Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa
File: jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa (raw, json)
Hash identifier: nMFW9BQneK7T1fgc0t6oA8jRIcD7rZtWnJMbSrXrhdQ=
Subject key identifier: 8E:93:12:D7:64:02:3B:68:1D:0F:77:2E:7B:16:02:DB:04:3C:41:EA
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019E63A2E9584E699DD19766340177E7F163
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa
Signing time: Tue 26 May 2026 09:34:41 +0000
ROA not before: Tue 26 May 2026 09:34:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 95.155.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:a2:e9:58:4e:69:9d:d1:97:66:34:01:77:e7:f1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 26 09:34:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e9312d764023b681d0f772e7b1602db043c41ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:5a:b4:2f:0b:e7:8b:2f:db:02:ab:83:cc:
b6:56:e2:58:b4:80:a6:62:32:c6:5e:66:81:54:fb:
93:99:38:86:91:57:a9:bc:d1:cc:78:41:06:82:e1:
53:dc:9a:5d:bf:34:c8:0a:4c:d7:27:2b:bc:07:11:
9f:28:e5:80:c1:b4:cf:90:61:99:fc:31:f1:73:9f:
6a:18:56:8d:37:c4:a2:02:1e:06:c7:c8:a1:c4:cd:
b8:66:b2:47:81:d1:93:2f:b8:be:59:3c:9e:0d:19:
4f:03:e9:bf:a9:f5:d9:3d:1e:64:bd:6f:d5:5b:dd:
d9:b1:36:92:fc:2f:78:ef:66:c1:46:af:46:50:1f:
65:76:ac:18:90:09:b2:4c:35:fc:ba:18:fe:d5:82:
8d:37:77:82:b4:eb:d2:76:fa:17:36:c7:a2:2f:61:
bf:bc:80:04:a1:c6:0a:d1:27:25:ed:86:07:b3:ee:
10:a6:7f:36:ce:97:8e:2d:80:b5:85:b4:b2:58:f1:
8e:13:bf:0e:01:12:b0:4a:a3:64:d3:20:76:b0:9b:
d3:7d:57:9a:01:f7:f9:0b:a2:75:61:2e:4b:bd:eb:
05:3f:1d:29:d3:de:9d:41:30:3d:6c:da:af:91:aa:
15:14:a0:30:1b:08:97:8e:a7:ef:ac:ef:2d:3a:27:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:12:D7:64:02:3B:68:1D:0F:77:2E:7B:16:02:DB:04:3C:41:EA
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.150.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e1:40:76:d4:11:f2:8a:18:b7:98:a1:f3:3f:a0:a6:7c:a7:
10:f7:6c:e4:15:50:ce:81:8c:33:42:b1:d8:b2:d3:83:54:1a:
4c:f1:fe:e2:97:05:d6:b6:1a:13:2f:df:6d:4e:86:a7:c9:5d:
fc:c5:9d:8b:95:96:8a:6f:da:17:60:63:0e:0c:0a:30:f8:11:
14:f8:02:42:59:84:4f:b8:37:52:9b:4b:0a:95:f5:5e:39:7b:
04:ee:c2:fd:39:4f:9e:cd:86:e1:7b:0d:8b:12:f7:6d:47:55:
7b:3c:7a:fb:66:b4:fa:2a:6d:0e:55:55:5e:d5:9e:1a:99:9a:
8d:c9:6b:09:4b:90:5f:65:64:c0:ca:b7:11:95:2b:68:6e:c8:
42:a0:ed:7e:58:5d:d8:06:b7:3a:b1:e8:6e:93:0b:0d:b1:5a:
94:4a:57:c5:a1:75:a0:53:ec:df:27:3f:59:b8:d7:01:0a:bf:
a9:25:8f:72:dc:93:ca:b8:04:54:91:11:8a:94:9f:3f:7c:65:
56:58:63:ba:33:1b:5d:df:f7:51:25:0e:dd:a8:ee:75:83:03:
62:75:2a:d6:a0:fb:bd:f4:fb:23:1f:57:e3:7a:65:f1:2b:d2:
a7:83:43:f1:2d:c9:b0:ee:22:73:0a:8c:96:86:10:83:a2:00:
cb:f6:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:13 2026 by rpki-client