Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/90nzrRteMZvuq9_cEfNwGY3-T1g.roa
File: 90nzrRteMZvuq9_cEfNwGY3-T1g.roa (raw, json)
Hash identifier: aoZ4OdjO4imejiLSzyQouh+PCQIdN12jIVmfRvZwBSk=
Subject key identifier: F7:49:F3:AD:1B:5E:31:9B:EE:AB:DF:DC:11:F3:70:19:8D:FE:4F:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0BAD7EE5B7092A3B084A2E14F845DC00D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/90nzrRteMZvuq9_cEfNwGY3-T1g.roa
Signing time: Sat 19 Sep 2026 18:05:08 +0000
ROA not before: Sat 19 Sep 2026 18:05:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 94.183.160.0/24 maxlen: 24
94.183.192.0/24 maxlen: 24
94.183.216.0/24 maxlen: 24
94.183.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:d7:ee:5b:70:92:a3:b0:84:a2:e1:4f:84:5d:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 19 18:05:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f749f3ad1b5e319beeabdfdc11f370198dfe4f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:19:6a:aa:96:9d:cb:fb:f7:7b:c5:d7:0e:
2f:00:eb:b9:37:e2:38:a4:98:79:f0:d3:d2:77:ab:
4e:4e:2c:b0:4a:bb:4c:60:2e:a2:68:80:ca:e5:ff:
3e:83:74:45:a0:bc:76:25:77:77:87:9a:42:61:9d:
20:85:4a:4a:7f:4e:23:53:96:d5:05:71:07:0c:45:
2b:ac:c8:05:1d:dd:da:ad:51:26:22:a8:1e:4e:87:
59:69:73:7a:b2:5a:cf:1e:08:f9:c5:c3:16:6f:47:
e7:ad:13:80:1f:a9:42:fc:88:8d:af:29:80:ab:10:
5e:41:df:2b:53:c2:63:d9:42:30:fd:e9:dc:bb:2b:
11:63:73:91:f6:77:35:b4:82:ba:56:91:16:b5:82:
99:29:2a:16:d0:05:aa:f8:52:66:83:c7:54:f4:5f:
3f:ce:3e:a2:1a:0d:90:b2:bb:d5:9c:57:9e:09:6c:
50:e3:f2:6d:03:38:fa:6e:66:01:bd:ff:4a:47:55:
9a:a4:91:b4:df:c4:98:1e:d4:37:e5:9d:f0:f2:fb:
88:c1:86:8e:fd:18:89:d4:9c:4f:56:01:fa:8e:bb:
d5:ad:e6:87:4a:80:40:31:1c:a1:ab:71:e4:54:61:
ec:6c:f9:00:f4:5e:02:ca:b1:e9:80:72:d3:ac:ee:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:49:F3:AD:1B:5E:31:9B:EE:AB:DF:DC:11:F3:70:19:8D:FE:4F:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/90nzrRteMZvuq9_cEfNwGY3-T1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.160.0/24
94.183.192.0/24
94.183.216.0/24
94.183.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d4:b6:63:18:42:ea:78:61:48:fa:a0:db:81:30:97:8e:95:
6f:54:09:0b:27:8d:f0:65:43:34:5d:3f:55:2f:96:77:49:a6:
80:11:8d:19:da:d3:84:dd:a2:1e:75:88:57:c5:78:e3:43:2d:
fd:55:53:7f:b7:0b:6b:42:e8:e6:53:66:db:94:57:7d:b2:57:
5c:ab:81:17:0e:cf:5e:80:00:c0:67:1f:b5:ef:07:24:5a:5a:
f9:22:76:83:b7:29:9b:42:7a:86:55:39:47:6d:98:de:59:e6:
17:0e:14:7e:99:1b:6c:93:2f:1e:1c:db:59:c3:e7:b7:6f:cb:
a3:13:ed:2b:5a:1d:f6:33:be:16:1d:97:9a:87:7c:0f:4b:7f:
46:bf:f5:16:e1:4a:84:41:43:f0:16:b4:22:52:7f:9f:bf:2d:
bc:9e:7f:15:33:c2:a5:d1:95:96:d8:0c:71:95:05:cc:a7:fe:
aa:0e:5d:60:07:32:75:b5:0a:60:23:5a:80:22:40:f2:56:96:
50:5a:e8:ac:95:c2:50:6d:06:17:f1:fd:46:a8:cc:7f:68:8b:
1e:07:83:3e:f9:17:59:19:20:db:8d:3e:17:fb:34:1f:33:27:
ab:21:65:6a:f3:80:1a:8e:8a:2a:bf:e2:95:df:9c:ac:f4:8e:
fd:d9:b6:e9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaC61+5bcJKjsISi4U+EXcANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTE5MTgwNTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzQ5ZjNhZDFiNWUzMTliZWVhYmRmZGMxMWYzNzAxOThkZmU0ZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySYZaqqWncv793vF1w4vAOu5N+I4
pJh58NPSd6tOTiywSrtMYC6iaIDK5f8+g3RFoLx2JXd3h5pCYZ0ghUpKf04jU5bV
BXEHDEUrrMgFHd3arVEmIqgeTodZaXN6slrPHgj5xcMWb0fnrROAH6lC/IiNrymA
qxBeQd8rU8Jj2UIw/encuysRY3OR9nc1tIK6VpEWtYKZKSoW0AWq+FJmg8dU9F8/
zj6iGg2QsrvVnFeeCWxQ4/JtAzj6bmYBvf9KR1WapJG038SYHtQ35Z3w8vuIwYaO
/RiJ1JxPVgH6jrvVreaHSoBAMRyhq3HkVGHsbPkA9F4CyrHpgHLTrO7COwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPdJ860bXjGb7qvf3BHzcBmN/k9YMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvOTBuenJSdGVNWnZ1cTlfY0VmTndHWTMtVDFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXregAwQA
XrfAAwQAXrfYAwQAXrfaMA0GCSqGSIb3DQEBCwUAA4IBAQC51LZjGELqeGFI+qDb
gTCXjpVvVAkLJ43wZUM0XT9VL5Z3SaaAEY0Z2tOE3aIedYhXxXjjQy39VVN/twtr
QujmU2bblFd9sldcq4EXDs9egADAZx+17wckWlr5InaDtymbQnqGVTlHbZjeWeYX
DhR+mRtsky8eHNtZw+e3b8ujE+0rWh32M74WHZeah3wPS39Gv/UW4UqEQUPwFrQi
Un+fvy28nn8VM8Kl0ZWW2AxxlQXMp/6qDl1gBzJ1tQpgI1qAIkDyVpZQWuislcJQ
bQYX8f1GqMx/aIseB4M++RdZGSDbjT4X+zQfMyerIWVq84Aajooqv+KV35ys9I79
2bbp
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:48 2026 by rpki-client