Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-ziF5Y0H11BH4JET0jvprb2GdZc.roa
File: 1-ziF5Y0H11BH4JET0jvprb2GdZc.roa (raw, json)
Hash identifier: y6KXVS7U2g1o1PcAGKXXYMynO5tDO0JiGJuMC5cCdIw=
Subject key identifier: FB:38:85:E5:8D:07:D7:50:47:E0:91:13:D2:3B:E9:AD:BD:86:75:97
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A08CA2B62482B67E76650AC8789A8F6DA8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-ziF5Y0H11BH4JET0jvprb2GdZc.roa
Signing time: Thu 10 Sep 2026 18:44:28 +0000
ROA not before: Thu 10 Sep 2026 18:44:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 94.183.195.0/24 maxlen: 24
94.183.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:a2:b6:24:82:b6:7e:76:65:0a:c8:78:9a:8f:6d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 10 18:44:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb3885e58d07d75047e09113d23be9adbd867597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:ac:d9:86:2d:68:da:d1:bb:3c:5c:4c:5a:
fb:e5:45:1a:e5:c8:fc:34:a0:51:7e:86:69:3d:83:
1d:22:6a:88:da:84:c6:b3:71:2c:05:82:12:12:45:
8a:62:13:0c:20:16:7d:11:22:f0:0c:ea:03:a9:6c:
b4:b7:fc:5d:2e:eb:fc:27:a0:9e:79:0d:87:c7:a1:
78:cb:c9:9c:a6:e2:29:e9:73:2c:a2:93:4d:b4:81:
03:5c:b1:da:bf:02:a3:32:b8:35:76:37:79:33:8c:
9e:05:97:d3:ae:88:1f:a0:a4:8e:1d:49:1e:06:86:
3f:21:6f:75:7f:2b:38:6b:22:f2:90:92:47:9b:32:
85:03:e4:2d:a4:01:b6:6e:47:0c:a3:e2:a3:03:4f:
82:ca:38:ed:fb:f9:81:e9:ff:d6:87:77:12:29:c1:
e5:9d:55:ae:5e:33:de:83:6a:c6:df:a3:20:be:48:
7b:3a:76:0f:94:f9:8d:c5:73:af:3f:5c:5f:6d:d7:
d9:0b:ac:93:da:44:8c:fc:17:a4:32:c9:47:07:b5:
4d:3a:1a:ce:a7:00:6c:7c:89:49:b7:de:45:1e:ec:
e1:d8:f3:88:fe:87:f6:92:e3:a0:06:e6:b3:b2:7f:
8a:a2:03:fc:a5:94:a0:a8:fb:6d:bd:6e:11:4d:e4:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:38:85:E5:8D:07:D7:50:47:E0:91:13:D2:3B:E9:AD:BD:86:75:97
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-ziF5Y0H11BH4JET0jvprb2GdZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.195.0/24
94.183.214.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f5:77:aa:c6:6f:0f:e4:14:b9:0c:02:42:26:37:d6:37:ba:
4e:50:25:b1:05:7a:5c:3c:e2:4d:32:e6:ed:f6:1b:c3:9a:af:
47:7b:11:3d:09:bb:50:ff:5f:4c:7a:6b:6c:1f:2e:e6:23:56:
d3:f3:b0:b5:f7:54:af:93:b0:83:50:46:a1:22:9a:d4:d1:b3:
9f:51:3c:ef:13:d1:d7:1c:e8:12:78:4b:0a:ce:2f:2f:9f:17:
74:14:ef:b1:49:11:83:58:83:5e:fc:88:c9:bc:9e:2a:90:17:
b1:3c:78:ab:7e:dd:e9:35:23:b6:e6:6f:bc:d9:88:a8:3d:79:
03:3e:0d:bf:95:02:84:64:6b:1d:c1:64:83:67:56:47:84:f4:
54:9f:53:f9:9e:60:55:95:54:0e:cd:e9:56:6f:c0:6e:6d:8a:
e4:2b:b0:d7:65:ce:db:93:69:7c:10:bd:28:bd:59:9b:e7:f4:
7e:49:06:79:04:8d:f3:f8:33:8a:a4:cb:74:46:e3:a7:5f:41:
0a:e7:2b:fb:22:72:29:a6:e0:40:7e:33:b2:03:9d:53:2b:27:
4c:72:cb:33:e7:47:7b:46:63:1f:17:38:e1:5d:6b:b7:63:a6:
9a:51:ff:46:01:2a:b7:2a:a6:46:b1:ca:2f:8c:fc:c3:15:7d:
ef:5a:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:25:56 2026 by rpki-client