Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zAc0y9f47MhF7tmtrfVqaAD-nlg.roa
File: zAc0y9f47MhF7tmtrfVqaAD-nlg.roa (raw, json)
Hash identifier: iBJqOiR1P3Y+3+FsFM/Tj/uBiIpz68n/JO7l/j8Ihrk=
Subject key identifier: CC:07:34:CB:D7:F8:EC:C8:45:EE:D9:AD:AD:F5:6A:68:00:FE:9E:58
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A1083D807888D2EB53C4000A745AF377DD
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zAc0y9f47MhF7tmtrfVqaAD-nlg.roa
Signing time: Sun 04 Oct 2026 18:46:50 +0000
ROA not before: Sun 04 Oct 2026 18:46:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 95.155.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:3d:80:78:88:d2:eb:53:c4:00:0a:74:5a:f3:77:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 4 18:46:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc0734cbd7f8ecc845eed9adadf56a6800fe9e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ae:4b:84:60:0a:bd:98:4b:01:7e:ea:e9:21:
cb:9a:71:2d:d0:3e:68:e2:33:4a:f0:10:8f:b9:1b:
a8:72:e1:4e:79:a9:3d:dd:0f:34:6e:89:2a:40:90:
1e:c6:4d:a1:33:b2:88:f7:08:52:6c:2d:7e:6f:71:
bf:0f:d1:92:42:92:c0:a0:ea:78:5d:35:1e:14:0b:
72:d7:17:84:46:13:04:71:74:99:25:ed:90:f7:81:
a4:ac:ef:b6:c4:a2:48:b2:aa:32:94:47:ef:0b:41:
c1:07:1d:e6:e2:5d:d9:b9:e6:c1:4a:79:8b:13:2e:
18:dc:3d:15:00:77:1d:26:dc:cd:d4:56:46:49:06:
1b:d3:b1:9d:d5:1e:4f:c8:5f:dc:81:9a:e0:5e:8e:
fc:20:38:2b:2b:c2:92:9b:1d:93:84:4d:ea:43:88:
53:b6:22:6a:84:b7:76:a7:c1:9a:ce:20:cd:b1:77:
1e:de:97:2e:53:5d:25:3d:0f:94:5b:ea:d1:02:8c:
bc:bf:50:72:d9:68:44:1e:19:63:eb:30:f4:c7:a7:
dd:7c:14:72:78:19:93:1d:34:3e:9a:d1:db:c8:e7:
f8:f2:fd:33:98:bf:f0:7c:b0:23:2e:2d:35:d9:19:
ea:1d:84:09:6f:25:ac:57:8a:e1:1c:e3:68:10:f9:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:34:CB:D7:F8:EC:C8:45:EE:D9:AD:AD:F5:6A:68:00:FE:9E:58
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zAc0y9f47MhF7tmtrfVqaAD-nlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.152.0/24
Signature Algorithm: sha256WithRSAEncryption
64:13:71:8f:42:eb:5b:1f:6f:de:de:31:1e:2e:72:36:4a:6e:
d4:1c:0b:1c:af:59:7f:b9:16:df:ba:7e:5a:3c:4d:2d:c3:5c:
88:9f:c4:12:14:57:60:34:27:f7:44:61:42:26:ef:22:92:f8:
ac:03:8b:d4:36:39:0c:a1:1a:22:a0:ba:a3:e2:af:33:1f:27:
dd:c2:da:73:29:4b:f9:ce:76:a4:78:e6:7a:62:ad:8c:d7:e7:
c1:12:da:ea:75:d6:60:c1:66:66:8e:0c:ff:ed:65:d3:43:50:
a8:bf:87:fd:64:1d:95:30:3a:2e:c4:84:f9:95:64:7c:8f:3c:
3a:be:b2:e1:b7:f7:99:1a:86:3d:53:4a:72:b6:b4:2c:b2:46:
4c:26:25:a1:5c:3a:cf:09:82:0f:44:30:12:bc:f8:4d:d7:a3:
57:1d:d8:85:8e:3e:74:3c:d1:86:cd:20:5e:23:d2:14:0c:bd:
5d:15:94:01:4b:7e:05:66:de:7b:8c:ad:fa:ec:38:62:a5:d9:
52:c4:05:73:6e:2c:2c:81:1b:be:01:c1:58:78:b4:d7:98:90:
80:19:6c:3a:68:3a:ed:a1:ec:93:42:2a:65:9f:e5:0f:45:c4:
29:0b:21:12:f2:78:2d:21:b7:79:a1:ca:91:9d:69:74:e1:16:
64:52:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:09:39 2026 by rpki-client