Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/cUKcHJFrJ0eH0dvSy-4NvKEMJRg.roa
File: cUKcHJFrJ0eH0dvSy-4NvKEMJRg.roa (raw, json)
Hash identifier: ay80hlOU/zsjK/Gj33Njc9A5kUM22amUQKa18P+z+G4=
Subject key identifier: 71:42:9C:1C:91:6B:27:47:87:D1:DB:D2:CB:EE:0D:BC:A1:0C:25:18
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0230CAB411F1A12EF868C6484FA84BCE6
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/cUKcHJFrJ0eH0dvSy-4NvKEMJRg.roa
Signing time: Fri 21 Aug 2026 06:40:27 +0000
ROA not before: Fri 21 Aug 2026 06:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 95.155.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:0c:ab:41:1f:1a:12:ef:86:8c:64:84:fa:84:bc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 21 06:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71429c1c916b274787d1dbd2cbee0dbca10c2518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:32:ac:28:e0:f6:33:50:34:9b:44:6f:8e:
ac:19:f4:1c:27:17:67:d3:97:02:3c:c3:d7:bd:4a:
86:f2:72:c2:ee:5c:b6:6c:b8:f4:d6:54:95:dd:13:
9d:d2:45:2d:02:51:c8:ad:25:33:75:ce:55:3d:20:
e9:a9:fd:dd:dd:ad:d1:a1:99:36:d3:f6:86:20:b5:
2b:81:38:f3:f8:8b:e5:28:25:9f:17:40:a7:d2:eb:
06:24:de:dc:cb:b0:27:99:8d:4e:84:1b:d4:c5:40:
8b:c3:45:44:3b:ca:83:e8:3c:16:d8:c6:cf:fe:24:
9d:22:97:ee:b3:c6:4d:27:11:2b:a4:0a:b8:bc:ca:
77:03:97:bc:88:68:4e:66:81:f5:f4:92:58:ad:e7:
47:e4:db:b4:49:ea:c6:b1:02:7b:85:11:e4:46:fa:
ed:9c:66:1c:1e:15:6e:65:18:53:b4:bd:ec:69:0a:
2c:52:f9:ed:db:96:98:ab:5e:5a:e6:7a:38:d0:e9:
77:25:c5:03:46:a6:35:ae:cb:83:58:42:2f:fb:97:
43:3b:c5:5d:e1:ca:7b:0d:a8:e9:76:92:26:ad:93:
de:48:70:d1:da:6e:bd:e9:8a:2f:a9:fc:32:51:46:
2d:21:81:40:d3:5d:00:40:80:8e:74:5b:76:62:2b:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:9C:1C:91:6B:27:47:87:D1:DB:D2:CB:EE:0D:BC:A1:0C:25:18
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/cUKcHJFrJ0eH0dvSy-4NvKEMJRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.180.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:d7:07:d2:6a:1d:2d:96:46:f2:92:9f:10:e7:ca:26:4c:08:
ad:15:99:3d:0e:bd:97:f9:d5:7c:bc:d9:a3:bb:8a:98:84:81:
fc:43:c9:55:1d:34:a1:10:94:93:f0:47:6e:d7:ae:66:02:4f:
5c:4d:02:2b:22:67:1d:f0:ef:77:b3:59:ec:cd:0a:3f:3b:1f:
8c:6a:e6:43:24:bd:9a:f0:5e:20:17:cb:c4:df:d4:2b:64:1a:
a0:03:09:f2:1d:84:41:54:af:df:77:a2:9b:cb:8c:bf:e0:35:
57:90:bb:b1:34:fb:48:81:0f:17:14:2d:af:66:60:50:88:11:
6f:3d:8b:32:67:e8:64:78:ae:42:98:5a:68:6a:91:c9:79:c7:
e2:4b:79:3b:76:77:3c:04:cd:a7:cd:15:5a:9d:52:00:c1:dd:
99:09:1d:50:25:ae:d6:69:f3:70:27:9c:5b:08:cd:82:ba:eb:
0b:90:7b:86:4f:e8:b9:67:23:dc:7f:6e:68:12:fd:7a:8b:50:
96:27:75:34:57:a7:8c:4b:ec:b9:6f:80:e9:d4:26:35:fa:a2:
81:30:36:2a:29:62:7e:fa:c8:1f:17:37:57:e7:66:3c:97:2c:
5f:65:e2:e9:00:0a:17:f3:85:64:c9:e1:18:6c:30:66:60:c3:
00:80:64:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 01:52:50 2026 by rpki-client