
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LmykzobOm4ZoWkfYQKQ87bb2UYI.roa
File: LmykzobOm4ZoWkfYQKQ87bb2UYI.roa (raw, json)
Hash identifier: 18G0tzCZeEKE15/EY4Lb950WlR4zuZ5hHxXPdjicv9Y=
Subject key identifier: 2E:6C:A4:CE:86:CE:9B:86:68:5A:47:D8:40:A4:3C:ED:B6:F6:51:82
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019855E15F2E9EEC9FB9A29FC4D7B2B51E9D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LmykzobOm4ZoWkfYQKQ87bb2UYI.roa
Signing time: Tue 29 Jul 2025 11:11:30 +0000
ROA not before: Tue 29 Jul 2025 11:11:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211881
IP address blocks: 94.183.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:e1:5f:2e:9e:ec:9f:b9:a2:9f:c4:d7:b2:b5:1e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 29 11:11:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e6ca4ce86ce9b86685a47d840a43cedb6f65182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:bb:78:98:53:7d:56:40:6b:be:ca:f6:7a:
78:4f:a7:6b:21:3b:c9:58:3a:00:3b:d8:c9:5c:fd:
17:78:54:ae:a0:5a:24:74:9f:26:d8:e1:a3:b3:25:
0a:51:84:19:b4:89:c0:3d:21:99:fe:c8:36:d5:34:
85:7d:0c:23:df:d5:a1:7b:c8:0f:8b:d2:fd:1b:d2:
e5:6d:9c:b0:3b:d8:1d:72:21:47:ce:13:ac:ca:22:
8e:22:bb:32:ee:f0:45:fa:10:ab:3c:af:59:a6:e1:
82:86:fb:e1:00:f8:06:17:03:74:25:42:76:c7:02:
2f:91:87:09:bd:b3:30:da:4c:5d:1a:9f:95:fa:ad:
e2:ae:bd:03:66:55:07:80:6f:ed:e1:8e:5a:d7:ac:
d2:b4:1d:85:9d:a2:17:49:a9:cd:a3:32:2c:e5:0b:
29:7f:26:0e:20:4d:4d:de:19:37:2e:8b:1a:e6:6b:
1a:3a:b7:aa:9e:81:df:0f:f8:b7:85:7a:b5:e4:5e:
41:06:a1:0e:d0:25:cc:18:b8:17:71:5a:f5:8d:cd:
b4:4a:f8:6e:7d:88:db:47:da:d5:fe:14:e7:0a:e7:
c6:de:26:7f:a7:58:94:9d:d9:1e:83:97:d5:1e:7d:
8e:a1:e2:c9:f9:32:71:15:e4:df:cc:e6:73:8d:07:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6C:A4:CE:86:CE:9B:86:68:5A:47:D8:40:A4:3C:ED:B6:F6:51:82
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LmykzobOm4ZoWkfYQKQ87bb2UYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.149.0/24
Signature Algorithm: sha256WithRSAEncryption
33:cb:8a:7a:5a:30:41:32:06:d9:84:a4:3e:6b:82:14:db:be:
6c:4b:f1:f1:6f:57:a9:bb:80:e0:40:89:39:dc:05:2e:0d:f2:
a6:9d:e7:78:48:7f:4b:77:b5:cc:8a:84:e8:65:53:b8:d0:32:
e7:c8:2c:f2:1f:63:8c:88:71:91:58:bc:5e:5b:a8:8f:6f:ea:
9f:12:d7:44:14:20:e2:43:a9:67:ce:ff:ee:6a:ea:d9:62:f2:
e4:ca:c5:ef:95:ed:ca:42:b4:43:91:02:68:de:7c:ba:d7:41:
33:e3:7f:0c:4c:6a:9f:03:41:da:12:c8:b1:f1:72:05:52:9e:
e1:c0:4a:60:06:cc:74:e5:15:be:b9:bf:da:9d:c4:29:7e:55:
8f:55:39:96:8e:e5:05:92:02:32:24:4d:0d:be:00:6a:02:50:
a8:6b:c5:7d:71:34:46:07:18:c8:73:37:14:86:9b:a4:76:f1:
83:0a:94:df:0a:14:25:a5:1f:89:4c:8e:65:e9:c3:2d:70:0c:
3c:e4:0b:c3:41:5b:e9:a8:18:1b:16:54:8e:56:30:28:15:37:
69:71:8e:27:93:cf:e0:e6:26:26:e1:a7:81:18:91:a8:62:0e:
35:9f:42:a9:a7:42:95:d5:18:9f:e3:c3:40:0d:47:0e:1c:b0:
b5:02:4c:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhV4V8unuyfuaKfxNeytR6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzI5MTExMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTZjYTRjZTg2Y2U5Yjg2Njg1YTQ3ZDg0MGE0M2NlZGI2ZjY1MTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsK7eJhTfVZAa77K9np4T6drITvJ
WDoAO9jJXP0XeFSuoFokdJ8m2OGjsyUKUYQZtInAPSGZ/sg21TSFfQwj39Whe8gP
i9L9G9LlbZywO9gdciFHzhOsyiKOIrsy7vBF+hCrPK9ZpuGChvvhAPgGFwN0JUJ2
xwIvkYcJvbMw2kxdGp+V+q3irr0DZlUHgG/t4Y5a16zStB2FnaIXSanNozIs5Qsp
fyYOIE1N3hk3Losa5msaOreqnoHfD/i3hXq15F5BBqEO0CXMGLgXcVr1jc20Svhu
fYjbR9rV/hTnCufG3iZ/p1iUndkeg5fVHn2OoeLJ+TJxFeTfzOZzjQcWnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC5spM6GzpuGaFpH2ECkPO229lGCMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTG15a3pvYk9tNFpvV2tmWVFLUTg3YmIyVVlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXreVMA0G
CSqGSIb3DQEBCwUAA4IBAQAzy4p6WjBBMgbZhKQ+a4IU275sS/Hxb1epu4DgQIk5
3AUuDfKmned4SH9Ld7XMioToZVO40DLnyCzyH2OMiHGRWLxeW6iPb+qfEtdEFCDi
Q6lnzv/uaurZYvLkysXvle3KQrRDkQJo3ny610Ez438MTGqfA0HaEsix8XIFUp7h
wEpgBsx05RW+ub/ancQpflWPVTmWjuUFkgIyJE0NvgBqAlCoa8V9cTRGBxjIczcU
hpukdvGDCpTfChQlpR+JTI5l6cMtcAw85AvDQVvpqBgbFlSOVjAoFTdpcY4nk8/g
5iYm4aeBGJGoYg41n0Kpp0KV1Rif48NADUcOHLC1Akz5
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:51 2025 by rpki-client