Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CBlrHffyW30tLT175uFbbNPVVzo.roa
File: CBlrHffyW30tLT175uFbbNPVVzo.roa (raw, json)
Hash identifier: uBUiIFvyVUK8QTKZsJ9D0lcb0wnBEz4RssEIJTKm518=
Subject key identifier: 08:19:6B:1D:F7:F2:5B:7D:2D:2D:3D:7B:E6:E1:5B:6C:D3:D5:57:3A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1B6DD26645CDEC49C58727BB0A7DC0EE2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CBlrHffyW30tLT175uFbbNPVVzo.roa
Signing time: Sat 07 Nov 2026 16:35:09 +0000
ROA not before: Sat 07 Nov 2026 16:35:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218356
IP address blocks: 94.183.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b6:dd:26:64:5c:de:c4:9c:58:72:7b:b0:a7:dc:0e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 7 16:35:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08196b1df7f25b7d2d2d3d7be6e15b6cd3d5573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:d2:44:f4:1d:b9:08:9a:24:d8:f7:0e:4b:
70:1d:e4:45:74:dd:ba:92:1d:5b:10:bd:e6:df:58:
5c:5a:f9:00:13:66:61:4d:0d:9e:ed:df:89:c9:b8:
73:e6:7f:f0:d4:ee:37:b0:7d:20:ac:f9:09:22:ed:
3b:f1:a4:eb:f7:83:28:07:f9:9d:27:a8:e2:c6:40:
7a:c5:aa:01:69:4b:d0:bc:9a:f3:94:3b:6c:49:80:
95:33:b1:63:f3:c8:ee:0a:f2:ed:6d:92:f9:5d:bf:
3a:9d:d6:4a:36:8a:1e:08:7e:a4:fd:15:1a:0e:a5:
52:a3:8f:7a:79:14:8b:5a:80:25:81:e9:b0:82:f7:
ed:dc:61:dc:d1:c6:25:bc:3e:11:21:88:21:ab:f1:
73:c9:8d:f7:7c:28:95:5f:4e:d9:69:0f:36:1c:63:
dd:92:61:78:2a:ce:26:63:4e:a4:f3:79:51:5a:3f:
3c:dd:5e:39:9e:de:01:b2:fd:a4:01:3d:ab:b1:68:
65:e8:5a:67:4c:7d:17:d7:9a:5f:57:34:17:67:b2:
a8:c7:78:c8:2b:eb:53:3a:37:29:d2:a4:5d:ad:6f:
9a:5e:db:26:b9:28:44:9d:35:66:b6:e4:6e:cd:7f:
07:f1:28:0a:a0:14:dd:dc:a7:08:a5:9a:96:b8:7f:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:19:6B:1D:F7:F2:5B:7D:2D:2D:3D:7B:E6:E1:5B:6C:D3:D5:57:3A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CBlrHffyW30tLT175uFbbNPVVzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.162.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c4:67:2e:02:ab:bb:5a:a5:32:59:e4:c6:32:79:73:4a:b4:
bc:1f:e9:98:bf:40:7f:ad:8f:be:fd:37:57:b1:93:59:49:f0:
e3:75:e5:90:3f:c8:af:96:3e:1a:21:f7:02:8c:cd:73:0c:84:
73:eb:61:57:a8:5c:9a:97:4d:c7:bf:36:7d:4d:45:9c:c7:30:
c3:98:c2:fe:db:c6:74:f3:39:ba:f9:1f:91:d2:6a:9e:51:e3:
63:be:dd:f5:62:17:78:5c:5c:90:01:e2:f4:f7:b9:f4:74:e1:
2f:85:e8:df:19:93:24:61:dd:43:b8:be:5b:ab:1a:84:d9:e6:
7b:48:99:24:4e:f1:92:c9:65:05:eb:a9:5e:f3:79:3b:6e:53:
e1:9a:6a:3a:49:5a:44:11:57:b6:83:c2:cf:80:eb:90:64:25:
d7:93:07:f4:8a:9e:18:26:0d:a0:c2:0e:3f:e3:83:f5:5e:16:
ec:4e:8d:c6:9f:92:d7:71:3b:7b:d2:e3:64:42:b0:c9:f5:70:
e2:d6:d8:5c:1d:17:7d:96:0e:f4:f1:ce:a7:96:09:dd:80:fa:
af:35:f8:06:6d:1d:52:55:f2:19:bd:17:4f:78:d3:16:2e:7b:
8f:2e:54:d8:ca:66:98:ca:4a:53:00:6a:80:c4:af:fd:18:57:
33:5a:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:46:04 2026 by rpki-client