Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-FNbOasLiTl7kgHAWGAWAre3jv0.roa
File: 1-FNbOasLiTl7kgHAWGAWAre3jv0.roa (raw, json)
Hash identifier: OEqOXm+TP8gAvnQxPjVpnI41AycF6v+Fr9Cy6zBTacY=
Subject key identifier: F8:53:5B:39:AB:0B:89:39:7B:92:01:C0:58:60:16:02:B7:B7:8E:FD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A042CFD0BDD1A6F49627E984D7E7CA5407
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-FNbOasLiTl7kgHAWGAWAre3jv0.roa
Signing time: Thu 27 Aug 2026 10:41:50 +0000
ROA not before: Thu 27 Aug 2026 10:41:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203676
IP address blocks: 94.183.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:cf:d0:bd:d1:a6:f4:96:27:e9:84:d7:e7:ca:54:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 27 10:41:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8535b39ab0b89397b9201c058601602b7b78efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:12:70:22:03:02:b1:30:13:6d:ea:d4:23:
21:c8:df:31:43:6d:25:78:17:51:1c:06:e9:c9:69:
91:36:75:74:50:aa:41:3e:85:1e:2f:95:07:4a:b4:
b1:87:38:e8:82:e0:cd:08:c5:e7:7c:14:99:25:59:
74:50:8a:e8:6d:4a:13:d7:38:48:70:1a:b5:8e:de:
08:db:90:7b:c0:fd:d7:9c:db:75:db:d7:32:f3:26:
64:47:a5:d0:f4:3d:9e:3e:68:65:e7:83:85:d2:ea:
ed:be:29:46:bc:07:64:b8:6a:32:20:9a:6e:6d:c1:
12:33:b2:60:60:21:e3:50:a4:38:6a:b5:14:67:f1:
7c:d2:36:80:23:23:b8:0b:db:72:e8:c4:2f:12:4b:
32:5a:73:8a:ed:0d:aa:8c:71:51:f8:d0:16:38:01:
24:64:7f:e7:be:ba:11:de:a3:31:74:25:b6:6c:5b:
b2:2b:f0:91:e2:f9:79:7e:e9:83:b1:62:82:b1:e4:
07:5e:90:1f:d8:6a:d7:04:23:d1:56:62:1c:7d:8d:
ab:37:d2:6f:46:98:c2:8e:95:c4:13:a5:a5:70:a5:
a7:30:18:7d:a7:1b:03:83:5b:d3:8b:7c:35:ce:9d:
96:e3:36:7e:a8:32:3e:9a:80:4f:ec:69:b1:c9:8f:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:5B:39:AB:0B:89:39:7B:92:01:C0:58:60:16:02:B7:B7:8E:FD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-FNbOasLiTl7kgHAWGAWAre3jv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.252.0/24
Signature Algorithm: sha256WithRSAEncryption
66:38:44:74:35:0d:b2:c9:59:b8:1a:fc:f0:34:0b:61:6f:bc:
01:4e:b7:8e:58:38:65:6e:fe:e4:13:12:d8:c2:75:2b:be:79:
89:68:49:db:f0:dc:2e:49:95:32:de:a4:3c:0d:fa:ba:2f:af:
46:a8:17:54:4b:09:12:ed:d7:c0:f7:ed:4e:8a:ce:ce:07:e5:
78:77:a6:40:7b:04:0f:88:87:0b:24:71:6e:e9:5b:d3:46:0e:
83:05:2f:c3:5f:b5:7a:15:5c:d5:11:95:29:94:35:7b:28:e9:
3f:4e:b3:8d:f0:76:fe:19:6c:f2:79:47:28:4f:27:53:11:36:
54:71:47:02:18:db:bd:e4:3d:7c:f5:96:b8:ef:21:05:3d:4c:
9f:72:55:48:d9:2b:81:0e:62:1b:bf:89:f5:db:69:70:82:a9:
58:f9:f7:a6:d4:07:ca:99:29:7d:3d:b8:b1:6a:1b:f1:69:6f:
64:ff:01:05:45:93:81:e9:0d:5c:e3:ce:5c:44:36:f0:a1:b3:
40:53:fb:a3:4b:f8:ea:82:bf:92:ef:a6:96:1d:ba:6c:cc:85:
4b:b9:0c:52:80:0c:24:62:9d:bf:d7:d0:57:55:0a:d1:ae:52:
cc:a4:2a:29:eb:f9:9c:98:2e:8f:c3:44:dc:7e:06:8d:3b:83:
bd:8d:cc:c5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaBCz9C90ab0lifphNfnylQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODI3MTA0MTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODUzNWIzOWFiMGI4OTM5N2I5MjAxYzA1ODYwMTYwMmI3Yjc4ZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj0ScCIDArEwE23q1CMhyN8xQ20l
eBdRHAbpyWmRNnV0UKpBPoUeL5UHSrSxhzjoguDNCMXnfBSZJVl0UIrobUoT1zhI
cBq1jt4I25B7wP3XnNt129cy8yZkR6XQ9D2ePmhl54OF0urtvilGvAdkuGoyIJpu
bcESM7JgYCHjUKQ4arUUZ/F80jaAIyO4C9ty6MQvEksyWnOK7Q2qjHFR+NAWOAEk
ZH/nvroR3qMxdCW2bFuyK/CR4vl5fumDsWKCseQHXpAf2GrXBCPRVmIcfY2rN9Jv
RpjCjpXEE6WlcKWnMBh9pxsDg1vTi3w1zp2W4zZ+qDI+moBP7GmxyY+WgwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhTWzmrC4k5e5IBwFhgFgK3t479MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMS1GTmJPYXNMaVRsN2tnSEFXR0FXQXJlM2p2MC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTIvNTExZjk1LWU0YmYtNDNmMS1hZjJmLWI4MTFjZmNiOWZk
NS8xL1R4c0pYNnRuWXp3Qko5WWY5b1Y0Wk9wckpjVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF63/DAN
BgkqhkiG9w0BAQsFAAOCAQEAZjhEdDUNsslZuBr88DQLYW+8AU63jlg4ZW7+5BMS
2MJ1K755iWhJ2/DcLkmVMt6kPA36ui+vRqgXVEsJEu3XwPftTorOzgfleHemQHsE
D4iHCyRxbulb00YOgwUvw1+1ehVc1RGVKZQ1eyjpP06zjfB2/hls8nlHKE8nUxE2
VHFHAhjbveQ9fPWWuO8hBT1Mn3JVSNkrgQ5iG7+J9dtpcIKpWPn3ptQHypkpfT24
sWob8WlvZP8BBUWTgekNXOPOXEQ28KGzQFP7o0v46oK/ku+mlh26bMyFS7kMUoAM
JGKdv9fQV1UK0a5SzKQqKev5nJguj8NE3H4GjTuDvY3MxQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:37:31 2026 by rpki-client