Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_h7yg52X1dN0lPhpik1p4AbTNz4.roa
File: _h7yg52X1dN0lPhpik1p4AbTNz4.roa (raw, json)
Hash identifier: vWx1WWUokGCcPaJS9pDWg8wgaEfNcFvntLgY955e4Fs=
Subject key identifier: FE:1E:F2:83:9D:97:D5:D3:74:94:F8:69:8A:4D:69:E0:06:D3:37:3E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D38E2E4B1C877B4B30AEBB615AB31B962
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_h7yg52X1dN0lPhpik1p4AbTNz4.roa
Signing time: Sun 29 Mar 2026 09:18:06 +0000
ROA not before: Sun 29 Mar 2026 09:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204834
IP address blocks: 94.183.236.0/24 maxlen: 24
94.183.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:e2:e4:b1:c8:77:b4:b3:0a:eb:b6:15:ab:31:b9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 29 09:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe1ef2839d97d5d37494f8698a4d69e006d3373e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:43:07:85:58:db:8a:f3:54:92:69:9e:e5:
bf:c4:8a:6c:11:dc:6e:3e:45:c5:80:d1:7d:b1:85:
0d:34:63:8a:d7:12:d8:85:29:6c:41:fb:80:8c:fe:
09:74:6e:d4:31:d0:19:99:be:d4:ca:a3:a5:5a:ce:
4c:4d:0d:e0:52:2d:a1:1a:f5:e1:62:10:83:52:7c:
a5:42:d8:a8:8c:1c:aa:e8:39:bc:f5:91:15:d9:60:
16:c9:24:6d:de:aa:5a:22:d5:78:99:7e:83:c1:98:
b4:5a:f6:ce:70:3d:57:00:e2:b6:27:f1:24:1b:ca:
9b:dd:65:3f:76:8f:4c:3e:c9:a7:4a:84:44:26:5e:
35:d8:06:61:6f:d8:bb:74:24:ad:95:54:35:23:11:
f6:93:74:90:92:0a:0e:70:7f:cc:ee:e1:02:d7:2d:
2c:bc:57:a1:0e:99:36:70:93:40:85:bc:3b:21:45:
32:20:bf:63:68:ce:4e:ee:34:fb:64:7a:1b:d9:b4:
34:6e:db:7f:a7:fa:56:fe:76:48:4b:4d:cf:7a:9b:
f9:90:d0:c0:0f:6a:55:48:9b:b9:08:26:7f:3d:c7:
ad:7e:bb:ab:04:c4:f7:78:5e:43:71:d2:68:a2:e3:
3c:a1:e1:27:63:03:44:c5:e3:26:c8:e3:f9:d7:00:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1E:F2:83:9D:97:D5:D3:74:94:F8:69:8A:4D:69:E0:06:D3:37:3E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_h7yg52X1dN0lPhpik1p4AbTNz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.236.0/24
94.183.241.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ea:c2:52:bd:45:5a:eb:36:e8:cc:a4:94:03:c1:fe:12:49:
f0:d8:7c:f3:7a:a0:64:f1:62:fa:e5:8d:94:ab:43:a2:56:59:
4d:22:a9:8b:85:16:4a:ce:de:b2:58:db:cb:dd:2f:22:3d:8a:
e6:e1:5b:68:1a:e7:a4:56:b5:23:a4:7a:bb:c9:7b:6f:f9:1d:
00:4b:44:a1:2d:84:66:b1:eb:8a:5e:f6:00:4a:d7:b4:a4:d5:
2f:75:2b:2f:48:1b:ba:c1:98:df:fa:1d:2a:9c:d1:e6:0d:95:
fe:ee:4c:08:f6:51:9f:28:a5:48:78:3f:59:8b:64:f0:be:e7:
79:a7:7f:36:43:ae:31:c1:c1:11:69:4f:14:24:08:e1:d9:0f:
7a:ce:d8:c5:5c:0b:be:35:32:a8:1b:ec:0c:04:8e:55:d1:e2:
08:12:45:35:18:29:17:c9:7d:6c:74:95:9e:e4:02:40:02:6f:
3a:35:c8:59:80:92:f8:62:34:23:26:92:0d:62:b5:de:65:51:
9b:64:c9:35:66:92:c3:ff:41:9a:d3:24:15:2b:f4:cc:65:3c:
9c:ee:b5:fd:7a:1c:c8:c1:9e:06:08:9c:28:81:61:ea:8c:c4:
cb:3a:9b:b6:f9:65:e0:13:15:c7:98:7b:04:91:77:8d:d1:8f:
0f:b6:6b:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ044uSxyHe0swrrthWrMbliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzI5MDkxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTFlZjI4MzlkOTdkNWQzNzQ5NGY4Njk4YTRkNjllMDA2ZDMzNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTFDB4VY24rzVJJpnuW/xIpsEdxu
PkXFgNF9sYUNNGOK1xLYhSlsQfuAjP4JdG7UMdAZmb7UyqOlWs5MTQ3gUi2hGvXh
YhCDUnylQtiojByq6Dm89ZEV2WAWySRt3qpaItV4mX6DwZi0WvbOcD1XAOK2J/Ek
G8qb3WU/do9MPsmnSoREJl412AZhb9i7dCStlVQ1IxH2k3SQkgoOcH/M7uEC1y0s
vFehDpk2cJNAhbw7IUUyIL9jaM5O7jT7ZHob2bQ0btt/p/pW/nZIS03Pepv5kNDA
D2pVSJu5CCZ/PcetfrurBMT3eF5DcdJoouM8oeEnYwNExeMmyOP51wD7eQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP4e8oOdl9XTdJT4aYpNaeAG0zc+MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvX2g3eWc1MlgxZE4wbFBocGlrMXA0QWJUTno0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXrfsAwQA
XrfxMA0GCSqGSIb3DQEBCwUAA4IBAQCb6sJSvUVa6zbozKSUA8H+Eknw2HzzeqBk
8WL65Y2Uq0OiVllNIqmLhRZKzt6yWNvL3S8iPYrm4VtoGuekVrUjpHq7yXtv+R0A
S0ShLYRmseuKXvYASte0pNUvdSsvSBu6wZjf+h0qnNHmDZX+7kwI9lGfKKVIeD9Z
i2Twvud5p382Q64xwcERaU8UJAjh2Q96ztjFXAu+NTKoG+wMBI5V0eIIEkU1GCkX
yX1sdJWe5AJAAm86NchZgJL4YjQjJpINYrXeZVGbZMk1ZpLD/0Ga0yQVK/TMZTyc
7rX9ehzIwZ4GCJwogWHqjMTLOpu2+WXgExXHmHsEkXeN0Y8PtmtP
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:34:53 2026 by rpki-client