Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8MHD7uM92pMmFKKBgiIzdFPc8Vc.roa
File: 8MHD7uM92pMmFKKBgiIzdFPc8Vc.roa (raw, json)
Hash identifier: t/+15RCTL18XK9m7I9gaq2hpJVzq+hZ8+V99E4SkM24=
Subject key identifier: F0:C1:C3:EE:E3:3D:DA:93:26:14:A2:81:82:22:33:74:53:DC:F1:57
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A19B7C5BB14263D389343EBC3523E93F17
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8MHD7uM92pMmFKKBgiIzdFPc8Vc.roa
Signing time: Mon 02 Nov 2026 08:59:40 +0000
ROA not before: Mon 02 Nov 2026 08:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213069
IP address blocks: 94.183.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:7c:5b:b1:42:63:d3:89:34:3e:bc:35:23:e9:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 08:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0c1c3eee33dda932614a2818222337453dcf157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:48:31:7a:9c:4b:fc:90:21:7a:4a:b6:84:
14:97:4e:dc:cc:6c:5e:43:bd:a4:07:01:64:50:a4:
5c:3d:b5:39:9f:ee:86:61:dd:6a:50:9c:ab:df:24:
ec:4c:33:36:f0:8d:98:40:10:da:18:31:80:4c:c8:
10:b5:3a:c4:7a:d9:a5:93:51:82:ef:b6:4e:fd:ab:
98:37:6b:c7:b8:2c:37:4c:83:9d:0c:12:33:dd:b4:
00:88:5b:f7:14:32:fd:d0:10:a8:78:ed:40:73:2d:
f6:5b:0e:b4:b3:43:03:2f:db:77:8a:f0:fe:93:bd:
a0:a5:46:7c:e2:93:6b:9e:ac:5a:62:71:c0:8c:c7:
b4:7a:b2:01:93:7d:fd:81:11:e5:c5:ac:bb:25:6d:
7e:94:45:c5:9a:c2:07:06:98:c3:26:9f:bb:76:98:
ed:13:15:4a:42:f4:8e:b3:00:0d:01:a0:c2:fe:0c:
f3:3a:9f:ed:7c:72:d3:90:48:84:01:ab:5b:f4:a9:
c2:a8:b2:8b:e1:28:a1:0d:b2:e4:31:b0:59:f3:72:
76:12:d9:2b:09:ee:78:93:70:38:13:3f:bd:5c:6c:
8d:36:03:25:e6:c1:1f:6b:21:ac:79:b4:ff:b2:0e:
a5:3e:c6:6a:13:8a:9d:2d:02:82:85:0d:67:5f:2a:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C1:C3:EE:E3:3D:DA:93:26:14:A2:81:82:22:33:74:53:DC:F1:57
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8MHD7uM92pMmFKKBgiIzdFPc8Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.193.0/24
Signature Algorithm: sha256WithRSAEncryption
05:22:5f:70:dd:70:f3:aa:03:c7:b7:68:47:e6:14:e4:43:80:
2d:27:f7:d2:dd:03:ac:77:a7:47:0c:b9:07:fc:fd:01:8e:82:
2c:1e:b9:33:f9:07:63:ae:c9:f5:4b:18:fd:66:79:8b:6f:6f:
0f:37:7d:5f:71:5a:a1:0f:9c:b9:12:0a:0c:f3:e4:6e:fc:a8:
d4:67:87:ca:3e:65:d6:1e:89:67:23:a2:d3:8a:24:c4:99:74:
e6:d1:02:51:2f:16:4c:5a:f7:de:64:e1:f3:b9:be:2d:fe:d5:
53:d0:0c:e2:80:bc:ec:b3:49:0e:68:e5:3d:5f:6d:75:45:34:
30:32:98:7f:e0:1b:6b:3a:24:ef:ca:1e:ff:8e:6b:a0:58:d3:
85:94:d9:c0:8c:c5:e9:a9:b1:d8:ca:f2:57:2c:21:e5:2f:6e:
7b:a2:0c:9c:5e:16:38:e5:ed:10:80:23:f7:b1:df:82:2c:8a:
f3:6a:6c:f3:0e:a4:9c:dc:e8:18:cd:12:8d:f4:9f:c1:29:63:
2c:0c:d2:3a:da:ef:ee:b5:c7:5a:3d:d1:6d:90:60:e1:5a:01:
e9:de:3c:7c:6b:b0:14:cd:20:0c:4c:fb:64:77:ae:46:ab:05:
28:69:02:06:33:7a:91:71:05:bb:54:1e:0a:11:66:90:e9:61:
f4:62:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:28:55 2026 by rpki-client