1:3e:e9:5b:3f:4c:a7:f3:4f:ce:
ea:72:74:23:f6:fe:84:2a:e8:ce:8e:10:ea:04:37:
1a:23:5e:a5:fa:3f:b7:3f:33:cb:d7:67:e8:24:0f:
15:8c:51:cf:01:39:23:e3:78:bb:eb:9d:f4:76:48:
a5:58:d0:47:ba:5b:16:e6:d1:5d:68:e5:1a:8d:f9:
be:de:42:7b:15:bc:75:75:85:9f:d1:f2:9d:65:1f:
a9:cc:31:51:b9:2c:dd:f3:a3:6b:65:a4:05:92:2d:
25:a1:8c:b4:f3:95:50:b7:cd:5a:b0:b7:31:e8:0a:
b1:ad:ae:fb:92:5a:bd:be:f1:20:f2:21:3a:2a:e0:
db:a5:bf:7d:0d:db:b0:2e:13:d4:c4:db:e0:ee:a2:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:C2:4C:60:49:C7:0F:AE:EE:55:44:B0:F4:E3:08:CD:E7:5B:00
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/_8zCTGBJxw-u7lVEsPTjCM3nWwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.160.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:f3:c9:48:76:c2:f4:74:c4:92:22:4f:39:2b:e4:cd:db:82:
fe:33:ae:ed:5f:61:d1:fa:fb:05:26:17:b3:ab:86:82:08:c1:
c0:32:ae:94:37:a6:33:84:88:a0:d3:0a:ee:82:2e:3b:f4:65:
47:1b:59:99:c9:92:fa:1a:00:b7:1e:f5:b4:f8:f1:94:09:42:
5c:fe:58:fb:29:80:19:4c:66:2d:6b:22:5c:4f:88:fd:cd:e7:
47:f6:a4:d3:c4:cc:19:cd:7c:73:b3:86:32:af:1c:b8:f5:4e:
10:6d:6c:93:86:28:b5:2a:24:81:1c:c7:f7:93:71:1e:42:e8:
e4:ee:4d:71:e2:79:a6:22:12:de:4f:e0:40:6e:6f:a0:00:bc:
1d:fe:61:4f:6a:6d:60:f4:b5:12:56:cb:d0:48:ce:4a:f6:d2:
27:ac:9f:62:04:e2:1f:a1:28:bf:c4:a7:fd:f8:af:48:fa:23:
0a:40:02:e9:58:32:da:e3:25:04:b7:32:a6:2d:26:d8:31:be:
03:18:e5:7b:c1:27:be:19:2d:68:c3:a5:e6:0a:00:5d:6b:de:
f5:2c:ec:28:ec:96:f5:20:c9:bc:0a:0e:bd:6f:04:9a:9f:16:
7d:f6:3d:cb:f2:53:8a:f7:28:df:45:d1:67:4e:13:a8:62:79:
55:cd:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:53:46 2025 by rpki-client