Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/4duEOMbFmxLAatp657l6KVNH0sc.roa
File: 4duEOMbFmxLAatp657l6KVNH0sc.roa (raw, json)
Hash identifier: KpntCphFZRam9AAKmk1MT/8FkV1brKKEi6JtZQR76bI=
Subject key identifier: E1:DB:84:38:C6:C5:9B:12:C0:6A:DA:7A:E7:B9:7A:29:53:47:D2:C7
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019A4A8C0AA4C89518894473861A5CEC8165
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/4duEOMbFmxLAatp657l6KVNH0sc.roa
Signing time: Mon 03 Nov 2025 16:28:03 +0000
ROA not before: Mon 03 Nov 2025 16:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 95.155.133.0/24 maxlen: 24
95.155.134.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
152.89.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:8c:0a:a4:c8:95:18:89:44:73:86:1a:5c:ec:81:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Nov 3 16:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1db8438c6c59b12c06ada7ae7b97a295347d2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0f:9c:48:0e:68:29:19:b9:f7:09:d5:f9:08:
13:5b:9b:2a:89:22:1b:24:f8:43:9a:46:65:09:ca:
c3:00:55:1c:57:5b:38:8e:f2:a4:07:d7:6e:0c:9b:
1f:64:ca:f2:6b:ae:4c:97:6e:1b:48:15:ac:04:f9:
f2:cd:61:fd:f9:f5:a7:7f:6c:32:44:c9:28:01:2a:
f1:87:f6:6d:ee:7c:88:29:82:64:82:4b:2c:a0:68:
5f:0d:be:fd:81:ea:1b:8b:24:bc:38:c4:d5:2b:86:
95:28:4f:bb:bc:42:20:06:3d:de:37:aa:d7:68:63:
88:8d:14:23:0c:44:26:82:c8:41:8d:12:4f:4e:a4:
01:2e:5a:8d:0a:e4:40:ae:26:bd:9a:42:78:0e:7d:
79:ec:b4:80:26:70:ba:e5:08:f8:30:c5:b4:87:6b:
81:7b:71:67:45:cc:48:12:3b:0b:4e:07:15:f2:f7:
50:f2:69:b2:83:bf:bb:34:5f:58:69:c3:39:f1:d6:
51:9d:9c:21:d8:95:17:d1:28:11:f0:00:05:1f:f6:
5a:19:9a:0c:46:6e:a2:3f:b7:f2:38:65:3e:c4:87:
80:73:b3:2a:3f:a5:ee:b9:e6:b6:f9:81:19:4a:5d:
da:c4:32:2b:cf:f9:fa:e5:e3:23:a3:3c:7f:8e:59:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:84:38:C6:C5:9B:12:C0:6A:DA:7A:E7:B9:7A:29:53:47:D2:C7
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/4duEOMbFmxLAatp657l6KVNH0sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.133.0-95.155.134.255
95.155.146.0/23
152.89.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e6:7c:b7:fb:29:97:94:50:80:7a:2b:ac:b0:53:0b:88:27:
f9:49:ad:e5:bd:e5:9f:5b:e6:b2:ab:71:5c:6d:9f:27:71:86:
68:47:16:4b:45:cd:b4:39:19:b9:27:a5:05:a8:bc:ab:cd:a5:
a1:99:10:41:f6:29:a3:f1:59:e2:ec:48:ef:48:d5:42:ae:16:
ed:e3:8a:38:6f:c4:68:79:af:21:69:de:f1:a2:34:ad:c3:cb:
26:34:57:ce:9f:cc:72:de:a9:25:64:22:fd:d1:ae:00:c2:25:
58:61:b1:aa:07:93:77:ae:23:c5:cc:9c:a3:99:ed:32:a2:57:
47:a8:c3:1d:06:78:c2:fa:2b:57:8d:77:71:be:a3:90:bc:03:
d1:0a:ff:0e:3e:61:f2:fb:69:3a:d5:f7:ec:ea:0c:df:0c:e0:
a6:ec:6c:5e:d4:d4:69:f9:60:1b:bd:b3:67:fd:b6:d2:91:35:
34:a5:0a:f6:c2:4a:7e:58:a2:31:b5:df:1c:e8:27:e7:ec:91:
07:b2:58:1b:0c:aa:aa:d2:22:59:75:c3:2e:77:47:c6:d5:a8:
ed:5a:bc:9a:fe:88:4b:e2:7a:6f:90:77:76:ad:7d:2c:b2:18:
e0:83:ed:50:30:70:c9:ca:63:5e:9f:d8:c8:28:5d:56:65:e6:
f1:da:e9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:37:45 2025 by rpki-client