Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/hbdbuaRvg2tTLKp10GziAeSgyRU.roa
File: hbdbuaRvg2tTLKp10GziAeSgyRU.roa (raw, json)
Hash identifier: H+cM7/5ALMd58f/dYxV/Q5+dv/fO2eB8PR2xGdT8ZXc=
Subject key identifier: 85:B7:5B:B9:A4:6F:83:6B:53:2C:AA:75:D0:6C:E2:01:E4:A0:C9:15
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D58F1F8A020165163037971AFA2E5BE3F
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/hbdbuaRvg2tTLKp10GziAeSgyRU.roa
Signing time: Sat 04 Apr 2026 14:42:25 +0000
ROA not before: Sat 04 Apr 2026 14:42:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 95.155.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:58:f1:f8:a0:20:16:51:63:03:79:71:af:a2:e5:be:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Apr 4 14:42:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85b75bb9a46f836b532caa75d06ce201e4a0c915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:f7:c0:9f:1e:7c:ee:75:c9:2b:80:0a:1f:
89:2a:00:e6:78:93:3d:2c:eb:a3:c7:af:ec:00:27:
2a:5a:0e:34:00:37:f4:b4:b5:62:c6:04:3a:63:00:
c8:5c:46:df:7d:af:a3:26:6e:b3:0f:72:32:35:93:
85:2e:39:36:57:5a:58:eb:b8:bf:26:a9:b7:98:86:
87:29:0e:37:d4:3e:d5:8e:28:8b:58:3b:f8:fe:fa:
dd:0c:10:f8:12:c0:73:88:7a:bc:d6:7e:c1:cb:c7:
df:20:1d:8b:b2:c7:87:99:db:ab:66:8f:09:fc:74:
e6:d5:66:0f:66:ee:2e:5e:86:88:8d:d0:f8:55:89:
22:b6:42:0e:c4:e6:a6:54:07:64:cf:b4:e8:39:db:
45:b9:e8:b3:82:01:3a:15:a9:39:e1:56:96:5d:ac:
fa:16:64:66:bd:5c:68:fc:2a:78:e4:96:88:b6:74:
19:ba:e3:aa:ab:3d:0b:50:e8:5f:07:f6:ac:22:18:
32:66:29:fe:53:bf:29:4b:37:e4:c8:f6:b2:94:9b:
51:11:a9:34:19:57:29:ba:ae:bd:ae:54:30:f4:00:
82:45:0c:19:fe:d7:8c:9f:15:76:1d:f4:42:ef:17:
60:49:b9:6d:4a:2e:b6:97:ef:ad:1b:65:dd:10:9d:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:5B:B9:A4:6F:83:6B:53:2C:AA:75:D0:6C:E2:01:E4:A0:C9:15
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/hbdbuaRvg2tTLKp10GziAeSgyRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.130.0/24
Signature Algorithm: sha256WithRSAEncryption
47:8b:cc:63:76:0a:e4:7e:f6:73:1d:85:67:93:f9:e9:ed:21:
5a:65:4c:a5:64:90:78:f4:0e:47:48:68:91:3e:43:ec:9d:ed:
db:c9:44:9c:53:de:11:d5:98:7c:93:2f:ba:10:ec:cf:02:f2:
27:93:5f:2f:f0:9e:3f:67:a4:3d:b1:4d:bb:8f:ea:f9:52:90:
a4:47:32:3d:ff:26:3f:09:68:c1:f3:13:47:5a:3a:a7:26:df:
64:db:93:a4:ff:26:12:99:da:24:40:a0:60:e8:63:5c:c9:d5:
df:ea:d1:fc:19:39:c2:db:b3:c7:28:1d:04:5d:01:04:67:22:
d7:dd:07:52:4d:bb:80:91:9c:91:3f:db:92:79:1b:ce:50:78:
4e:0f:10:f4:70:25:a2:34:fe:ba:8a:9d:6c:db:30:41:7d:50:
5c:af:ff:a5:21:82:4a:14:b1:2c:3a:68:7e:5d:4f:18:9a:a6:
4a:b0:f4:2d:cd:f7:5b:96:07:ee:2c:0f:41:29:05:68:ce:47:
dd:85:ec:7c:c2:af:81:5f:b8:57:ad:77:9c:ba:52:5f:f7:db:
5e:36:76:ce:bc:68:7e:59:60:b8:f0:93:e5:e7:ff:9b:b3:e2:
eb:64:af:01:5e:99:55:10:c4:78:8b:e2:f2:1d:9f:a8:7b:8c:
a6:16:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 04:59:38 2026 by rpki-client