Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/kE5ha7iXuXmh40z5puHQJl5pgHw.roa
File: kE5ha7iXuXmh40z5puHQJl5pgHw.roa (raw, json)
Hash identifier: xA+NtCQBZe9jiSdnr5YRreCW0KlTR4JQj8P7BKbr2Aw=
Subject key identifier: 90:4E:61:6B:B8:97:B9:79:A1:E3:4C:F9:A6:E1:D0:26:5E:69:80:7C
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019FB719E5581431AF900378FCAC3632E12A
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/kE5ha7iXuXmh40z5puHQJl5pgHw.roa
Signing time: Fri 31 Jul 2026 07:35:55 +0000
ROA not before: Fri 31 Jul 2026 07:35:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219374
IP address blocks: 95.155.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 02:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:19:e5:58:14:31:af:90:03:78:fc:ac:36:32:e1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 31 07:35:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=904e616bb897b979a1e34cf9a6e1d0265e69807c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:0d:9c:8b:2f:af:c3:5c:d1:0f:1a:9d:d5:
d4:f0:09:49:00:1e:5b:c5:a2:5e:13:38:b3:69:0c:
b0:ec:16:3b:1d:0e:b2:77:47:97:71:06:6d:c4:60:
2d:45:87:94:d4:4e:86:c3:d9:39:51:25:0f:b9:30:
4c:2d:f8:9c:5f:4f:cd:11:7a:de:cd:4c:9b:f7:ca:
32:d5:2f:ca:50:21:d4:03:62:c1:f4:ad:ab:42:84:
d3:e2:61:1c:60:fa:64:20:56:cb:ca:02:4e:22:bc:
8e:8a:4f:9e:47:f6:42:6e:ee:91:58:42:44:96:41:
7b:bc:93:84:30:cc:d6:60:eb:28:47:b9:d3:80:43:
b5:58:a1:09:8f:04:96:09:af:21:5c:1d:73:41:6d:
c3:97:68:81:05:ae:29:4f:24:a3:22:b9:b7:b2:bc:
03:66:2b:4a:2b:c0:36:5a:9f:cc:4d:fd:84:21:84:
d8:cc:78:34:24:46:13:62:0f:cd:5f:3f:cf:96:da:
97:01:bc:ae:60:8e:27:fe:b5:91:0b:72:c8:76:1a:
2e:e6:62:d5:72:e8:85:a3:35:f1:ae:8c:e7:77:58:
df:5f:e2:38:54:0a:be:95:ef:73:3e:ee:39:45:79:
ed:10:d2:a0:f7:03:03:f0:4e:06:25:23:42:f0:50:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4E:61:6B:B8:97:B9:79:A1:E3:4C:F9:A6:E1:D0:26:5E:69:80:7C
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/kE5ha7iXuXmh40z5puHQJl5pgHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f6:5d:7c:0b:03:14:91:67:14:0e:9c:d0:8c:98:fe:6c:de:
40:73:01:0b:dc:2e:b7:77:0c:93:ca:38:09:5e:77:ee:c2:1e:
b0:8d:35:27:5e:36:92:5b:4b:bc:9d:b8:dc:fb:17:06:06:bf:
ee:68:66:c0:5d:6a:af:5c:98:0d:a7:ff:90:a9:1a:f8:5a:58:
88:19:f4:e1:8d:1f:cf:0a:57:2c:c0:b1:e4:a1:ad:38:97:e5:
48:f7:db:2c:fc:fb:3d:e6:83:7c:7a:2e:6a:3c:d2:79:a0:7d:
e7:a8:a8:9e:6e:2a:d7:4e:aa:a2:d1:65:1b:4d:fc:76:5a:66:
bc:8a:06:40:a2:6c:74:3a:9e:6e:8a:39:4f:a6:3f:49:99:10:
27:a7:f6:6a:24:25:1f:bc:2b:39:0c:1f:93:3d:94:0a:29:3b:
0a:af:ad:c3:1c:be:21:23:c7:75:92:b8:3a:92:56:0d:87:ff:
fa:bb:48:5e:9f:ca:6c:12:5f:8f:85:9f:7b:1e:20:26:5d:16:
87:7b:1d:fb:ea:c7:05:01:6e:71:79:d4:91:ba:33:64:86:49:
4e:ef:1a:6a:50:dc:09:5a:9b:5d:13:1f:10:6a:4e:b1:3d:9c:
fb:e4:d4:4b:fc:c1:6f:1b:ea:7f:bc:33:04:d5:12:2c:b2:35:
b4:b6:6a:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+3GeVYFDGvkAN4/Kw2MuEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwNzMxMDczNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDRlNjE2YmI4OTdiOTc5YTFlMzRjZjlhNmUxZDAyNjVlNjk4MDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2McNnIsvr8Nc0Q8andXU8AlJAB5b
xaJeEzizaQyw7BY7HQ6yd0eXcQZtxGAtRYeU1E6Gw9k5USUPuTBMLficX0/NEXre
zUyb98oy1S/KUCHUA2LB9K2rQoTT4mEcYPpkIFbLygJOIryOik+eR/ZCbu6RWEJE
lkF7vJOEMMzWYOsoR7nTgEO1WKEJjwSWCa8hXB1zQW3Dl2iBBa4pTySjIrm3srwD
ZitKK8A2Wp/MTf2EIYTYzHg0JEYTYg/NXz/PltqXAbyuYI4n/rWRC3LIdhou5mLV
cuiFozXxroznd1jfX+I4VAq+le9zPu45RXntENKg9wMD8E4GJSNC8FB4kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJBOYWu4l7l5oeNM+abh0CZeaYB8MB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEva0U1aGE3aVh1WG1oNDB6NXB1SFFKbDVwZ0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5uxMA0G
CSqGSIb3DQEBCwUAA4IBAQAP9l18CwMUkWcUDpzQjJj+bN5AcwEL3C63dwyTyjgJ
Xnfuwh6wjTUnXjaSW0u8nbjc+xcGBr/uaGbAXWqvXJgNp/+QqRr4WliIGfThjR/P
ClcswLHkoa04l+VI99ss/Ps95oN8ei5qPNJ5oH3nqKiebirXTqqi0WUbTfx2Wma8
igZAomx0Op5uijlPpj9JmRAnp/ZqJCUfvCs5DB+TPZQKKTsKr63DHL4hI8d1krg6
klYNh//6u0hen8psEl+PhZ97HiAmXRaHex376scFAW5xedSRujNkhklO7xpqUNwJ
WptdEx8Qak6xPZz75NRL/MFvG+p/vDME1RIssjW0tmq+
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:50 2026 by rpki-client