Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TbNSxOvRR_J-Zlv10lhG0eiRQ_s.roa
File: TbNSxOvRR_J-Zlv10lhG0eiRQ_s.roa (raw, json)
Hash identifier: L+IwMSXD9xag5xNWuqAHmBn2MtKzZidAs81w/T3V0CM=
Subject key identifier: 4D:B3:52:C4:EB:D1:47:F2:7E:66:5B:F5:D2:58:46:D1:E8:91:43:FB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C8AE4FD1229C72BFA309446EADB29578B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TbNSxOvRR_J-Zlv10lhG0eiRQ_s.roa
Signing time: Mon 23 Feb 2026 14:26:28 +0000
ROA not before: Mon 23 Feb 2026 14:26:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206507
IP address blocks: 94.183.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:e4:fd:12:29:c7:2b:fa:30:94:46:ea:db:29:57:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 23 14:26:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4db352c4ebd147f27e665bf5d25846d1e89143fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:02:a8:68:6c:6f:51:f3:78:67:19:b4:2c:
59:21:ec:94:8d:70:84:dc:42:ce:75:e5:ea:2f:ba:
4b:72:60:6c:9e:11:2f:77:11:8a:62:de:cb:e8:30:
62:76:5b:73:93:35:a8:a4:e0:67:a4:6c:51:09:68:
75:46:04:f6:50:1d:36:32:df:2c:b2:88:d8:87:00:
be:b5:24:58:32:62:fc:ac:e2:ef:d9:33:c2:31:74:
99:18:34:22:56:06:c6:e2:17:2a:00:28:b9:6d:6d:
27:37:91:84:9f:ec:73:7b:93:16:f6:4c:21:1d:c2:
5b:fc:f4:2d:8e:34:4a:0c:3b:b7:37:73:de:f1:4a:
eb:3c:bf:04:6a:4b:93:70:3d:d5:7d:f5:d6:e1:f3:
21:20:d1:d4:80:89:fd:ac:a4:91:26:8e:70:ea:ff:
e0:4b:0a:dc:15:04:40:c8:90:a6:52:ae:ef:bd:f2:
37:c5:e4:e8:9a:3e:7b:b4:22:27:be:f5:56:bf:f2:
43:f9:82:75:5b:01:24:10:10:6e:07:b4:e9:cf:c4:
46:ee:eb:c0:97:b9:eb:ab:98:10:9d:5b:95:c3:cd:
50:4f:c5:c9:12:93:c6:03:1f:39:d7:34:6d:77:bb:
a6:aa:92:6b:93:3c:b3:e0:d8:dc:cc:e0:56:1a:b2:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:52:C4:EB:D1:47:F2:7E:66:5B:F5:D2:58:46:D1:E8:91:43:FB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TbNSxOvRR_J-Zlv10lhG0eiRQ_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.172.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5c:f1:a1:87:39:da:e1:44:10:a0:0e:cb:cc:ef:3c:51:11:
4f:e3:6d:60:04:88:ba:72:ad:92:6d:09:65:e3:16:8f:ea:b3:
6c:8e:12:77:47:69:f8:68:f7:19:1b:3b:c0:29:c5:b3:d2:5f:
47:88:f2:5f:71:1e:8c:e5:2a:41:39:ea:4b:40:66:4f:98:64:
ed:7d:31:6e:0f:cc:37:1c:35:f4:5c:b2:af:54:ce:67:e9:fb:
80:7d:03:a7:f9:1e:e3:61:09:a1:06:ee:7d:d2:0a:1d:e1:24:
40:48:08:f4:34:66:45:40:1b:85:be:c8:b1:59:44:17:99:ef:
46:fd:b3:b5:67:e3:55:d8:ca:3f:e5:a7:c3:a3:ff:56:ef:9a:
b6:59:3c:cc:55:64:ec:9a:aa:47:61:c8:23:c5:b8:89:df:87:
68:1b:e2:63:7b:e8:c4:e2:a0:31:13:31:d9:be:62:8c:bb:e8:
83:9d:6d:6c:63:e8:31:92:8b:2d:1a:52:a8:ad:52:71:70:31:
dd:02:56:31:e4:72:79:51:c8:46:1b:cb:d3:93:8d:53:f2:51:
64:bb:c4:b4:62:4c:ab:f0:19:d3:60:5f:00:c0:31:88:f8:47:
e0:fd:94:11:ab:92:d7:6c:be:9b:9b:b2:df:11:c5:94:dc:5c:
33:2b:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:40 2026 by rpki-client