Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xF2ZwwrBYfK1DI7SlkrEf-sa5ZQ.roa
File: xF2ZwwrBYfK1DI7SlkrEf-sa5ZQ.roa (raw, json)
Hash identifier: MyRlxoQidvJo/zuHta4uYvm86h/NWQm+x++NU9S7A/0=
Subject key identifier: C4:5D:99:C3:0A:C1:61:F2:B5:0C:8E:D2:96:4A:C4:7F:EB:1A:E5:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C32C9D5938404BA7AECBF1C83B6F0E0A4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xF2ZwwrBYfK1DI7SlkrEf-sa5ZQ.roa
Signing time: Fri 06 Feb 2026 11:50:14 +0000
ROA not before: Fri 06 Feb 2026 11:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 94.183.166.0/24 maxlen: 24
94.183.180.0/24 maxlen: 24
217.60.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:32:c9:d5:93:84:04:ba:7a:ec:bf:1c:83:b6:f0:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 6 11:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c45d99c30ac161f2b50c8ed2964ac47feb1ae594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:a3:fd:ad:2c:47:c8:66:f2:4c:9a:31:24:
41:f1:f3:e1:84:fa:c0:f5:38:23:46:2c:54:42:1a:
4e:81:9f:6a:4c:6b:e4:69:26:8c:ca:ce:28:ae:17:
53:35:0b:9e:b5:f5:c7:66:9b:67:b8:4b:0e:2d:bf:
81:ed:01:d1:fe:47:28:69:23:e1:f1:4c:2a:ac:fd:
c0:48:ec:d1:a2:3d:37:c5:fd:c3:b1:bc:b7:7b:4f:
4f:ef:42:df:fb:35:48:48:2e:64:0b:25:f0:33:ae:
86:79:ea:26:4d:99:ad:c8:4b:06:d5:d6:f1:96:7b:
dd:1b:2f:20:54:d7:71:b9:89:0c:7d:e3:06:97:d9:
bd:f0:72:20:52:0b:d1:ab:f7:21:93:97:3e:95:60:
10:ae:80:0a:a0:a6:10:30:b3:47:17:db:70:75:fc:
db:f1:60:b2:b6:3e:dc:7e:47:22:74:47:81:94:cb:
33:e0:ff:14:40:b7:4e:ce:fa:1b:a2:91:f4:9b:8b:
b6:8c:69:76:7e:6d:15:9e:04:a2:c5:a7:8f:f8:ba:
96:6a:cc:20:26:68:8e:23:5a:70:db:3f:6e:76:9a:
63:e2:4b:41:3b:72:d1:c5:b1:a4:60:98:1e:40:bc:
3a:a6:d4:8b:3a:bb:a2:c9:69:0a:de:85:eb:ed:30:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5D:99:C3:0A:C1:61:F2:B5:0C:8E:D2:96:4A:C4:7F:EB:1A:E5:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xF2ZwwrBYfK1DI7SlkrEf-sa5ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.166.0/24
94.183.180.0/24
217.60.243.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6b:cc:85:ba:2b:5c:10:47:ac:12:f7:66:c7:11:3c:b8:46:
7a:49:2c:d1:d8:b9:b9:bd:6e:40:43:cd:c8:95:d0:b3:41:a8:
a3:4d:e5:a5:d1:30:d2:04:42:fa:47:c7:55:a0:50:93:c5:26:
32:00:ef:19:13:82:c6:73:4e:26:d5:59:8b:49:a9:5a:09:e2:
0f:98:cc:6c:e2:54:18:00:58:c8:c2:ad:89:59:ec:b7:50:83:
e0:6a:18:95:ce:36:54:b3:1a:85:a2:34:6e:11:35:d8:b6:3d:
67:4b:9c:05:d4:31:23:25:c6:bb:87:3f:aa:ed:49:df:3c:db:
78:d6:42:05:31:6a:f8:6d:fe:15:e6:b8:dc:30:73:ab:98:99:
53:cb:95:c9:24:e7:08:ef:a1:fe:08:67:35:4e:30:64:4a:ce:
16:96:d0:8c:3a:7f:9c:b4:6a:99:86:59:0f:1b:84:69:b0:5d:
83:12:9d:01:0d:ee:a7:02:27:3d:58:ce:28:47:f3:75:51:27:
5c:7d:e2:e9:e6:dd:16:d3:a4:87:7c:8c:11:b7:e3:61:79:f5:
84:da:96:e2:26:e0:ef:d8:34:a8:52:a8:12:1f:60:cd:42:d9:
94:07:50:8b:75:90:12:95:1e:f6:b8:92:df:0d:97:e3:d8:03:
b5:ed:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:44 2026 by rpki-client