Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/bacvdVF-mElsZUlEdLazOE_1oOY.roa
File: bacvdVF-mElsZUlEdLazOE_1oOY.roa (raw, json)
Hash identifier: FGfP8bcGwI1++B9gaklilu/nWe/ECV5HCwb4gl+nVuc=
Subject key identifier: 6D:A7:2F:75:51:7E:98:49:6C:65:49:44:74:B6:B3:38:4F:F5:A0:E6
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019CAE7F09FF48FBC0BD3344D0C52A884D23
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/bacvdVF-mElsZUlEdLazOE_1oOY.roa
Signing time: Mon 02 Mar 2026 12:21:27 +0000
ROA not before: Mon 02 Mar 2026 12:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 45.157.158.0/23 maxlen: 24
95.155.135.0/24 maxlen: 24
95.155.138.0/24 maxlen: 24
95.155.141.0/24 maxlen: 24
95.155.142.0/24 maxlen: 24
95.155.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:7f:09:ff:48:fb:c0:bd:33:44:d0:c5:2a:88:4d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Mar 2 12:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6da72f75517e98496c65494474b6b3384ff5a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:30:2a:c4:52:fd:6b:56:ab:86:fd:ee:60:a9:
24:42:9a:c0:1e:55:be:0d:25:29:44:ad:04:d9:a4:
26:21:e8:4c:87:fb:52:26:3a:e1:a8:5c:52:a0:3c:
43:54:f1:09:39:88:75:f7:b8:1c:b2:f9:d5:f5:c0:
ca:ec:e8:b2:f4:69:58:7d:6f:bc:6c:ba:2f:c7:7d:
31:41:40:22:9e:dc:71:bc:40:ba:a9:e2:3a:ad:9d:
f7:21:fa:46:7e:ca:6a:dd:37:17:e2:ec:15:f6:1d:
40:1d:3f:cc:76:0c:85:1f:81:51:c4:7c:b1:d1:cc:
99:30:b0:e3:6f:99:17:6e:a7:29:96:0a:19:84:9e:
89:5b:da:f5:e7:c2:49:58:d0:aa:9b:76:cc:a1:93:
0e:b8:ef:2b:79:ba:40:3d:b7:09:b9:cb:19:a2:f5:
7a:e8:8e:ed:1f:fc:0d:49:d7:e0:03:4d:2e:57:b0:
1c:95:98:81:25:ac:d5:58:eb:78:8e:ed:2b:97:59:
4c:91:3e:a6:d6:4f:b5:30:e0:c6:e2:a2:3a:45:05:
88:85:b7:0c:a3:4f:3f:9c:67:23:0c:dc:d9:e3:47:
33:d2:e3:e9:82:bb:0f:ed:88:58:d6:ff:0c:c5:c1:
db:3f:ba:f0:5f:14:75:a1:9a:42:7e:36:3e:af:55:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A7:2F:75:51:7E:98:49:6C:65:49:44:74:B6:B3:38:4F:F5:A0:E6
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/bacvdVF-mElsZUlEdLazOE_1oOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.158.0/23
95.155.135.0/24
95.155.138.0/24
95.155.141.0-95.155.143.255
Signature Algorithm: sha256WithRSAEncryption
38:00:ff:60:63:9a:24:22:2f:a2:6e:ac:2d:0b:45:cd:64:a7:
6a:c3:22:47:77:c4:8c:20:79:e4:df:49:d4:3c:50:50:c1:0a:
66:fa:a0:27:3f:a8:84:21:ec:33:b7:3a:4a:d9:2b:70:ba:72:
e8:14:73:5a:39:1c:a7:4e:ae:f0:7b:c6:15:60:88:c6:a4:a4:
10:b1:fd:98:28:f4:47:bb:70:b8:d4:60:1b:2c:aa:81:3e:72:
52:e3:7a:85:cf:a7:69:36:6a:dc:72:25:f7:4a:0d:14:a7:dd:
38:0f:b8:33:d7:27:dd:d2:29:14:95:30:f5:96:01:be:10:e9:
a5:44:ed:99:69:39:b2:03:93:3a:d9:5c:0f:df:f8:6c:e0:03:
59:7b:5d:b7:c3:4b:f7:de:de:25:00:d5:90:87:53:3b:f4:ab:
ff:70:a7:d5:f6:64:d8:ab:16:5c:6e:22:1e:a6:56:d1:88:f4:
a2:5c:27:36:cf:cc:a1:24:61:9b:12:04:4f:35:19:c3:2d:3b:
b7:96:16:f6:42:ce:b7:d5:ca:bb:bf:7a:5a:fd:8f:be:11:04:
d7:26:b0:08:e9:17:77:1d:6b:1d:ec:bb:9c:11:1a:6c:fd:6d:
cd:d6:1f:86:bb:71:bc:7e:c8:78:96:4f:59:81:44:c6:5a:c9:
51:c7:57:8a
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZyufwn/SPvAvTNE0MUqiE0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwMzAyMTIyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGE3MmY3NTUxN2U5ODQ5NmM2NTQ5NDQ3NGI2YjMzODRmZjVhMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jAqxFL9a1arhv3uYKkkQprAHlW+
DSUpRK0E2aQmIehMh/tSJjrhqFxSoDxDVPEJOYh197gcsvnV9cDK7Oiy9GlYfW+8
bLovx30xQUAintxxvEC6qeI6rZ33IfpGfspq3TcX4uwV9h1AHT/MdgyFH4FRxHyx
0cyZMLDjb5kXbqcplgoZhJ6JW9r158JJWNCqm3bMoZMOuO8rebpAPbcJucsZovV6
6I7tH/wNSdfgA00uV7AclZiBJazVWOt4ju0rl1lMkT6m1k+1MODG4qI6RQWIhbcM
o08/nGcjDNzZ40cz0uPpgrsP7YhY1v8MxcHbP7rwXxR1oZpCfjY+r1X65QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFG2nL3VRfphJbGVJRHS2szhP9aDmMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvYmFjdmRWRi1tRWxzWlVsRWRMYXpPRV8xb09ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLZ2eAwQA
X5uHAwQAX5uKMAwDBABfm40DBARfm4AwDQYJKoZIhvcNAQELBQADggEBADgA/2Bj
miQiL6JurC0LRc1kp2rDIkd3xIwgeeTfSdQ8UFDBCmb6oCc/qIQh7DO3OkrZK3C6
cugUc1o5HKdOrvB7xhVgiMakpBCx/Zgo9Ee7cLjUYBssqoE+clLjeoXPp2k2atxy
JfdKDRSn3TgPuDPXJ93SKRSVMPWWAb4Q6aVE7ZlpObIDkzrZXA/f+GzgA1l7XbfD
S/fe3iUA1ZCHUzv0q/9wp9X2ZNirFlxuIh6mVtGI9KJcJzbPzKEkYZsSBE81GcMt
O7eWFvZCzrfVyru/elr9j74RBNcmsAjpF3cdax3su5wRGmz9bc3WH4a7cbx+yHiW
T1mBRMZayVHHV4o=
-----END CERTIFICATE-----
Generated at Thu Mar 5 14:01:44 2026 by rpki-client