Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6vUv5751H1zMKf96oCsT0E6jTHE.roa
File: 6vUv5751H1zMKf96oCsT0E6jTHE.roa (raw, json)
Hash identifier: AIfyf4buKIScWDa8dqDOj7ILJlEnZ2s7DzKKUq5MYCE=
Subject key identifier: EA:F5:2F:E7:BE:75:1F:5C:CC:29:FF:7A:A0:2B:13:D0:4E:A3:4C:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DB67E5DA849F1EE44DAA22C8777DF9235
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6vUv5751H1zMKf96oCsT0E6jTHE.roa
Signing time: Wed 22 Apr 2026 18:40:28 +0000
ROA not before: Wed 22 Apr 2026 18:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206507
IP address blocks: 94.183.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b6:7e:5d:a8:49:f1:ee:44:da:a2:2c:87:77:df:92:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 22 18:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaf52fe7be751f5ccc29ff7aa02b13d04ea34c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:af:58:f1:87:ee:d5:87:79:f6:7a:b0:63:
15:23:e9:e2:d6:2a:46:6a:6a:50:32:2a:85:c1:dd:
fe:5a:59:22:89:a3:c5:8d:5a:48:58:fa:46:4e:95:
81:62:15:42:f6:f6:89:27:a1:5a:ad:50:f1:da:07:
d3:9e:58:1c:0c:aa:c0:38:6f:2b:54:31:d0:43:f0:
26:76:ce:b8:66:71:2e:bf:06:3f:bb:01:8a:eb:da:
ed:6e:9a:a8:0f:6c:86:58:61:0b:81:e6:5e:77:56:
e2:a4:a9:87:2f:bb:8f:85:99:09:7b:8b:1e:ab:85:
64:05:b4:8f:90:bb:30:c7:b5:42:f8:a6:bc:66:34:
66:03:b1:c3:50:90:f5:af:fc:48:ab:0c:13:f4:2f:
6a:64:b1:76:55:62:c5:9f:4a:27:ab:ca:6c:b8:38:
79:4f:66:dc:a7:01:b1:00:6f:dd:82:55:a2:c9:9b:
a7:6b:40:cf:73:27:81:c6:95:cc:e8:69:5f:13:8f:
3d:13:68:75:d0:49:b3:ac:17:d0:38:c4:22:e7:86:
7f:28:22:da:dc:c6:35:3b:fe:67:84:7a:61:f7:cd:
5b:ff:28:82:c7:6b:96:69:d2:c1:92:c1:bb:67:57:
e5:d5:54:e6:de:1f:46:d8:8c:23:c7:c5:6b:27:9e:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:2F:E7:BE:75:1F:5C:CC:29:FF:7A:A0:2B:13:D0:4E:A3:4C:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6vUv5751H1zMKf96oCsT0E6jTHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.172.0/24
Signature Algorithm: sha256WithRSAEncryption
57:67:13:01:0b:8b:81:e3:08:3b:e7:31:98:5c:a4:53:77:67:
03:de:88:4f:d1:f7:c4:e3:a7:ff:a8:da:d3:80:dd:e4:4c:14:
bc:c4:d3:3f:74:0f:3d:b0:c2:03:f8:cf:a1:0d:63:f4:6a:a1:
82:0e:b5:9b:45:9e:27:c3:4d:59:b8:ed:6b:0a:90:50:67:e5:
aa:f6:86:b7:00:2d:62:7d:15:9e:b2:28:4f:09:c3:2d:93:c2:
04:78:fc:54:ea:3d:9c:f8:cd:05:3f:d7:38:0b:1c:ca:11:99:
6f:3c:69:35:fe:1d:75:16:96:3b:e1:02:76:d2:a7:df:ca:58:
72:61:72:f4:2a:de:23:14:fa:9e:41:a9:65:38:06:b1:85:cc:
85:26:a7:1a:92:18:b9:02:e1:91:1f:43:e1:be:3a:47:49:95:
2b:b2:cb:6d:2d:dd:1d:01:33:7b:8c:39:c0:84:2a:0a:eb:50:
e3:47:58:1f:ec:e9:a3:27:8f:03:4d:6a:41:79:61:5d:41:68:
2f:58:d8:94:6b:1f:a2:32:3a:13:25:b9:c0:78:33:ad:8d:a4:
0e:38:07:e9:87:19:fd:f4:d1:17:55:16:09:52:05:6c:8a:a1:
52:63:3f:86:e1:ff:fd:7a:55:fe:35:27:be:a0:0d:0b:4b:99:
59:cc:63:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:37 2026 by rpki-client