Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Am-SSkYzBGNOVD5iZuCxEBeUzyE.roa
File: Am-SSkYzBGNOVD5iZuCxEBeUzyE.roa (raw, json)
Hash identifier: mvoXPLstsggjeVFKeI+JEtzXmHTtkfMv+mllobMchjw=
Subject key identifier: 02:6F:92:4A:46:33:04:63:4E:54:3E:62:66:E0:B1:10:17:94:CF:21
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01999948180E959B39CC073B4C090EC8A056
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Am-SSkYzBGNOVD5iZuCxEBeUzyE.roa
Signing time: Tue 30 Sep 2025 06:21:02 +0000
ROA not before: Tue 30 Sep 2025 06:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 110276
IP address blocks: 95.155.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:48:18:0e:95:9b:39:cc:07:3b:4c:09:0e:c8:a0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 30 06:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=026f924a463304634e543e6266e0b1101794cf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:19:8b:05:3a:aa:65:66:da:c2:c5:09:be:
53:7a:ef:d8:63:e0:cc:ba:9e:39:b5:4d:d4:3c:9b:
55:4e:6e:a1:b5:d1:0b:b5:86:03:69:32:3b:39:b0:
ab:39:61:68:90:a4:ca:75:2b:af:08:16:21:cf:7c:
72:76:a4:d3:72:48:49:5c:15:e8:0e:c3:30:dd:87:
70:b7:fe:aa:41:99:87:c6:c9:79:4a:a0:cb:ea:1b:
3b:0c:35:74:d2:63:9f:45:bc:e5:ec:8d:8c:19:1b:
b3:f1:e4:70:c1:20:6d:43:b1:48:ff:70:8d:dd:90:
da:fc:b5:2f:6e:9a:67:dc:04:b3:0c:39:63:83:8b:
fe:c5:c2:8e:d7:e2:80:7a:3b:19:40:ab:9d:2d:58:
08:c8:32:50:c4:83:8a:04:c0:5a:7b:90:99:14:d3:
69:11:cf:15:0e:39:1f:6a:09:75:4d:0f:d2:03:d8:
c4:23:62:43:f8:8d:00:f3:09:68:4b:50:e5:3a:89:
a8:8d:fa:77:91:0d:88:04:b4:d4:cc:92:51:69:bb:
b4:19:36:60:ef:5f:e5:8d:d9:17:4c:03:76:6f:64:
a8:92:9d:36:a5:bb:09:ed:a5:30:80:9e:62:04:4e:
53:af:ea:91:da:67:48:f4:48:70:63:e6:12:92:5c:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:92:4A:46:33:04:63:4E:54:3E:62:66:E0:B1:10:17:94:CF:21
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Am-SSkYzBGNOVD5iZuCxEBeUzyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.151.0/24
Signature Algorithm: sha256WithRSAEncryption
96:33:8c:6f:cb:28:e5:7a:19:e8:1e:e0:55:16:6e:2a:f1:91:
22:35:83:be:80:3d:2b:69:0c:6e:78:4c:49:c6:f8:11:72:23:
81:f5:1f:c1:54:63:84:92:49:4d:b8:a4:a3:50:89:8e:e0:0e:
7c:48:fe:e9:9b:04:4c:e1:7c:65:39:90:82:f5:12:62:9e:1a:
4b:6d:ec:17:d2:b0:02:18:f9:88:ec:39:9e:42:cb:00:4a:ae:
6f:73:76:b6:43:d1:05:93:14:05:4e:8d:18:a5:d1:b7:2b:05:
67:32:83:7c:41:1b:63:e7:c9:34:f2:a1:bd:5d:1c:1c:3b:5a:
46:cd:15:9a:6d:89:fa:cc:b4:3a:54:dd:72:bb:2d:b8:1d:3a:
6a:f4:c3:da:77:5f:d3:e7:32:0b:01:25:1a:77:86:10:c7:de:
88:2b:0f:70:45:bc:45:04:32:6b:38:56:35:25:63:dd:e4:c5:
b0:2d:3a:94:20:9e:70:bc:62:ba:59:2f:8b:37:31:89:22:21:
42:b0:52:09:13:3e:0b:6b:d0:4d:7b:23:ac:58:d1:5b:2c:c7:
d5:fb:6b:f1:ee:9e:1e:fa:11:03:bd:ce:0b:40:b8:f1:7b:ec:
6f:fc:14:4b:87:a2:17:c1:8c:f4:4e:c2:9f:55:5c:19:97:50:
98:0b:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:50:32 2025 by rpki-client