Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JKIHwL24wYeRbIQkMf1HZ6STLiI.roa
File: JKIHwL24wYeRbIQkMf1HZ6STLiI.roa (raw, json)
Hash identifier: sDMrJ8+x30BMRZ/quC856/uc/e00xr9A8ozSxWzFDVw=
Subject key identifier: 24:A2:07:C0:BD:B8:C1:87:91:6C:84:24:31:FD:47:67:A4:93:2E:22
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D9A54798C6B7F4B4AF4D7C18560F7AEEF
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JKIHwL24wYeRbIQkMf1HZ6STLiI.roa
Signing time: Fri 17 Apr 2026 07:25:20 +0000
ROA not before: Fri 17 Apr 2026 07:25:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55177
IP address blocks: 95.155.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:54:79:8c:6b:7f:4b:4a:f4:d7:c1:85:60:f7:ae:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Apr 17 07:25:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24a207c0bdb8c187916c842431fd4767a4932e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:5a:dc:da:71:46:62:c3:34:51:7c:5b:f1:
9e:ee:cb:c0:13:02:08:93:1f:9a:60:e5:57:29:4c:
6a:c9:01:49:6a:95:32:69:22:91:a2:d0:b7:bb:00:
57:b1:5b:4d:03:1b:66:e5:6f:13:83:1b:73:3d:1c:
29:aa:19:4b:88:50:a1:8f:f7:51:b6:61:39:3e:f1:
22:b6:42:ca:35:cf:99:4c:21:43:76:44:83:b3:d8:
18:d8:f4:38:e1:ba:86:f6:61:ad:9f:b7:24:f9:65:
b3:2a:9e:d9:a4:f8:4b:b8:bb:ae:89:9e:8e:88:62:
4d:06:98:d7:88:83:a9:66:a4:36:42:17:4a:89:ac:
80:09:9e:3c:54:53:91:47:f1:8a:32:eb:ef:a1:55:
f4:d6:47:bb:1c:20:81:a3:09:25:0b:21:d7:c2:c7:
d6:f9:0c:78:09:12:d7:78:7c:0a:15:7a:f4:21:1f:
68:14:db:39:d1:17:77:c5:c3:27:a4:d2:2a:9d:1b:
df:a3:cd:90:a4:ef:3d:46:36:66:16:35:73:e7:04:
9b:72:c1:83:e3:b0:fa:6f:e3:f2:91:dc:50:1e:a0:
aa:d4:c1:04:04:0d:39:7f:59:9d:24:8d:84:3b:09:
68:b1:31:07:c2:97:c2:99:e5:b6:d8:92:4e:85:70:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:07:C0:BD:B8:C1:87:91:6C:84:24:31:FD:47:67:A4:93:2E:22
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JKIHwL24wYeRbIQkMf1HZ6STLiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.153.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d5:64:0c:5b:71:cf:d3:f9:a6:59:52:ec:e7:87:38:d6:81:
66:b3:44:6d:d3:74:37:a1:d6:47:b8:4e:58:64:ed:c5:f9:c7:
b3:6a:c9:70:e5:7e:81:98:46:cb:3e:9e:99:37:40:7c:2f:b9:
d7:1d:fb:4c:00:00:fc:14:73:c4:36:fd:51:c7:66:57:7e:7c:
b4:ac:a1:bb:dc:c7:3f:c8:18:c2:9f:4c:16:51:c1:32:de:44:
d4:97:19:5b:bd:9c:e8:74:a2:d8:c4:2f:6b:cc:ba:12:aa:b2:
6a:8e:a0:9d:02:cf:ec:6b:e9:19:5f:5f:dc:3b:32:76:e7:83:
90:08:b3:ef:55:57:83:a8:56:bc:c3:77:3d:80:9f:24:06:a8:
87:4b:cd:db:a9:44:01:9d:a7:85:bf:6d:90:dd:35:dc:fc:a6:
f7:c2:a0:c0:ec:7c:ed:1f:43:ef:e1:a5:ae:a9:b8:e9:9c:16:
b2:c7:64:0f:63:75:08:5e:09:be:5f:4f:39:67:17:99:5f:0f:
2e:1c:7c:bc:2d:de:0f:35:60:c2:32:b0:71:78:24:67:73:83:
3d:46:ab:2c:21:a9:ea:77:91:df:45:0f:38:19:bc:86:f0:78:
b2:ae:09:1f:63:84:02:cd:64:20:e7:49:28:57:76:0b:5d:fe:
47:c9:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:20 2026 by rpki-client