Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/jX-4IWGmG4eMlD0i54uclcBT7Oo.roa
File: jX-4IWGmG4eMlD0i54uclcBT7Oo.roa (raw, json)
Hash identifier: fjR22bEWcrZfBSNMZjc/CuGiPhNuJQZ9SlzDLkoJWZM=
Subject key identifier: 8D:7F:B8:21:61:A6:1B:87:8C:94:3D:22:E7:8B:9C:95:C0:53:EC:EA
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019FB1C08E8F6426847F29C9EAF19C1D3AAF
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/jX-4IWGmG4eMlD0i54uclcBT7Oo.roa
Signing time: Thu 30 Jul 2026 06:40:14 +0000
ROA not before: Thu 30 Jul 2026 06:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 95.155.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:c0:8e:8f:64:26:84:7f:29:c9:ea:f1:9c:1d:3a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 30 06:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d7fb82161a61b878c943d22e78b9c95c053ecea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:0a:b7:1f:e8:0b:d5:b4:33:1c:c6:e4:58:
03:30:3e:0f:ea:33:b5:6c:12:14:4b:c0:67:21:ae:
21:59:88:ff:8c:37:15:8b:76:91:b8:11:b3:bc:5a:
f0:cd:0e:ab:bd:8d:a0:01:9a:4c:94:f2:78:80:2c:
d5:47:77:18:5b:ad:7e:92:c8:67:dd:83:9a:0b:24:
30:22:33:c1:99:96:b0:d9:be:57:b0:1e:5c:76:84:
91:28:57:c5:10:75:d6:21:19:b5:83:6e:34:a7:e0:
74:f3:f6:6a:4f:f5:ba:1a:c2:0a:fb:03:d6:b1:24:
0a:12:28:32:2b:6c:db:f1:11:c7:ed:d3:f1:63:a4:
bc:20:e2:ac:b2:35:fb:5a:61:18:8f:61:0b:a0:cc:
40:36:49:88:a3:de:95:d2:a3:7f:3b:e7:9f:5f:14:
a0:f2:47:40:ca:ef:75:0a:fe:d4:49:a6:42:ce:fe:
1c:c0:7b:f2:a1:18:4d:46:9c:bf:b2:69:d0:c1:2d:
59:48:28:56:7a:d3:6d:f1:01:42:69:88:53:46:56:
52:f7:ac:1a:22:1f:ea:cb:b5:1b:61:06:8e:e7:1b:
1c:b0:b8:f7:d6:72:57:f5:ce:82:89:fb:04:2f:03:
7c:99:c9:89:52:1a:35:ee:53:93:a6:ef:7a:a2:c9:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:B8:21:61:A6:1B:87:8C:94:3D:22:E7:8B:9C:95:C0:53:EC:EA
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/jX-4IWGmG4eMlD0i54uclcBT7Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:45:18:8a:a4:02:88:4a:e5:16:08:3a:7b:a1:93:bc:95:e6:
93:68:41:ab:0a:fe:84:37:b9:80:4b:21:b9:57:f8:fc:90:82:
8d:e3:14:9a:89:66:e3:65:36:f2:c3:a2:ce:4d:4a:24:d9:ff:
3d:c4:74:25:27:01:23:fa:8f:cc:45:1f:ef:55:5a:99:d1:69:
7b:af:8d:9c:c0:3c:d4:07:8d:8e:e3:26:f9:6d:96:9f:99:7b:
ba:7c:6b:36:7e:b8:83:d8:3c:a1:f0:05:6a:8c:4e:53:6f:30:
f9:36:d5:af:db:65:1c:07:0b:f3:7e:9a:dd:a2:81:72:fc:d9:
84:a6:c0:0d:e1:d6:02:f5:0d:ed:1a:29:c9:fa:dd:23:11:e1:
65:fc:63:ab:73:92:1c:3f:e7:f6:14:f5:2e:33:a6:d4:05:93:
8e:be:d1:bd:73:1d:49:53:80:52:5c:b5:81:b8:c2:e1:76:b2:
6d:40:90:66:7a:ed:f1:24:67:87:bc:8e:4c:86:ea:f3:3a:3a:
a7:89:9b:5f:b7:db:5a:c8:82:cb:fb:38:b3:04:89:94:1c:69:
c3:00:b8:ae:db:0f:d3:cd:93:d3:e7:0d:22:58:d9:77:a3:36:
b7:7e:cc:98:1d:00:93:90:bc:da:1d:7a:b6:3a:99:7e:a0:d9:
85:03:b2:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+xwI6PZCaEfynJ6vGcHTqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwNzMwMDY0MDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDdmYjgyMTYxYTYxYjg3OGM5NDNkMjJlNzhiOWM5NWMwNTNlY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLkKtx/oC9W0MxzG5FgDMD4P6jO1
bBIUS8BnIa4hWYj/jDcVi3aRuBGzvFrwzQ6rvY2gAZpMlPJ4gCzVR3cYW61+kshn
3YOaCyQwIjPBmZaw2b5XsB5cdoSRKFfFEHXWIRm1g240p+B08/ZqT/W6GsIK+wPW
sSQKEigyK2zb8RHH7dPxY6S8IOKssjX7WmEYj2ELoMxANkmIo96V0qN/O+efXxSg
8kdAyu91Cv7USaZCzv4cwHvyoRhNRpy/smnQwS1ZSChWetNt8QFCaYhTRlZS96wa
Ih/qy7UbYQaO5xscsLj31nJX9c6CifsELwN8mcmJUho17lOTpu96osninwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI1/uCFhphuHjJQ9IueLnJXAU+zqMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvalgtNElXR21HNGVNbEQwaTU0dWNsY0JUN09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5u3MA0G
CSqGSIb3DQEBCwUAA4IBAQAaRRiKpAKISuUWCDp7oZO8leaTaEGrCv6EN7mASyG5
V/j8kIKN4xSaiWbjZTbyw6LOTUok2f89xHQlJwEj+o/MRR/vVVqZ0Wl7r42cwDzU
B42O4yb5bZafmXu6fGs2friD2Dyh8AVqjE5TbzD5NtWv22UcBwvzfprdooFy/NmE
psAN4dYC9Q3tGinJ+t0jEeFl/GOrc5IcP+f2FPUuM6bUBZOOvtG9cx1JU4BSXLWB
uMLhdrJtQJBmeu3xJGeHvI5MhurzOjqniZtft9tayILL+zizBImUHGnDALiu2w/T
zZPT5w0iWNl3oza3fsyYHQCTkLzaHXq2Opl+oNmFA7Jf
-----END CERTIFICATE-----
Generated at Sun Aug 23 01:53:06 2026 by rpki-client