Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LZcYjMaYcUrbZTF6GNbMd0d4HYk.roa
File: LZcYjMaYcUrbZTF6GNbMd0d4HYk.roa (raw, json)
Hash identifier: oXoCHQjbQS/Q8RNS+5qzVCg2CEO5gK6dYuaJoiDPtf8=
Subject key identifier: 2D:97:18:8C:C6:98:71:4A:DB:65:31:7A:18:D6:CC:77:47:78:1D:89
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C144A61011B67BA32B177970690952E4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LZcYjMaYcUrbZTF6GNbMd0d4HYk.roa
Signing time: Mon 09 Nov 2026 17:04:24 +0000
ROA not before: Mon 09 Nov 2026 17:04:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212056
IP address blocks: 94.183.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:44:a6:10:11:b6:7b:a3:2b:17:79:70:69:09:52:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 9 17:04:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d97188cc698714adb65317a18d6cc7747781d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:7f:6d:12:78:74:89:a5:29:3f:c7:92:b4:
56:4b:c3:ea:1f:be:e6:aa:07:25:e6:65:58:74:61:
24:6a:bf:e8:51:f7:f5:a9:ea:97:3e:2c:0d:d7:64:
16:9a:7f:b8:2e:7f:84:36:9f:94:09:93:ed:9b:66:
47:3d:11:26:90:c7:13:4c:86:b4:6f:28:90:76:2c:
dc:08:9e:fd:0e:ca:6b:58:f8:64:f4:25:cb:61:61:
d6:fa:62:f6:5e:70:90:36:90:b4:fc:ab:56:25:6b:
95:fa:22:b6:73:eb:a0:72:5e:6d:af:ec:24:86:99:
56:e2:67:2c:0f:dd:04:d0:03:3a:30:d8:95:2d:20:
79:f7:3b:aa:7f:a1:f0:62:2f:7b:53:f6:70:84:98:
0e:3a:e5:7c:ce:ac:d5:33:88:39:f8:4e:78:2c:ca:
6d:b8:56:99:98:13:8e:f0:ab:b4:e1:93:14:d0:98:
96:33:fd:98:59:ad:1b:f0:ba:ea:d4:c0:bc:a9:cb:
c9:79:a5:40:56:11:56:95:3d:a4:9d:e6:cc:65:fe:
32:7b:17:e7:ed:b5:58:ba:b0:d7:96:cf:f8:7b:d4:
aa:f1:c4:1e:55:68:b2:ca:ad:2a:7d:3d:85:00:b7:
19:20:f0:69:22:30:3a:86:00:58:74:41:38:93:07:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:97:18:8C:C6:98:71:4A:DB:65:31:7A:18:D6:CC:77:47:78:1D:89
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LZcYjMaYcUrbZTF6GNbMd0d4HYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.223.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5e:5e:a9:e7:45:9f:97:32:7f:b4:d9:cf:8a:85:23:f3:b1:
cb:d3:04:cd:cb:b4:07:bb:92:46:fb:46:ed:f3:a5:d0:0f:94:
21:eb:d4:8b:05:3b:a9:d2:56:f8:e8:30:8c:fb:a3:c5:ee:c7:
0f:bd:d7:50:93:22:ac:d2:b3:58:9d:d6:a5:c6:02:e2:b6:23:
87:92:65:97:b6:2d:d1:de:5d:50:6f:c4:3a:23:73:ef:61:a9:
34:52:dd:a2:67:f2:f9:24:9e:4b:b6:a8:f9:89:7d:e9:ce:b6:
a3:66:a9:f0:55:14:f6:84:f6:86:4c:2a:6d:7d:eb:b4:c3:14:
91:d3:e9:c2:27:53:30:05:eb:d8:2a:f5:dc:5c:df:d6:ef:f4:
f6:05:55:20:d2:06:2e:31:bc:a2:97:79:5f:ca:6e:cc:5e:74:
9c:0a:88:56:17:ff:02:b4:ac:ad:13:e8:91:dc:24:99:b1:f6:
35:24:64:4c:64:45:eb:4f:87:8c:7e:77:c6:fc:cc:7f:ca:47:
b1:34:45:e1:c9:13:ac:31:ed:58:2e:c6:ea:28:54:db:8e:30:
45:b7:4a:62:07:0c:95:9e:6c:76:93:c2:90:c9:dc:4c:8a:cf:
51:0f:1f:95:53:d4:d1:33:41:e9:2f:6a:4f:37:ff:9d:22:a7:
32:e3:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:47:04 2026 by rpki-client