Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zKC6n_t_VgG-LjOI7EZyAWxbwfA.roa
File: zKC6n_t_VgG-LjOI7EZyAWxbwfA.roa (raw, json)
Hash identifier: xTXsk3AHK3+UMeTc89XGRCu0j4laHeIShFJJ2s+vJRs=
Subject key identifier: CC:A0:BA:9F:FB:7F:56:01:BE:2E:33:88:EC:46:72:01:6C:5B:C1:F0
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0199ED04327D5120EDF1E7591CEB41EE514F
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zKC6n_t_VgG-LjOI7EZyAWxbwfA.roa
Signing time: Thu 16 Oct 2025 12:34:59 +0000
ROA not before: Thu 16 Oct 2025 12:34:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397006
IP address blocks: 95.155.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:04:32:7d:51:20:ed:f1:e7:59:1c:eb:41:ee:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 16 12:34:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cca0ba9ffb7f5601be2e3388ec4672016c5bc1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:0e:d7:0c:4a:35:69:12:e9:11:1e:21:0c:
6c:4c:20:e0:26:66:de:9d:d7:59:33:37:94:2f:76:
d3:b3:83:18:22:4b:1f:70:4a:7c:58:a3:5e:8a:2f:
49:97:54:be:03:7d:c5:6a:bd:d4:2d:03:b3:0c:ec:
9c:89:b9:9a:20:3d:7b:1a:94:23:c4:22:2c:4c:1c:
d2:b1:5e:6c:11:dd:da:bf:85:80:08:43:32:b1:5a:
55:76:2b:72:6e:d8:24:f3:41:25:76:05:8e:73:67:
04:24:fc:74:a0:e8:d1:87:af:81:70:e4:ff:28:31:
2d:d0:ed:a7:ea:14:f0:71:fc:9b:b8:ca:d5:db:25:
f7:15:0f:ea:16:2f:40:ac:16:c4:68:7f:3a:c3:f5:
d6:8b:a7:ad:b6:d2:ca:1d:26:8c:c7:bd:56:4d:60:
75:09:03:2e:72:b1:89:88:4f:59:9d:69:26:9f:5b:
9b:9b:2a:60:a7:ce:7b:6b:03:87:50:78:17:2d:96:
7c:bd:0d:2d:f3:28:8d:5e:c6:da:22:80:1b:ca:b0:
60:16:d9:8f:e8:49:dd:2b:90:2b:81:3c:90:53:b3:
3c:3e:2e:0c:51:40:38:d9:37:cc:53:0f:98:3d:aa:
f0:b1:ca:2d:fd:2c:3e:35:c9:5d:95:c8:2a:b7:a9:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A0:BA:9F:FB:7F:56:01:BE:2E:33:88:EC:46:72:01:6C:5B:C1:F0
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/zKC6n_t_VgG-LjOI7EZyAWxbwfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.176.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:e7:a6:f7:7a:b9:d9:22:12:7f:7a:46:15:aa:6e:c8:db:bc:
27:f1:6f:9d:77:bb:6e:ac:c3:1a:45:99:45:e1:28:7c:a6:36:
e9:a3:dc:0c:59:ff:14:ba:1c:7b:7d:a8:75:ef:61:c0:68:5b:
b4:b4:69:2d:0e:83:d3:8b:96:61:3c:9d:f6:5e:08:38:e7:6b:
22:e9:03:60:c9:87:f3:8d:a3:b6:03:f9:9b:dc:09:c2:06:09:
d2:55:cb:99:b1:7a:67:e8:e6:9f:d9:8d:41:9c:f2:ed:df:56:
db:9d:b6:b1:d9:3a:02:20:21:a7:8b:a9:68:95:99:46:ce:4a:
83:f3:fa:f4:4d:4e:b3:cd:24:12:84:f2:79:4c:9a:10:c7:ee:
37:de:3a:ad:e3:e2:7e:90:fe:bd:23:b6:95:10:f1:6b:76:e4:
6a:e8:70:0b:60:f3:e9:f8:38:37:e1:5c:7b:09:85:76:eb:4d:
c8:80:eb:9b:fb:02:f8:63:1e:86:c5:57:0a:95:92:51:d0:a4:
0a:d1:5e:ed:f8:ff:13:09:75:dd:3b:2e:48:c6:2d:c9:ac:ea:
95:55:09:66:3f:99:d6:bf:bb:ad:2e:f5:61:13:86:7f:8e:3e:
0d:ee:fe:ed:c5:67:24:6d:dc:3b:f3:5a:5b:18:6a:a4:dd:d0:
90:24:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:30 2025 by rpki-client