Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/D-wN2Cho3G-R7OigNQ7WXddJiSQ.roa
File: D-wN2Cho3G-R7OigNQ7WXddJiSQ.roa (raw, json)
Hash identifier: elIU6H6cKWopjbQ/YhoI51hjuDqclSXEHw33HVdNsi0=
Subject key identifier: 0F:EC:0D:D8:28:68:DC:6F:91:EC:E8:A0:35:0E:D6:5D:D7:49:89:24
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019EA6273DE2BE19B72F3C115F2E4DF4D98A
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/D-wN2Cho3G-R7OigNQ7WXddJiSQ.roa
Signing time: Mon 08 Jun 2026 07:34:10 +0000
ROA not before: Mon 08 Jun 2026 07:34:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 95.155.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:27:3d:e2:be:19:b7:2f:3c:11:5f:2e:4d:f4:d9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jun 8 07:34:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fec0dd82868dc6f91ece8a0350ed65dd7498924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:eb:f6:c5:ab:07:a3:e8:51:20:33:b5:9b:
17:98:46:d3:f8:20:ea:d1:ae:fe:01:c5:3d:cf:d3:
f4:0f:5e:c7:cc:a0:67:5f:be:77:63:37:97:4a:b0:
d2:ac:f3:0c:5d:8c:96:f1:7f:d8:1c:ef:5b:49:4d:
f0:41:31:a5:bb:bd:a5:bf:3e:33:d5:dc:0b:41:b9:
c7:a2:3c:9a:de:4b:ea:de:93:de:e0:3e:4c:19:d9:
d5:41:fd:57:1e:d5:2d:09:c5:73:10:6c:c7:2d:e9:
35:52:75:98:27:ef:33:74:b8:1c:b7:cf:e4:a3:7e:
44:96:c7:fa:9f:b9:74:2f:cc:2a:a0:37:52:fe:a1:
0b:0d:f6:fb:23:3e:fd:aa:31:cd:c4:98:2f:06:5a:
7e:7e:50:4d:07:18:cd:69:11:00:5a:5b:30:49:c3:
72:60:bb:89:57:68:cb:59:da:0d:db:44:cb:72:f7:
39:e6:b1:7e:7b:f8:14:28:c4:25:b3:6c:6c:e1:7d:
30:c5:eb:1e:ef:0a:34:34:e5:ce:da:68:c3:73:bd:
e6:e1:d9:f4:0c:41:2e:ec:8e:4e:9d:b1:81:65:23:
77:0a:f1:7e:fc:a9:35:a6:4f:f0:3d:87:fc:1d:bf:
e2:f4:04:82:ef:e2:dc:74:0c:18:c2:2d:aa:05:ea:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:0D:D8:28:68:DC:6F:91:EC:E8:A0:35:0E:D6:5D:D7:49:89:24
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/D-wN2Cho3G-R7OigNQ7WXddJiSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b4:8b:89:6c:e1:f5:df:fc:95:e5:a0:f4:f5:0f:eb:d2:4a:
77:e7:13:ec:b4:9d:76:50:21:99:d7:a5:80:ad:d0:7e:6b:ea:
55:a2:40:19:a7:ac:c1:71:89:2e:ee:01:03:bc:0c:78:05:47:
e7:10:68:84:5a:69:a4:d5:08:94:5d:ac:67:da:94:d3:32:d5:
3e:b7:f4:ed:44:ad:8f:e8:88:f2:a0:44:d9:a3:fa:9b:0f:c9:
ce:01:20:b9:32:ad:75:55:0d:69:c2:04:49:0a:00:c0:ce:e6:
cb:19:9c:f5:e6:c1:e7:a0:f4:70:08:d7:c7:aa:76:cc:9d:c9:
da:b0:8a:c7:9f:d4:09:f5:ae:eb:79:6a:c0:08:3d:89:a9:21:
1a:c0:93:12:cb:0d:ff:29:1b:79:09:4a:8a:e1:0b:02:78:ff:
1e:d9:54:7c:81:26:1b:02:7a:a0:a4:6e:25:a6:8f:4e:58:72:
be:62:5c:de:71:1b:52:62:43:f9:53:b1:38:76:7b:12:3c:a0:
5f:e3:bb:02:7b:7e:6d:f9:47:7a:a2:f5:8c:b3:b6:55:0e:8d:
e2:3c:d9:be:0f:55:5d:45:1a:e1:24:4d:16:5d:b1:ee:cd:c8:
f9:37:92:aa:e1:56:cf:6d:60:a9:34:52:70:26:59:4b:0c:ee:
40:31:78:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:27:35 2026 by rpki-client