Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ogqLdcHBVunptQqU8na3eZ4TAyk.roa
File: ogqLdcHBVunptQqU8na3eZ4TAyk.roa (raw, json)
Hash identifier: 5LphFus+DuaNIXfIZUq0AA1jagejb6gUIJL2iHIV3t4=
Subject key identifier: A2:0A:8B:75:C1:C1:56:E9:E9:B5:0A:94:F2:76:B7:79:9E:13:03:29
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0E1BDE8E5EC090B5714912EEEF9665BEC
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ogqLdcHBVunptQqU8na3eZ4TAyk.roa
Signing time: Sun 27 Sep 2026 07:21:54 +0000
ROA not before: Sun 27 Sep 2026 07:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 95.155.132.0/24 maxlen: 24
95.155.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:bd:e8:e5:ec:09:0b:57:14:91:2e:ee:f9:66:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 27 07:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a20a8b75c1c156e9e9b50a94f276b7799e130329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:cf:f0:9a:e1:15:fd:57:8c:9a:1a:4c:ea:
70:b7:d4:6e:23:57:24:a4:24:be:18:52:70:67:bf:
1b:c3:4a:e1:65:bb:da:fd:1a:13:c2:54:bc:bd:c1:
71:f2:a4:3a:66:5e:4a:8d:70:df:3a:00:ce:ff:c2:
9d:7a:01:0c:99:10:07:62:33:56:cd:28:c7:2e:dc:
bd:d7:db:8e:af:21:4a:1e:48:83:f2:15:38:1b:3b:
ef:b1:1e:8d:aa:53:bc:1c:88:37:e4:6a:0b:53:0f:
11:09:25:0a:a0:eb:19:de:49:59:90:88:52:af:84:
5b:9c:bd:aa:09:2e:30:34:1a:37:3c:e7:29:7b:e3:
95:90:77:51:7f:68:e9:ff:c7:ea:9c:67:b6:ae:02:
04:d9:f4:ab:87:45:31:20:cb:85:69:51:54:64:bd:
1d:f5:a4:bb:eb:95:85:b0:68:c9:5e:75:07:ee:32:
a8:16:5d:c6:38:5c:cc:39:11:16:2a:0e:fb:31:47:
1c:be:79:ae:7e:ae:ff:5c:7f:cc:af:4a:84:36:8b:
ad:47:fd:d8:6f:fb:79:b4:c7:95:4c:89:22:06:35:
e5:02:06:82:eb:4e:d3:42:34:f9:a6:3a:b6:92:f5:
1b:eb:7b:43:3c:f2:32:99:32:3a:1c:e9:09:4a:4b:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:8B:75:C1:C1:56:E9:E9:B5:0A:94:F2:76:B7:79:9E:13:03:29
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ogqLdcHBVunptQqU8na3eZ4TAyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.132.0/24
95.155.154.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7a:9d:81:60:07:ec:b8:20:b6:7c:04:8f:c4:24:a8:ff:a6:
07:74:1e:51:f8:94:d5:8c:43:e5:3f:ec:f9:bf:68:2a:5e:bb:
51:fa:2a:c9:c6:65:a9:d4:5e:02:cf:de:f2:e7:c7:04:9e:31:
e5:da:52:2f:ae:7f:29:0d:22:af:f4:54:4f:ab:72:19:0c:bf:
8f:8d:97:85:75:32:7d:54:d3:29:60:92:9d:fd:76:c1:44:45:
d8:86:df:00:8d:92:f7:64:92:7d:7c:41:ae:a2:01:7b:fc:ae:
dc:ca:7e:99:d4:50:af:d7:52:6e:4c:e7:69:ca:75:3c:ce:71:
1a:1d:4a:1b:b7:4d:75:7c:ea:59:ca:a6:9f:90:d5:cd:02:3e:
7a:04:1d:49:6e:ce:d8:8b:04:f8:f2:01:ef:19:5d:5b:4d:96:
a4:84:b0:71:98:f4:67:e2:77:27:4a:37:15:69:bc:fc:be:88:
6b:d3:fd:ec:bf:8e:8f:0b:2b:77:27:e3:50:d3:8e:17:07:5b:
61:86:29:09:d1:d2:f4:c7:c6:4a:f6:10:99:08:b9:8e:5a:a4:
5f:f7:49:32:4d:17:1b:a9:3e:cf:45:b0:96:93:b6:77:ae:d3:
43:af:85:f3:cb:96:b7:2e:ee:70:8f:78:1b:ef:73:81:4a:16:
6e:da:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:17:18 2026 by rpki-client