Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/sl1r80DXM22cM59xuY5TxIaUKIk.roa
File: sl1r80DXM22cM59xuY5TxIaUKIk.roa (raw, json)
Hash identifier: OaqLufEYLMhF0Zy2J7LLu5msyS3w3ex+GoFgknsRxqg=
Subject key identifier: B2:5D:6B:F3:40:D7:33:6D:9C:33:9F:71:B9:8E:53:C4:86:94:28:89
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0571D9963E7F587522C9A1F68D1F3B88B
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/sl1r80DXM22cM59xuY5TxIaUKIk.roa
Signing time: Mon 31 Aug 2026 09:19:12 +0000
ROA not before: Mon 31 Aug 2026 09:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 95.155.172.0/24 maxlen: 24
95.155.173.0/24 maxlen: 24
95.155.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:1d:99:63:e7:f5:87:52:2c:9a:1f:68:d1:f3:b8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 31 09:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b25d6bf340d7336d9c339f71b98e53c486942889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:39:6b:64:49:20:e7:72:5b:58:20:48:6f:
41:1a:cc:db:f7:91:17:67:48:00:bf:2b:be:de:39:
f9:5e:0a:cb:8f:ef:07:da:8d:ae:17:ba:db:75:df:
39:c4:f0:76:06:7e:9b:86:76:b4:b9:3a:46:68:1b:
86:b6:4f:5c:08:d5:a4:8f:c0:a6:f7:76:95:3e:86:
b4:a1:88:9e:9d:11:30:30:d6:54:79:47:10:da:13:
33:0b:32:83:d2:b6:5e:48:33:03:e6:76:00:a6:78:
6c:01:c0:bf:81:8a:62:31:84:b3:de:b5:d9:a2:a6:
56:3e:0e:23:d4:30:15:31:1d:1d:e7:a8:6a:41:71:
49:34:9f:09:aa:65:90:fd:2b:06:e8:38:9f:99:94:
2a:19:32:51:d8:79:9a:3e:db:10:84:17:dc:b0:be:
f4:2c:66:2b:66:d1:a0:a2:9a:87:11:d8:27:87:5c:
2c:31:8d:6b:7f:3e:64:33:9f:7b:83:d6:de:e6:c3:
c1:e0:ee:8f:e1:f6:94:9b:b9:f5:c1:bf:27:e0:7b:
a1:e7:25:8d:48:80:4f:40:69:33:14:ba:68:d1:a8:
b3:08:f8:6d:95:33:9d:97:2a:d5:35:f3:9d:ad:98:
6e:40:5e:18:75:c1:bc:ee:39:54:e8:01:17:81:d9:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:6B:F3:40:D7:33:6D:9C:33:9F:71:B9:8E:53:C4:86:94:28:89
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/sl1r80DXM22cM59xuY5TxIaUKIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.172.0-95.155.174.255
Signature Algorithm: sha256WithRSAEncryption
32:32:9b:3e:62:07:ef:d8:ca:08:52:16:f8:81:e5:77:ba:7a:
6b:1f:57:dc:d1:02:2a:3c:09:75:bd:9a:57:a4:df:60:14:47:
f4:5e:39:a6:2f:76:9a:1b:1c:f7:42:82:3f:52:78:47:f4:be:
24:15:44:89:de:46:5f:01:13:33:04:40:c0:b7:47:d3:bf:f7:
24:3d:84:1e:7f:58:62:c1:21:3c:59:15:50:33:45:b8:c4:01:
03:db:72:de:fc:7d:d8:c2:00:50:14:ad:79:ec:c3:8e:dc:b5:
51:1a:56:44:1a:31:dd:d7:ea:fe:14:1b:19:ec:74:9e:3a:5d:
a3:69:4a:93:20:d1:1a:bc:1f:32:49:91:36:ed:ac:33:a9:a1:
31:ae:c2:7a:4b:ea:2a:d7:50:88:16:31:1e:f1:de:ff:a2:60:
5f:a9:ce:f8:5b:9b:de:92:38:b9:fc:ab:c9:a3:63:ec:21:a3:
cd:c0:b0:ef:67:9a:59:bd:93:c2:2e:8a:38:52:7e:28:6f:18:
19:18:91:c5:31:69:fd:be:4d:90:4f:1f:72:7a:98:e5:e1:75:
54:10:4c:ea:b6:19:84:78:b3:13:6f:d5:56:06:46:ef:87:f7:
35:a2:83:54:fe:7b:b1:1a:b3:19:b3:5e:89:9e:98:c8:0a:0f:
b5:a0:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:56 2026 by rpki-client