Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5dkqS1kOogdDjOVpwAfLimpJt5w.roa
File: 5dkqS1kOogdDjOVpwAfLimpJt5w.roa (raw, json)
Hash identifier: 4rpahEdjqfHI+J8PiOnxP0jGqurgzE3tQ8tvvK8E+LI=
Subject key identifier: E5:D9:2A:4B:59:0E:A2:07:43:8C:E5:69:C0:07:CB:8A:6A:49:B7:9C
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0808F29A907563C9C085286C2E774132F
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5dkqS1kOogdDjOVpwAfLimpJt5w.roa
Signing time: Tue 08 Sep 2026 10:27:41 +0000
ROA not before: Tue 08 Sep 2026 10:27:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30088
IP address blocks: 95.155.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:8f:29:a9:07:56:3c:9c:08:52:86:c2:e7:74:13:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 8 10:27:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5d92a4b590ea207438ce569c007cb8a6a49b79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:29:ce:e4:90:89:4d:55:6a:cc:1d:dd:5d:
4f:d3:ce:7a:61:3e:2a:05:16:8b:91:9e:be:64:ec:
e2:6d:c8:bb:6b:f5:7f:0d:68:d1:5c:a4:80:30:8e:
62:43:3d:98:e1:8c:00:42:5d:67:61:38:2e:1e:75:
39:a5:59:7d:bd:91:3d:b9:c9:5d:44:9f:37:e9:6e:
b7:8c:f6:d0:11:0f:ab:42:9b:79:9d:ab:3d:a9:59:
c3:9b:29:a6:30:59:2e:cf:bf:55:a9:25:f0:5b:16:
19:60:bb:65:9c:55:2f:e7:92:ae:04:2f:98:3d:19:
ce:32:d5:cd:70:9a:fc:cd:6d:62:d6:c9:df:4f:92:
20:22:f7:fc:b8:b2:fa:31:5b:12:f6:da:f6:8c:cc:
7f:51:66:9a:53:bb:bb:f5:85:db:49:46:cc:9b:19:
f9:8e:8f:3f:71:72:00:b9:46:ce:29:58:91:e0:33:
9c:1f:cd:a5:a9:8f:9f:a9:be:84:62:d1:2f:7b:3e:
42:74:c6:db:24:b3:03:e0:cf:9d:82:01:d4:ed:3d:
39:52:b1:3d:19:f7:fa:dd:f3:55:da:99:87:17:37:
63:51:09:6f:4f:82:6a:89:0e:f9:e3:2d:03:2b:87:
fa:c2:e5:10:d5:c0:89:1d:3e:14:21:db:31:9f:93:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:2A:4B:59:0E:A2:07:43:8C:E5:69:C0:07:CB:8A:6A:49:B7:9C
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5dkqS1kOogdDjOVpwAfLimpJt5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fe:98:2b:2e:b3:05:43:ca:9b:e1:f5:31:87:cb:ed:1c:1d:
76:7a:95:98:7a:90:9a:22:3a:3a:3d:8f:75:8e:39:43:31:98:
7c:3f:f9:1e:90:3b:8d:92:0c:6e:38:02:91:04:47:4d:9d:ac:
53:8c:54:b2:de:70:4a:73:86:09:44:bf:85:62:b9:7e:dc:11:
e9:fc:17:ae:de:8f:20:c7:39:09:3b:d0:b1:91:0b:0f:c3:90:
79:5a:94:0d:9e:f1:c7:c7:62:bd:07:35:f1:38:09:86:9d:74:
13:18:a6:e0:ff:1f:44:a9:5b:9d:73:0d:ee:0a:8a:52:f0:3b:
f6:72:e8:e8:3f:58:68:33:10:ab:75:24:85:87:ed:df:83:87:
b2:e2:5a:00:a7:a2:c9:5c:ce:23:3d:91:0c:44:62:07:ee:d3:
ea:5e:70:65:32:1e:df:b9:e1:39:1c:8d:9a:30:e8:23:ff:17:
63:a5:4b:23:53:3d:86:86:bd:0c:3d:da:ea:2c:ae:91:f2:36:
23:f4:2e:17:56:87:cb:7b:b6:9d:af:0d:21:78:cb:8f:11:8e:
0d:88:e7:65:4f:43:22:b7:c8:0e:1f:c0:70:ba:7f:da:fc:53:
aa:73:74:3e:c9:95:ff:94:8f:9f:35:29:ab:99:fa:5f:0d:04:
94:ed:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:37:07 2026 by rpki-client