
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5XmJB8L9LQKzWCvnzU0no13nSW0.roa
File: 5XmJB8L9LQKzWCvnzU0no13nSW0.roa (raw, json)
Hash identifier: T9GOvhBZ+sI1Yn9j42OnP6O/5jv10olowsyPXKbQ3qs=
Subject key identifier: E5:79:89:07:C2:FD:2D:02:B3:58:2B:E7:CD:4D:27:A3:5D:E7:49:6D
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019971917BE9644C6DF5F7E666100FB1427D
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5XmJB8L9LQKzWCvnzU0no13nSW0.roa
Signing time: Mon 22 Sep 2025 13:16:23 +0000
ROA not before: Mon 22 Sep 2025 13:16:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 95.155.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:91:7b:e9:64:4c:6d:f5:f7:e6:66:10:0f:b1:42:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 22 13:16:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5798907c2fd2d02b3582be7cd4d27a35de7496d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:c0:88:47:f5:f4:2b:4f:49:27:2f:a0:0f:
c1:80:cf:ad:21:a2:64:e1:da:6a:11:3c:57:0e:7c:
63:55:7d:57:e4:b8:d9:33:60:2c:13:0d:62:e0:d7:
60:97:67:9a:a3:ca:21:57:af:0a:eb:a0:f9:d6:72:
9b:f8:d3:9c:97:0f:ee:1f:cd:8a:ae:a8:64:46:7a:
49:58:3c:b0:05:d5:3e:47:49:9d:4e:d5:0c:c2:10:
76:f3:21:8b:54:99:2a:35:2d:87:27:66:df:a0:12:
b6:f8:cf:4f:18:77:0c:74:41:14:d7:c9:34:7d:59:
fe:8e:a9:d4:ca:7b:00:92:83:72:fd:f7:c5:1a:0c:
41:c0:79:d7:43:3c:3b:49:b8:1b:71:de:85:66:ec:
b4:c5:df:c4:1e:41:1b:19:26:15:52:11:73:f8:ce:
0a:98:1e:98:20:20:e5:cc:cb:a9:f6:5c:25:b4:96:
d1:38:8d:11:7e:7e:bb:c1:27:b8:04:d8:1d:33:38:
4f:09:59:05:c8:ed:83:f5:87:8e:90:8e:aa:df:7f:
62:c4:d4:ad:5a:36:eb:5c:bf:b7:59:59:8d:d0:59:
b2:4e:ee:f5:70:db:6d:f6:8c:19:5d:e6:71:7c:eb:
c2:ed:41:39:61:76:40:05:de:86:94:21:13:08:11:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:89:07:C2:FD:2D:02:B3:58:2B:E7:CD:4D:27:A3:5D:E7:49:6D
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5XmJB8L9LQKzWCvnzU0no13nSW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.131.0/24
Signature Algorithm: sha256WithRSAEncryption
77:16:7c:6c:30:4e:1d:c9:5f:d4:7f:7a:aa:2c:48:94:d7:20:
51:b9:7a:c0:df:3f:d8:de:34:14:a1:0d:4d:d9:8d:d5:e6:cb:
b3:d2:dd:ff:b1:b4:4f:ef:e3:02:a4:4b:3c:7b:4b:39:b5:6a:
d3:6f:1e:18:a3:a1:b5:68:89:6a:94:ba:47:6b:08:5b:e1:34:
1a:fe:c3:9b:0a:84:8b:84:d3:f1:2e:f3:59:f4:5c:47:d8:a3:
8a:31:49:12:e7:ad:84:36:fc:29:18:a2:de:04:fe:41:de:04:
98:6a:e4:0d:04:37:2e:21:d9:d5:ff:73:a9:16:d5:55:e2:bf:
cd:fe:c1:a6:03:8b:d6:ce:e0:55:ff:e8:bb:e4:1f:c4:97:98:
36:fa:b7:8d:e2:0d:e0:f8:dd:ea:5a:9f:5c:b5:48:1e:a0:08:
a9:cb:59:6b:36:e6:06:f4:3b:c3:99:2d:cf:aa:96:e2:5e:ab:
25:34:77:37:e4:ba:cf:bf:2a:00:61:39:8e:92:c0:c8:92:cc:
68:4b:55:5d:f7:62:e1:3a:f1:c0:1a:7a:27:b7:db:b4:97:fc:
aa:9c:20:30:6b:06:4e:82:c0:0f:09:d3:99:bc:d9:d5:71:48:
d5:2b:43:7b:ad:ae:a1:77:62:41:f3:be:5b:c8:cb:a5:43:82:
bf:7f:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:46 2025 by rpki-client