Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1N0E7ycr3MUt7nUBln4ZFE6MFoo.roa
File: 1N0E7ycr3MUt7nUBln4ZFE6MFoo.roa (raw, json)
Hash identifier: 4enBUbmJDZB+IIH1lQOtgp0IHp6A3HSPf7E1RjNB37E=
Subject key identifier: D4:DD:04:EF:27:2B:DC:C5:2D:EE:75:01:96:7E:19:14:4E:8C:16:8A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C379014C9D90DDEE0AE6CA6945F22449A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1N0E7ycr3MUt7nUBln4ZFE6MFoo.roa
Signing time: Sat 07 Feb 2026 10:05:14 +0000
ROA not before: Sat 07 Feb 2026 10:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211881
IP address blocks: 94.183.149.0/24 maxlen: 24
94.183.164.0/24 maxlen: 24
94.183.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:37:90:14:c9:d9:0d:de:e0:ae:6c:a6:94:5f:22:44:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 7 10:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4dd04ef272bdcc52dee7501967e19144e8c168a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:79:ea:14:d4:41:4d:8b:8f:de:93:31:f4:
30:0b:c2:be:01:3f:20:48:a7:bd:29:5f:fa:55:c2:
c4:28:41:19:56:01:43:96:de:51:f0:c8:29:ce:c1:
38:8b:9c:cd:d8:59:ef:98:a5:e5:cc:c6:c3:f2:b6:
36:b4:10:ff:99:79:cc:9f:11:bd:82:c0:9a:14:2e:
45:60:0d:86:65:80:76:71:f3:d3:25:0d:83:04:fc:
28:23:9c:ec:a5:36:ed:fb:36:90:5e:a2:90:db:99:
48:2d:0d:4a:2d:df:6c:9e:e2:84:76:93:71:b3:98:
20:4e:e6:5c:b6:80:97:91:14:09:0f:36:05:e5:d8:
d8:67:8e:7a:3f:25:8b:87:c3:36:ed:2a:82:0c:0c:
99:70:c6:4b:32:98:4c:33:75:75:e5:cb:55:c9:07:
a4:bc:5d:59:b7:61:cf:ba:88:0e:a9:e9:2a:01:cd:
ff:71:43:96:5b:12:50:77:9b:66:6f:d0:76:4d:0e:
c3:71:fc:42:ee:8d:10:c2:68:22:ba:a9:e8:5b:60:
07:59:6b:eb:51:ae:06:78:65:fb:1c:14:eb:9f:1b:
26:fb:55:50:78:77:6a:17:fa:f1:b7:0d:d6:7b:85:
d4:fd:52:6a:bd:7d:66:1a:24:a6:dd:1b:85:a1:e3:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DD:04:EF:27:2B:DC:C5:2D:EE:75:01:96:7E:19:14:4E:8C:16:8A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1N0E7ycr3MUt7nUBln4ZFE6MFoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.149.0/24
94.183.164.0/24
94.183.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a2:b8:0c:9d:0a:3e:ff:bd:c8:ca:d8:0d:f5:34:ce:50:73:
bc:e5:77:67:75:7e:e8:53:da:b6:1b:8a:99:bb:97:59:40:84:
91:ad:32:e2:f0:0e:c8:3f:15:f8:f8:d3:16:93:7d:66:42:5c:
72:61:e0:c8:6d:51:98:2d:a5:eb:ad:87:27:c5:59:e6:9c:0c:
ea:d1:66:75:ac:c3:49:bd:5d:2d:bd:9a:58:ac:8c:a0:a4:05:
7d:ef:55:68:c1:3e:14:c6:32:70:45:37:f1:85:33:d1:7d:ce:
34:e1:59:17:00:96:81:a4:7a:9e:63:5f:37:63:fa:b0:4d:0e:
0e:92:bd:4f:5d:8e:0b:d5:4a:61:6c:95:53:48:7c:e9:cd:ec:
13:59:66:39:c9:48:6e:5e:7e:aa:f7:64:e2:7c:e8:1d:41:0a:
97:5c:48:e9:31:57:eb:78:e5:da:7a:ed:da:e7:16:1e:67:dd:
1f:d5:4d:9f:af:d9:b2:b0:13:79:90:7e:7f:39:d9:59:c7:95:
d6:af:1c:4b:81:db:fc:ec:d8:3a:de:a5:96:a2:a9:2e:11:39:
21:a1:69:8e:a1:94:73:58:4b:68:20:3b:dd:97:c3:35:06:f1:
9c:26:72:82:23:6f:02:70:bf:66:af:29:51:c1:2f:4f:3d:0d:
24:5a:67:81
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZw3kBTJ2Q3e4K5sppRfIkSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjA3MTAwNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGRkMDRlZjI3MmJkY2M1MmRlZTc1MDE5NjdlMTkxNDRlOGMxNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqih56hTUQU2Lj96TMfQwC8K+AT8g
SKe9KV/6VcLEKEEZVgFDlt5R8MgpzsE4i5zN2FnvmKXlzMbD8rY2tBD/mXnMnxG9
gsCaFC5FYA2GZYB2cfPTJQ2DBPwoI5zspTbt+zaQXqKQ25lILQ1KLd9snuKEdpNx
s5ggTuZctoCXkRQJDzYF5djYZ456PyWLh8M27SqCDAyZcMZLMphMM3V15ctVyQek
vF1Zt2HPuogOqekqAc3/cUOWWxJQd5tmb9B2TQ7DcfxC7o0QwmgiuqnoW2AHWWvr
Ua4GeGX7HBTrnxsm+1VQeHdqF/rxtw3We4XU/VJqvX1mGiSm3RuFoeOrjwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNTdBO8nK9zFLe51AZZ+GRROjBaKMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMU4wRTd5Y3IzTVV0N25VQmxuNFpGRTZNRm9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXreVAwQA
XrekAwQAXre1MA0GCSqGSIb3DQEBCwUAA4IBAQA+orgMnQo+/73IytgN9TTOUHO8
5XdndX7oU9q2G4qZu5dZQISRrTLi8A7IPxX4+NMWk31mQlxyYeDIbVGYLaXrrYcn
xVnmnAzq0WZ1rMNJvV0tvZpYrIygpAV971VowT4UxjJwRTfxhTPRfc404VkXAJaB
pHqeY183Y/qwTQ4Okr1PXY4L1UphbJVTSHzpzewTWWY5yUhuXn6q92TifOgdQQqX
XEjpMVfreOXaeu3a5xYeZ90f1U2fr9mysBN5kH5/OdlZx5XWrxxLgdv87Ng63qWW
oqkuETkhoWmOoZRzWEtoIDvdl8M1BvGcJnKCI28CcL9mrylRwS9PPQ0kWmeB
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:40 2026 by rpki-client