Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/IQugLkmDTYD9u_WH9tCCumwQmBA.roa
File: IQugLkmDTYD9u_WH9tCCumwQmBA.roa (raw, json)
Hash identifier: QMUguI7DpxWzcD9mynZtBw9X+EUJdVDnjDiCcMj6Ijk=
Subject key identifier: 21:0B:A0:2E:49:83:4D:80:FD:BB:F5:87:F6:D0:82:BA:6C:10:98:10
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D766BA91DFF925DE6E9079FE5BCCC265C
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/IQugLkmDTYD9u_WH9tCCumwQmBA.roa
Signing time: Fri 10 Apr 2026 08:04:20 +0000
ROA not before: Fri 10 Apr 2026 08:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401861
IP address blocks: 95.155.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:6b:a9:1d:ff:92:5d:e6:e9:07:9f:e5:bc:cc:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Apr 10 08:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=210ba02e49834d80fdbbf587f6d082ba6c109810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:54:18:4d:2e:51:f4:f7:fe:8f:ab:46:d4:
f7:d4:73:23:c0:7f:9d:d1:d8:00:a1:6b:af:46:c2:
69:24:56:5e:58:ec:98:e5:0a:f1:9e:09:e4:05:52:
73:9b:59:8e:f0:f2:6d:d1:44:ae:85:cb:d3:e0:6c:
d0:4e:ec:4b:f3:c4:68:14:50:ac:16:d9:67:03:ad:
27:d1:cc:41:f2:65:e2:2f:e3:30:99:cb:e2:29:79:
26:f7:4b:3c:45:22:87:d1:2e:a9:70:bb:12:d9:8f:
a6:da:84:d2:2f:51:7c:6a:9e:1c:5d:95:1c:ee:35:
c8:de:cb:4b:54:2c:bb:9c:ac:93:c0:ad:8c:10:58:
a7:68:d6:aa:cf:14:05:4a:2b:be:15:c6:a7:8b:31:
89:f8:72:6c:0c:df:b8:f5:7f:43:a6:f7:2d:68:3b:
9a:25:77:e8:fc:47:5f:b3:75:46:90:50:dc:f2:15:
13:c0:4b:2f:22:51:70:47:a9:72:4f:ed:d0:4c:04:
33:a1:6b:57:79:08:a1:be:6f:60:95:eb:55:e5:dc:
58:b4:1f:66:ed:9d:9c:bb:a2:6b:ed:b0:34:89:a4:
08:47:68:bc:2e:d7:d9:0d:04:b1:ad:a2:6f:22:c3:
6d:db:f9:1d:b2:76:e6:e9:d1:ff:ce:03:34:7b:c7:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:A0:2E:49:83:4D:80:FD:BB:F5:87:F6:D0:82:BA:6C:10:98:10
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/IQugLkmDTYD9u_WH9tCCumwQmBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.150.0/24
Signature Algorithm: sha256WithRSAEncryption
50:35:9c:b8:f5:d2:ca:9c:3a:3a:76:26:bc:35:05:8d:56:ce:
2d:bc:49:22:1c:fc:74:91:95:8a:ea:07:0a:be:60:29:ca:1f:
d1:26:c8:60:5a:f7:13:22:97:56:99:c7:18:9f:84:96:96:ff:
f6:e8:6e:b3:fd:23:d9:bf:79:59:20:13:53:8d:29:e6:4b:e8:
1a:6d:58:20:61:c3:54:e0:32:15:a5:9f:1d:92:cc:28:ca:64:
85:5d:7c:e8:fc:33:43:32:a2:f2:c6:12:69:e3:63:67:4e:73:
0c:1a:02:a6:2f:fd:88:7f:bc:b6:d1:cc:8d:b2:c7:e0:82:69:
45:39:5e:35:f7:18:64:50:f5:fa:89:a4:7c:44:6f:bd:25:05:
e7:ed:e6:3e:c8:97:5f:79:44:ec:ac:73:85:19:20:7e:87:43:
35:4a:3e:14:5f:99:43:46:f3:57:87:63:f4:f6:e8:5b:68:cf:
80:23:94:3f:7c:63:3f:49:5e:11:6d:86:49:2d:bb:78:bf:cd:
9f:3d:71:b2:d8:a8:d2:c5:ea:2d:db:66:b3:eb:36:d5:e3:db:
f4:d9:35:ae:ac:f2:35:1d:59:55:4b:90:28:af:15:13:fa:89:
ee:04:c0:0c:c1:11:48:6f:f0:da:35:c6:31:91:9f:d8:50:c0:
1f:5c:f3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:57 2026 by rpki-client