Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zcCkaZO2hLKX8jn-cXXAh2MQSJw.roa
File: zcCkaZO2hLKX8jn-cXXAh2MQSJw.roa (raw, json)
Hash identifier: FJRRXEP4SGsNE6WRV2LJdb71Hv58RCNgwehrV/Zb38M=
Subject key identifier: CD:C0:A4:69:93:B6:84:B2:97:F2:39:FE:71:75:C0:87:63:10:48:9C
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A047A41BA9452D4F6E1D4FAE69C09978ED
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zcCkaZO2hLKX8jn-cXXAh2MQSJw.roa
Signing time: Fri 28 Aug 2026 09:12:12 +0000
ROA not before: Fri 28 Aug 2026 09:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 95.155.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:a4:1b:a9:45:2d:4f:6e:1d:4f:ae:69:c0:99:78:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 28 09:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdc0a46993b684b297f239fe7175c0876310489c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:bf:9c:b8:2a:52:e9:44:10:35:88:91:43:
aa:0f:73:e3:c6:76:09:54:a5:b2:63:6a:11:34:26:
bc:11:5a:6a:f1:17:fe:04:70:6e:ef:da:24:e9:20:
dd:4a:04:29:fc:c3:6a:17:5f:26:ae:56:42:63:28:
99:5d:e0:79:48:0e:99:f2:91:13:a2:21:04:bb:ac:
c4:4b:71:44:59:b5:7a:74:3b:60:77:c7:a3:ab:17:
f7:9a:3d:d2:9a:6d:79:49:71:a6:66:52:71:89:5d:
0e:bd:7e:d3:51:68:26:09:94:c4:5c:71:47:76:24:
fa:70:9d:d6:2b:e4:f4:87:44:42:16:44:72:7a:96:
a0:08:54:e6:3e:20:c3:8d:dc:53:a4:76:98:8d:de:
0c:62:6b:2d:b4:31:05:00:05:13:8f:01:af:96:d5:
02:9b:62:e9:6c:29:2d:52:57:37:b9:82:10:58:bd:
1b:55:e5:ad:b7:77:85:ff:58:55:ff:fc:ec:7a:d9:
10:41:8e:1f:ff:2d:15:0d:43:6b:a5:1a:0c:4e:a2:
5c:4e:72:0f:9f:8c:b0:3a:2f:bd:e4:b2:d4:fa:31:
24:50:e5:82:c7:83:c8:1d:83:dd:87:28:df:8d:10:
28:61:a7:d9:53:54:a7:ea:90:27:47:7b:29:21:f1:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C0:A4:69:93:B6:84:B2:97:F2:39:FE:71:75:C0:87:63:10:48:9C
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zcCkaZO2hLKX8jn-cXXAh2MQSJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.149.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4d:7a:67:32:ac:4a:1e:73:d8:11:22:6d:5f:27:53:b7:ca:
15:70:8d:ac:2c:26:28:dd:1e:eb:b8:df:d1:b1:42:cb:27:5b:
ef:b3:3b:38:ac:98:c5:e6:a8:8f:a8:18:bc:1f:fd:6e:5c:01:
cf:eb:4c:58:c6:09:80:ed:0f:f4:5d:bf:64:28:dd:11:31:55:
66:2c:eb:e4:b7:c2:47:08:d8:8d:7f:1f:ca:a4:64:d6:fe:64:
49:03:89:f6:02:ac:02:a0:c6:b0:91:b2:34:cb:0d:78:55:9e:
d4:d2:38:f5:55:11:3e:de:5f:69:da:ac:36:4f:9a:db:7e:ad:
a9:f8:f9:b3:d5:b5:5c:14:56:b1:18:65:c2:a9:17:7f:8c:4c:
bd:66:e1:39:88:4d:0f:c8:fc:24:ab:94:17:d1:fc:7d:38:d7:
d8:0b:17:0d:dc:47:e7:b8:8c:f8:1c:5d:18:d8:25:cd:35:ae:
3e:48:69:1b:f1:40:4c:0d:c4:7f:fc:1e:a1:04:43:84:7b:fa:
93:f2:58:17:88:f5:ac:fb:9b:1d:c7:f1:c4:d3:92:5a:93:db:
56:7d:6f:f0:09:42:c5:ea:a9:b8:fd:a0:c2:41:ae:74:7a:cc:
44:b5:d0:89:ab:06:b1:12:fe:99:16:75:e2:af:ec:8e:43:18:
70:0e:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:41 2026 by rpki-client