Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/dXJ1m8kWhEQDQCqdzDYj29meavo.roa
File: dXJ1m8kWhEQDQCqdzDYj29meavo.roa (raw, json)
Hash identifier: W64AkRn2J4fInsO6Ofmtd4fE3y3nvl4YxPfrOk9KHKo=
Subject key identifier: 75:72:75:9B:C9:16:84:44:03:40:2A:9D:CC:36:23:DB:D9:9E:6A:FA
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A03CE444AD6DD705A503B47E5E27347F9B
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/dXJ1m8kWhEQDQCqdzDYj29meavo.roa
Signing time: Wed 26 Aug 2026 07:06:27 +0000
ROA not before: Wed 26 Aug 2026 07:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 95.155.155.0/24 maxlen: 24
95.155.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:e4:44:ad:6d:d7:05:a5:03:b4:7e:5e:27:34:7f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 26 07:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7572759bc916844403402a9dcc3623dbd99e6afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:11:4a:95:02:f2:49:93:6c:ae:86:df:34:
00:ec:cf:24:dd:80:81:92:2f:90:39:22:23:15:05:
3b:df:5a:40:78:64:c5:ea:59:01:79:66:c0:d6:e6:
d8:0f:44:15:c7:74:f6:62:9e:ec:ff:57:6d:d3:18:
b2:da:11:61:89:f2:11:f8:8b:c3:54:2f:c3:ae:e2:
de:a2:a7:cf:f2:24:fd:69:85:81:3c:2f:aa:71:56:
92:46:d5:74:19:b5:7b:1c:f4:d3:78:a7:31:ce:18:
1b:cc:a9:40:c8:e9:fd:21:88:67:62:2b:cd:a2:1b:
cb:94:07:b3:08:a5:6e:e4:24:c1:e5:55:b1:d9:4c:
d9:dc:6d:42:aa:6b:1f:47:44:5c:54:d3:0e:bc:db:
5b:61:58:58:06:3c:41:40:94:73:47:11:d9:1f:6a:
74:37:48:b3:f3:af:c1:b6:7b:50:1d:c2:56:79:7c:
a9:b3:cb:f2:38:71:01:af:b9:31:cd:63:d4:38:96:
d7:16:8c:5e:b3:ac:6a:32:ab:32:65:94:33:90:15:
9b:84:33:79:80:39:cf:22:49:40:38:84:0b:1e:cb:
5d:5f:9f:b1:8c:7f:6c:ce:29:d4:0b:71:58:77:15:
b8:7d:04:23:f3:e9:4f:9b:0e:88:18:5e:87:4e:a0:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:72:75:9B:C9:16:84:44:03:40:2A:9D:CC:36:23:DB:D9:9E:6A:FA
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/dXJ1m8kWhEQDQCqdzDYj29meavo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.155.0/24
95.155.178.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2d:0c:67:dd:bd:b1:7e:ab:dc:3c:a5:94:46:cd:0d:43:d2:
0e:19:02:bf:02:ed:62:8d:2f:b8:89:b7:f8:81:bf:ee:d9:07:
59:cb:d5:44:e6:3c:85:96:bf:4b:6b:cf:bd:aa:ea:0c:e8:93:
d5:75:ab:c1:45:e8:57:7d:92:0b:29:8f:ed:56:4c:70:9f:38:
a2:17:60:cd:58:9f:9a:77:9b:0c:a7:7d:0f:4f:4b:bc:06:f9:
3c:57:15:bf:60:ac:25:a5:ee:0c:7c:20:f6:92:61:26:36:ce:
3a:50:33:37:60:52:38:dc:d6:71:2d:07:f6:48:a6:39:d3:4b:
f0:c9:f7:f0:88:c3:98:68:45:9e:95:fd:0e:4e:ff:d4:c7:a5:
58:b0:83:2f:2b:3e:4a:55:ae:6b:53:77:6b:53:2c:7d:2f:19:
ee:c1:0b:73:d1:8a:1f:ba:6c:3a:55:44:12:6c:d4:16:d5:dd:
f8:bc:4b:2f:c9:69:dd:2a:17:46:04:df:50:15:86:a4:10:78:
f9:6e:87:65:4f:5c:4c:db:66:1f:77:91:aa:7b:b2:9c:fb:e4:
8b:26:8f:cf:db:ae:9c:9a:b6:62:2d:4d:cb:db:43:c4:60:0a:
1c:e5:57:7a:c8:10:4b:42:1f:bd:f6:29:fc:32:4d:e0:04:e8:
3a:fd:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:26:04 2026 by rpki-client