Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qP0lH5mePGv0ml_DtR-fC8V-hfQ.roa
File: qP0lH5mePGv0ml_DtR-fC8V-hfQ.roa (raw, json)
Hash identifier: AGACfedtytwcbF24zMXelDLtwC5qgGPB5DACHPQ4ovQ=
Subject key identifier: A8:FD:25:1F:99:9E:3C:6B:F4:9A:5F:C3:B5:1F:9F:0B:C5:7E:85:F4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07097594487668A88241AFD2F37008CEA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qP0lH5mePGv0ml_DtR-fC8V-hfQ.roa
Signing time: Sat 05 Sep 2026 08:02:41 +0000
ROA not before: Sat 05 Sep 2026 08:02:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 94.183.166.0/24 maxlen: 24
94.183.180.0/24 maxlen: 24
217.60.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:97:59:44:87:66:8a:88:24:1a:fd:2f:37:00:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 5 08:02:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8fd251f999e3c6bf49a5fc3b51f9f0bc57e85f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:38:5f:be:43:d5:0c:d0:08:52:3b:55:3c:
7e:17:43:9b:eb:ee:0a:f2:46:89:90:f0:00:d0:fd:
f3:17:d1:c0:f4:1c:cf:1e:e1:77:0d:2d:00:16:38:
1a:26:8a:76:bc:ca:78:57:62:01:f9:db:45:56:37:
eb:c0:a1:20:f4:b9:d7:49:35:60:3b:8d:4b:c9:45:
b3:a9:75:bb:78:d4:17:d5:5a:81:62:ba:df:a6:f6:
43:6f:5e:f2:68:84:40:cc:2d:03:b3:9e:69:f3:0e:
97:d3:d3:88:4b:31:06:f9:11:0e:ea:36:8f:79:74:
0f:15:c2:98:d8:81:72:cc:5c:20:e7:5f:67:3d:70:
aa:9f:09:9c:5d:d8:22:75:47:b1:95:9c:64:17:a7:
4d:93:47:af:e5:6b:d2:9d:41:ba:a3:04:40:4b:25:
b4:04:1b:5e:50:da:52:b7:2d:0d:3a:a9:9e:78:42:
e8:4d:81:ac:33:f7:63:d0:ba:32:3a:4e:c0:cb:92:
4f:dc:4c:35:f2:d1:99:15:05:05:3c:39:c7:aa:43:
b5:61:95:02:c8:ae:b4:bb:6d:8d:16:a8:13:a4:9c:
21:c5:94:ef:0e:56:68:68:fa:db:85:06:2e:ce:bc:
5c:0e:5d:64:b0:57:e6:e1:ba:d5:0c:63:72:f1:c9:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FD:25:1F:99:9E:3C:6B:F4:9A:5F:C3:B5:1F:9F:0B:C5:7E:85:F4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qP0lH5mePGv0ml_DtR-fC8V-hfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.166.0/24
94.183.180.0/24
217.60.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:39:a2:df:06:29:88:8d:ea:00:f5:f8:57:24:f8:65:d3:c3:
fa:b6:f3:48:7a:d6:07:2f:1c:09:06:00:e2:4f:87:f5:6e:08:
a6:3f:36:b5:6a:cb:68:a1:e4:9d:7b:f9:dc:0e:11:9d:17:e1:
82:2f:44:6d:55:c4:c3:87:d7:10:f9:0f:da:61:c1:b9:d9:f5:
d2:10:cb:0f:fa:da:a5:7e:4b:73:50:38:de:0b:09:84:73:e1:
e5:86:ad:ea:47:aa:1e:6b:c1:15:26:d3:80:29:3e:e4:48:e9:
e1:94:5b:6c:f3:e8:41:bf:af:5d:dd:e5:6c:e2:25:75:e0:7f:
16:6d:78:6d:2d:c5:c9:18:e6:b7:9a:26:85:c5:1b:10:d5:b5:
85:9b:3a:a2:1e:24:71:a7:23:e9:9b:38:46:0e:e3:08:33:f2:
7a:76:1e:a2:e7:ff:ae:04:fc:7f:d4:d4:dc:9f:ab:a0:80:8c:
9b:f8:73:49:9c:0e:f3:88:a1:8b:de:6b:33:bd:3d:52:75:46:
de:0a:cb:ec:41:db:16:55:37:02:97:2a:87:59:f0:2c:a5:94:
fd:ed:ae:68:1d:3e:98:3e:a8:9c:21:37:f0:47:06:95:1c:f6:
c5:48:8a:25:f5:08:0d:22:bd:e6:57:88:ca:16:b9:6c:82:c5:
9a:0e:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:18:36 2026 by rpki-client