Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zPpg6IVM4o-i4jinuCnEdex0dqQ.roa
File: zPpg6IVM4o-i4jinuCnEdex0dqQ.roa (raw, json)
Hash identifier: uIlAbF8c+38K/x3ETxFNnYAiumMWGn5GI23E2fbm2gg=
Subject key identifier: CC:FA:60:E8:85:4C:E2:8F:A2:E2:38:A7:B8:29:C4:75:EC:74:76:A4
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019FAE5F623346087EB9F75E4499A7678598
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zPpg6IVM4o-i4jinuCnEdex0dqQ.roa
Signing time: Wed 29 Jul 2026 14:55:14 +0000
ROA not before: Wed 29 Jul 2026 14:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 95.155.138.0/24 maxlen: 24
95.155.141.0/24 maxlen: 24
95.155.142.0/24 maxlen: 24
95.155.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:5f:62:33:46:08:7e:b9:f7:5e:44:99:a7:67:85:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 29 14:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccfa60e8854ce28fa2e238a7b829c475ec7476a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:f2:76:ca:2f:34:04:32:3c:8d:01:84:41:
55:ff:7f:e4:b6:1e:bc:49:ef:8c:f7:e4:1f:13:c2:
ba:6a:a3:78:d2:af:e6:fd:71:b7:39:5d:de:a2:4e:
a5:e5:9e:b4:95:55:07:a1:a8:1f:bb:37:0e:f8:4e:
5e:da:66:bd:a7:2b:05:7a:43:8d:6d:0d:7e:cc:ee:
13:d0:95:f3:7e:97:bb:e2:26:6c:a2:c4:ff:fd:b4:
b8:2a:17:69:c2:14:bf:a4:89:9f:5f:23:44:e2:6d:
75:06:63:8b:83:e3:20:0b:57:8b:f5:16:0c:ed:89:
68:da:c7:fe:f5:85:df:32:07:40:9b:b9:b9:00:19:
33:2f:42:45:41:8d:fe:d2:f9:10:8f:4e:82:9d:86:
38:eb:f8:5c:9d:73:ae:2e:40:26:e1:ce:55:62:a1:
2e:20:c4:c5:a3:e3:88:15:8e:98:1f:3c:71:ba:af:
1c:90:3d:98:32:7f:49:d8:36:ef:f8:84:80:a7:8c:
09:8a:a3:de:c0:3e:fa:72:80:72:27:ec:be:19:38:
a3:cc:5c:55:1f:c3:36:45:6d:9a:99:0d:f3:2b:c9:
3a:9f:32:be:ae:3e:8d:8f:f1:bd:cb:40:bc:e8:49:
6b:56:76:67:8a:f7:47:da:f9:f4:00:15:a9:60:07:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:60:E8:85:4C:E2:8F:A2:E2:38:A7:B8:29:C4:75:EC:74:76:A4
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zPpg6IVM4o-i4jinuCnEdex0dqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.138.0/24
95.155.141.0-95.155.143.255
Signature Algorithm: sha256WithRSAEncryption
05:9a:56:fb:25:9d:b5:ab:45:21:b6:66:70:03:34:3d:e5:d0:
26:66:59:5f:a3:ac:82:02:67:e9:d1:45:92:fd:84:96:c1:04:
bb:e6:e4:13:0b:ee:5c:4e:24:6c:cf:df:9a:e4:85:f6:21:fa:
5a:2d:45:f6:e7:47:4b:72:bb:d4:dc:20:9c:44:dd:86:2d:b9:
48:31:42:4c:1b:5b:fb:44:05:44:3d:d1:8a:64:f9:5a:1d:b8:
6d:d2:06:dd:c0:2a:58:44:da:32:67:97:19:d4:2a:8d:2d:f7:
76:b5:38:e5:70:84:8b:74:0d:e1:8d:e4:21:8d:e8:be:c6:4e:
36:12:1e:dc:11:38:08:96:90:81:1f:ab:97:53:c5:28:53:0e:
b3:d4:3e:95:2e:cf:45:fc:78:aa:1d:72:fc:8d:95:6e:8d:88:
6e:d7:73:8d:9a:81:fb:4a:c9:35:f9:4d:f1:d9:1f:43:f1:25:
2c:ef:85:30:60:8f:b5:2b:fb:dd:f0:f1:d1:90:e5:ee:5b:24:
bb:7c:4d:0a:b3:3f:65:75:91:c9:f7:83:88:39:c0:5a:72:08:
18:9a:95:a7:55:5b:3a:b6:56:e7:be:ea:22:72:ac:bc:7f:ca:
51:3b:d7:d9:0e:b9:a8:1d:cd:e1:06:6d:20:18:fb:7e:b7:63:
f2:19:92:a0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ+uX2IzRgh+ufdeRJmnZ4WYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwNzI5MTQ1NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2ZhNjBlODg1NGNlMjhmYTJlMjM4YTdiODI5YzQ3NWVjNzQ3NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgbydsovNAQyPI0BhEFV/3/kth68
Se+M9+QfE8K6aqN40q/m/XG3OV3eok6l5Z60lVUHoagfuzcO+E5e2ma9pysFekON
bQ1+zO4T0JXzfpe74iZsosT//bS4KhdpwhS/pImfXyNE4m11BmOLg+MgC1eL9RYM
7Ylo2sf+9YXfMgdAm7m5ABkzL0JFQY3+0vkQj06CnYY46/hcnXOuLkAm4c5VYqEu
IMTFo+OIFY6YHzxxuq8ckD2YMn9J2Dbv+ISAp4wJiqPewD76coByJ+y+GTijzFxV
H8M2RW2amQ3zK8k6nzK+rj6Nj/G9y0C86ElrVnZnivdH2vn0ABWpYAdWzwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMz6YOiFTOKPouI4p7gpxHXsdHakMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvelBwZzZJVk00by1pNGppbnVDbkVkZXgwZHFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAX5uKMAwD
BABfm40DBARfm4AwDQYJKoZIhvcNAQELBQADggEBAAWaVvslnbWrRSG2ZnADND3l
0CZmWV+jrIICZ+nRRZL9hJbBBLvm5BML7lxOJGzP35rkhfYh+lotRfbnR0tyu9Tc
IJxE3YYtuUgxQkwbW/tEBUQ90Ypk+VoduG3SBt3AKlhE2jJnlxnUKo0t93a1OOVw
hIt0DeGN5CGN6L7GTjYSHtwROAiWkIEfq5dTxShTDrPUPpUuz0X8eKodcvyNlW6N
iG7Xc42agftKyTX5TfHZH0PxJSzvhTBgj7Ur+93w8dGQ5e5bJLt8TQqzP2V1kcn3
g4g5wFpyCBialadVWzq2Vue+6iJyrLx/ylE719kOuagdzeEGbSAY+363Y/IZkqA=
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:47 2026 by rpki-client