Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cKbFw4oJLRvpmuDGTVtv83tvSOI.roa
File: cKbFw4oJLRvpmuDGTVtv83tvSOI.roa (raw, json)
Hash identifier: FCnrsCThO+We7eV74LkXDycNUGV+UBzf2jQ9FFSnRcY=
Subject key identifier: 70:A6:C5:C3:8A:09:2D:1B:E9:9A:E0:C6:4D:5B:6F:F3:7B:6F:48:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C7A57B59A896260CB661FAED6BFC5E1D8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cKbFw4oJLRvpmuDGTVtv83tvSOI.roa
Signing time: Fri 20 Feb 2026 09:18:14 +0000
ROA not before: Fri 20 Feb 2026 09:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214431
IP address blocks: 94.183.156.0/24 maxlen: 24
94.183.157.0/24 maxlen: 24
94.183.160.0/24 maxlen: 24
94.183.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:57:b5:9a:89:62:60:cb:66:1f:ae:d6:bf:c5:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 20 09:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70a6c5c38a092d1be99ae0c64d5b6ff37b6f48e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:38:4d:ac:de:8a:14:c2:2d:6a:f9:d4:17:
ea:01:92:3b:8f:79:4d:4e:56:1e:ec:a5:e2:b2:09:
3d:12:a7:b4:1e:ee:49:94:2d:68:a1:ed:29:57:a4:
ba:8b:5c:70:35:0b:86:6c:45:bc:03:20:3d:e4:b9:
ef:54:84:56:85:eb:2f:a3:56:9b:68:e4:1d:04:cd:
a0:63:89:d4:bc:c4:1c:15:27:a8:08:67:de:14:68:
9d:4d:80:48:6f:d0:a5:79:c4:fa:92:6b:c4:e5:df:
98:25:39:d5:3a:04:d1:29:44:44:90:99:e9:7e:b9:
9e:95:f4:44:56:d7:8b:a0:91:1a:d6:33:bd:38:46:
99:5c:0b:36:ee:2a:2d:08:8b:6e:0c:d3:4b:96:e6:
1f:9b:8b:f2:46:ca:54:b0:c0:f3:33:4b:14:98:f0:
3d:65:39:5a:39:f1:b1:ab:9b:b2:ff:76:6c:9a:89:
cb:bc:81:12:a9:06:4e:f6:e0:db:a8:47:79:90:c3:
11:b3:aa:1c:99:eb:18:09:be:b7:8e:5a:9a:f7:84:
cc:49:1b:45:a6:b7:d6:4d:56:fb:de:22:8f:25:39:
cc:ef:45:6b:1e:aa:d0:83:24:03:43:74:7d:53:2f:
e2:48:66:82:b0:54:4a:84:bd:c5:f0:39:31:7a:dd:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A6:C5:C3:8A:09:2D:1B:E9:9A:E0:C6:4D:5B:6F:F3:7B:6F:48:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cKbFw4oJLRvpmuDGTVtv83tvSOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.156.0/23
94.183.160.0/24
94.183.176.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ac:57:b0:52:f0:c7:14:d7:37:b2:51:80:9a:00:79:82:33:
ac:43:93:74:7e:f3:01:43:f5:23:ed:a7:8d:4f:53:06:87:d4:
71:9d:fb:6f:21:e3:f0:2d:8b:68:58:3f:26:d3:76:91:b9:af:
c7:0e:d3:57:46:ae:c0:5a:8d:84:0a:0d:bb:4d:e3:1f:ad:77:
2a:f2:eb:fb:21:d2:ea:c1:8b:27:3e:94:27:73:cc:23:06:83:
94:1e:7d:1a:79:c7:e0:86:d1:1e:7c:2a:56:ee:59:40:f3:b6:
8b:6f:d8:6f:e3:2a:77:f7:0f:a7:6c:5b:92:a7:b1:5c:a3:ac:
0d:9a:48:b5:75:6e:51:96:cf:97:6d:fd:f5:cf:d6:a6:b3:91:
67:19:de:93:c9:a8:78:82:7f:86:77:63:15:99:c1:c3:0a:d2:
32:ae:f1:af:37:2a:7f:64:2f:85:ed:61:cb:30:a2:a5:bd:77:
90:de:df:5a:a0:7d:54:d0:d4:da:29:4e:2f:d7:d5:ec:76:69:
82:11:8a:1a:8e:40:00:19:45:e2:5f:c8:0b:15:aa:f8:5f:6f:
fc:02:f4:82:68:8c:e4:5c:60:86:20:0a:79:b9:16:0d:9e:de:
06:14:1b:0a:c2:17:97:9a:27:4b:98:b3:19:e5:64:b2:7e:b4:
df:e4:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:29 2026 by rpki-client