Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa
File: ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa (raw, json)
Hash identifier: QBEq8rCcXKzWf4ULJs+y+Nad4kF1AXFNATRKBuEGesA=
Subject key identifier: 9A:CD:30:B9:3E:EF:EB:E8:75:52:09:CB:EA:7F:E3:81:69:0E:91:55
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019DBC59FD651150F73F3C17DAF2AD6D2480
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa
Signing time: Thu 23 Apr 2026 21:58:27 +0000
ROA not before: Thu 23 Apr 2026 21:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40662
IP address blocks: 95.155.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bc:59:fd:65:11:50:f7:3f:3c:17:da:f2:ad:6d:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Apr 23 21:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9acd30b93eefebe8755209cbea7fe381690e9155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:18:01:85:f8:93:b4:76:35:bf:84:cf:68:
b7:d7:8e:12:0a:da:77:0b:d5:fb:3b:f1:54:3e:14:
0f:7b:2d:fc:82:3d:16:ca:f0:5b:14:4c:62:8b:2d:
ae:45:be:90:75:24:ca:40:84:cc:8c:68:0a:c5:e6:
ab:45:d6:a8:a5:f7:46:bf:d1:03:0a:3e:d3:af:75:
1a:73:6f:59:2b:07:b3:01:2f:57:7c:4d:66:07:90:
99:ca:37:82:fa:4d:9f:e9:8c:6d:50:ae:c1:15:f1:
67:03:6b:52:31:10:61:4d:72:0d:19:a5:9e:90:23:
0e:14:32:a0:85:90:d7:8f:12:6d:1f:bf:09:d9:c2:
3c:e6:1d:f9:49:c5:5a:a2:e3:b3:41:6c:f3:94:0f:
a2:b5:bb:9a:ea:9d:99:05:04:15:5c:26:2f:c7:c0:
01:e4:7b:71:50:8c:bc:0d:6a:66:1a:c8:f8:be:08:
12:5b:db:ac:86:8f:77:f5:c1:e1:c6:1c:7c:f1:a3:
ad:2e:05:8f:cd:10:ba:2e:8a:ce:c8:a7:50:b0:97:
0e:b0:a5:16:50:78:0a:f2:cd:08:99:cc:5d:36:0a:
94:c1:3c:9c:42:98:e2:c7:2e:0b:34:5f:52:fb:34:
0f:56:31:c4:56:5b:9e:e2:36:64:77:4a:bd:cc:86:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CD:30:B9:3E:EF:EB:E8:75:52:09:CB:EA:7F:E3:81:69:0E:91:55
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.151.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d5:c0:bc:78:8b:3b:a9:ae:3a:b2:7d:ca:42:9f:77:8c:14:
68:56:5e:de:ea:e7:62:27:c6:a1:ca:ec:e6:a1:73:fc:66:fd:
d4:22:62:36:af:09:1c:dc:a8:31:b4:12:11:f0:f9:87:7e:c6:
0a:3e:2f:c4:bc:dc:70:a8:31:8b:e2:70:a5:07:6f:f7:ee:3d:
75:92:6b:2c:29:4c:28:be:47:8b:13:74:4e:d7:12:32:de:2a:
fa:6b:46:1e:84:31:52:82:13:dd:1e:55:43:b1:14:01:c6:60:
51:be:b5:2d:26:02:62:f2:d7:dc:55:3e:11:b7:ac:5c:8d:04:
87:fe:14:2f:dd:b2:bd:72:46:43:14:36:39:d3:a0:65:56:2a:
fc:68:59:ea:9d:49:6d:a3:e9:b5:c0:0b:2f:3c:4d:2b:42:eb:
bb:18:ea:01:5b:5c:34:30:c9:46:d7:3d:68:4c:4d:a7:01:f9:
0d:e3:e0:24:8e:20:e8:fd:fc:bc:50:6d:fe:f5:23:6b:1b:5b:
8b:e5:fc:3b:44:c9:ab:ba:c0:2c:c7:2e:58:f0:de:bc:58:de:
b8:a2:df:3b:86:16:07:a0:3e:e7:80:df:75:f7:7a:9a:91:a0:
e3:08:74:7a:b2:83:eb:ea:3c:2b:e5:0c:09:79:47:00:da:b4:
ee:0c:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:20 2026 by rpki-client