Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/MDrt79mC6kMu5R27ERe_p3PXA7g.roa
File: MDrt79mC6kMu5R27ERe_p3PXA7g.roa (raw, json)
Hash identifier: Y6CbpK/IdrhzJrPxsU/2B/u64jcq8RAQZg4LE13g3AA=
Subject key identifier: 30:3A:ED:EF:D9:82:EA:43:2E:E5:1D:BB:11:17:BF:A7:73:D7:03:B8
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0E1BDE9AE45FF1C1B36AF6F1B3B5628D4
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/MDrt79mC6kMu5R27ERe_p3PXA7g.roa
Signing time: Sun 27 Sep 2026 07:21:54 +0000
ROA not before: Sun 27 Sep 2026 07:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 95.155.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:bd:e9:ae:45:ff:1c:1b:36:af:6f:1b:3b:56:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 27 07:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=303aedefd982ea432ee51dbb1117bfa773d703b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:10:2e:a0:96:c8:b7:9d:35:1e:de:d2:94:
70:98:02:c9:04:d0:e3:cf:16:38:90:d1:ff:16:f5:
b9:90:0f:d6:66:71:a4:39:13:68:17:cc:8b:a2:bd:
f1:89:ab:c5:9f:1a:55:c4:a2:24:1c:f9:a0:29:35:
ba:4a:fc:a7:bd:99:6a:e6:b2:2b:2e:69:51:e7:0f:
92:b8:7f:e3:12:94:9a:c2:ad:ae:11:ac:75:95:ae:
ef:f8:54:74:fc:9c:f5:8b:02:3a:98:a8:69:43:92:
fb:67:4f:ea:d8:23:70:de:90:24:42:64:47:b0:5f:
37:0e:f6:e0:3e:53:d5:eb:7b:bd:44:8d:69:d1:3f:
b3:9d:3b:22:b9:50:62:09:86:a7:b4:b8:09:5e:b7:
88:5f:d3:97:11:4f:12:9f:78:49:3a:b0:59:2a:9e:
3e:9d:5a:84:f4:fb:7b:12:90:ab:be:62:38:52:a3:
81:0a:6d:a3:79:1f:9a:ef:ec:cd:39:46:2e:23:15:
2f:97:be:06:87:1a:1d:ac:5d:c2:af:88:39:4f:33:
b8:27:f2:ee:fd:b3:95:6f:40:e4:39:63:7a:2a:0e:
2e:47:63:aa:fb:44:2c:ee:15:a4:2e:6c:f7:a2:8c:
d1:f6:58:d8:88:0c:88:c4:21:34:be:db:c7:c5:13:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3A:ED:EF:D9:82:EA:43:2E:E5:1D:BB:11:17:BF:A7:73:D7:03:B8
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/MDrt79mC6kMu5R27ERe_p3PXA7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.135.0/24
Signature Algorithm: sha256WithRSAEncryption
59:af:21:03:ac:e9:7b:64:6b:a5:fe:3b:2f:99:f3:8d:8d:af:
0a:e8:98:08:98:d0:f4:46:c2:75:4b:62:72:bc:f1:df:ea:32:
5e:8b:e0:6f:38:b7:90:22:4c:b6:90:e0:2d:a4:7d:5e:6e:db:
ba:11:c9:b8:4f:f9:eb:35:f3:4d:be:af:e8:f7:94:1a:9c:e1:
cd:db:b8:4e:ca:eb:c8:ae:3f:11:ae:4d:31:d2:65:a3:25:a1:
02:88:d2:5b:53:84:cf:f0:21:ec:5f:35:c4:41:d7:37:d5:90:
5e:b0:4f:26:4d:5e:d7:a5:c3:ec:de:ad:5d:fc:33:ff:e9:15:
28:e9:87:69:d1:fb:bb:49:ec:31:db:e6:dc:be:be:f5:30:f1:
fb:60:f1:0d:4d:9a:fd:71:e5:e7:a0:4c:1c:13:9a:b7:df:b1:
93:90:17:58:29:89:70:3e:30:0a:a6:24:e2:7a:99:0c:5d:ad:
a2:7c:26:37:37:0f:fb:33:ad:60:bf:c1:e7:c0:02:b7:3f:b6:
6c:21:b1:b2:57:68:e2:31:a7:31:78:27:3f:2f:0d:19:e3:7a:
ec:8e:6e:3f:ee:a7:87:ec:b4:40:e6:3f:6f:2d:19:75:ee:63:
5b:fc:f7:56:35:4c:d8:5f:de:ab:53:b0:56:cf:36:28:9a:39:
c1:ae:1a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:13:36 2026 by rpki-client