Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/mtF7UfulfCEQmT-SEuYgmuFmmWQ.roa
File: mtF7UfulfCEQmT-SEuYgmuFmmWQ.roa (raw, json)
Hash identifier: 5ANJgQCOwSKwEx5D7iuCUBqpavWPoRF9Ues/5qDZT2I=
Subject key identifier: 9A:D1:7B:51:FB:A5:7C:21:10:99:3F:92:12:E6:20:9A:E1:66:99:64
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D4D6127D85B804ED87673341355568421
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/mtF7UfulfCEQmT-SEuYgmuFmmWQ.roa
Signing time: Thu 02 Apr 2026 08:48:26 +0000
ROA not before: Thu 02 Apr 2026 08:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402047
IP address blocks: 95.155.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:61:27:d8:5b:80:4e:d8:76:73:34:13:55:56:84:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Apr 2 08:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ad17b51fba57c2110993f9212e6209ae1669964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:f8:2d:6d:9f:2b:0d:30:e7:2d:e1:60:4e:
71:a7:90:44:e8:61:00:39:87:5a:d6:e5:fc:35:c1:
f2:d9:6f:dd:ed:a7:c2:04:e1:20:63:5e:a9:b7:a6:
cb:50:63:15:54:d0:b3:dc:c3:2c:05:94:e0:9f:9a:
0e:14:43:56:01:71:97:9b:28:15:e2:01:ef:65:87:
5a:1e:47:2d:e0:b9:c4:33:be:2b:14:21:d3:5c:73:
81:50:0b:f3:2d:2d:a2:b0:44:8b:1b:ec:f5:89:77:
d0:a3:90:71:d9:e3:a8:c4:10:3b:8c:be:a8:0b:02:
a3:40:94:97:6b:ef:9f:9f:af:8a:eb:c8:c6:e6:49:
fe:34:d7:0d:ca:2d:b2:e8:70:2a:ca:c1:6d:e4:f7:
91:26:09:e5:73:f4:1d:9b:72:d1:2b:31:b0:72:52:
2b:ab:9a:35:52:2d:11:b8:3d:59:08:0c:2b:a1:8c:
b1:00:8b:e5:8e:32:90:5e:b2:af:09:1a:c6:c9:56:
f9:93:0f:17:ef:d4:3b:2c:1a:2d:c1:fd:0b:22:94:
11:98:2b:12:ba:63:a5:c1:41:7e:41:22:98:1b:d9:
3d:42:7e:56:30:35:40:b2:6d:ad:ca:32:da:10:3c:
fc:fe:da:d9:f6:aa:ac:f7:cc:d5:8b:dd:74:f5:71:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D1:7B:51:FB:A5:7C:21:10:99:3F:92:12:E6:20:9A:E1:66:99:64
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/mtF7UfulfCEQmT-SEuYgmuFmmWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:79:ce:17:14:ca:22:23:d9:5d:7f:38:14:a8:11:da:88:82:
23:2c:a5:73:83:c8:41:7a:5b:78:a0:8d:e1:98:b3:4b:b4:c7:
b2:f2:cf:3b:14:9c:23:fe:a4:a1:fa:f8:e8:7d:cb:43:4a:34:
0c:02:05:48:56:89:f6:f6:93:54:76:d8:e0:d1:a4:0a:a8:ac:
4c:53:1e:00:87:c2:21:4b:09:24:7d:b3:26:96:97:a7:98:f6:
d7:cd:bf:aa:dd:31:ca:07:72:3d:37:75:99:0d:f2:5e:13:91:
8a:e0:f8:53:b0:a0:98:48:c6:11:73:0c:f9:07:9c:7b:c5:b0:
b6:c4:3a:cf:72:83:7a:29:e3:2d:6f:6e:3a:25:22:e5:c2:9b:
e5:37:bd:e2:a9:65:1d:a5:d1:3a:98:25:dd:8c:f2:02:c4:4c:
5f:c1:4f:64:35:8e:2e:8a:4e:f8:47:c1:87:ec:22:64:af:3a:
e5:32:51:93:a9:5a:38:ea:f6:dc:6c:da:cf:ee:6f:aa:15:27:
75:79:ed:d4:78:a9:ee:ad:99:86:1e:3d:33:eb:72:e6:7d:d5:
9c:b5:11:a6:fe:90:a3:0f:88:6c:21:51:c5:21:e5:9f:56:b6:
5a:c8:0f:0e:81:e1:78:ec:95:56:6a:4f:f5:d5:e1:67:cb:43:
cf:87:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:44 2026 by rpki-client