Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/_YRU7gsUw7AnTGw-h2hVshCcJZw.roa
File: _YRU7gsUw7AnTGw-h2hVshCcJZw.roa (raw, json)
Hash identifier: UcrlnWWaVRHvoC0MHPAo0D7Go62USxqpkzcfjfXtLfc=
Subject key identifier: FD:84:54:EE:0B:14:C3:B0:27:4C:6C:3E:87:68:55:B2:10:9C:25:9C
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0199239AFDFC4C31E3EB1A9974B66B00FB1E
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/_YRU7gsUw7AnTGw-h2hVshCcJZw.roa
Signing time: Sun 07 Sep 2025 09:56:24 +0000
ROA not before: Sun 07 Sep 2025 09:56:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 95.155.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9a:fd:fc:4c:31:e3:eb:1a:99:74:b6:6b:00:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 7 09:56:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd8454ee0b14c3b0274c6c3e876855b2109c259c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ce:e3:7e:6f:c2:1d:a4:6f:a9:f4:20:84:83:
4c:74:de:36:e9:96:c2:40:39:d5:1d:ce:a4:b6:c6:
4c:b1:5c:f2:b2:7a:a5:f2:38:8c:98:91:f6:7f:cd:
0a:8b:f4:3c:bc:44:b1:27:34:0c:e6:a1:2a:69:f8:
83:85:ab:9c:20:4d:e2:2e:7d:06:7b:1f:03:45:86:
02:dd:21:d1:d4:05:e3:11:78:aa:dc:33:36:04:7f:
1c:5f:12:18:a3:d3:70:b8:08:4e:45:07:e5:b7:19:
79:43:4a:50:b3:f3:a8:44:c9:39:56:46:71:18:85:
6b:e2:2b:5f:21:8d:69:c1:e2:26:42:6e:4d:0d:07:
b3:6d:cf:9e:49:10:f5:d6:6f:b2:77:b0:9f:e7:64:
3a:2f:8e:c3:f9:59:30:3d:3e:9b:9e:17:06:83:b5:
0b:62:f0:09:98:18:1b:09:eb:84:ec:f0:99:01:96:
b3:47:4b:84:21:86:09:04:31:cb:49:be:e9:d6:c0:
49:1c:d1:5e:6b:ed:2a:90:6e:32:67:9a:40:48:6d:
63:da:fa:58:aa:4a:ee:3d:26:ca:61:2f:fd:31:14:
3f:cb:4a:3f:20:2a:c9:42:e4:5f:37:dc:19:c0:0f:
f7:98:08:84:77:9f:4f:d4:c2:f0:9d:6a:4f:6c:b4:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:84:54:EE:0B:14:C3:B0:27:4C:6C:3E:87:68:55:B2:10:9C:25:9C
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/_YRU7gsUw7AnTGw-h2hVshCcJZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cc:31:a2:98:a0:23:93:11:e3:27:1a:0d:c2:39:fe:07:ce:
5e:77:0f:f0:39:ff:eb:25:be:03:4d:bb:ac:bb:73:5f:ac:f8:
5f:bb:a9:92:9c:a0:9e:8d:c8:ca:64:a1:a5:9b:d4:8f:b2:7c:
1e:d8:e8:15:4e:d4:df:5c:e6:3a:e3:dc:eb:7b:58:ab:23:9c:
08:48:32:8e:88:3d:d4:72:ec:8f:1d:44:27:ee:26:1f:5f:19:
a5:54:68:e2:dd:31:20:f6:72:67:a3:66:06:c7:3d:1d:d1:dc:
fa:86:9d:8b:0b:e4:f9:b3:3c:92:e8:d1:ae:f6:b2:88:64:a2:
62:16:fd:b2:33:3b:30:8d:6f:0b:3e:4b:c5:8d:a2:d7:32:f8:
d3:9e:ab:3d:e6:05:ca:f5:cb:70:11:0d:9b:f0:d6:de:93:5a:
f5:56:08:29:2b:40:ca:c0:b7:a5:c9:b5:b9:dd:79:d7:47:15:
51:1d:4a:c2:68:77:e8:2c:12:cc:c9:c8:c3:a5:0e:5c:78:58:
70:96:b9:3e:54:c6:53:55:e0:7d:c3:e3:0c:fc:dd:c4:b3:5d:
1d:b9:24:8c:9a:da:bb:0d:01:b2:72:57:94:f3:c5:08:d9:32:
d3:9f:38:4e:95:a4:25:25:d0:ef:62:0c:4d:41:f7:8d:99:75:
ca:08:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:25:44 2025 by rpki-client