Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V-2p714q80-wxZ6l654gI8hInr0.roa
File: V-2p714q80-wxZ6l654gI8hInr0.roa (raw, json)
Hash identifier: AoMa911N0wmWeaE5rVPzCIfYK4icv8roxdxfllWk+tw=
Subject key identifier: 57:ED:A9:EF:5E:2A:F3:4F:B0:C5:9E:A5:EB:9E:20:23:C8:48:9E:BD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CFC48BB60BFC0A5319FB6A4BAFEFB1CC1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V-2p714q80-wxZ6l654gI8hInr0.roa
Signing time: Tue 17 Mar 2026 14:52:30 +0000
ROA not before: Tue 17 Mar 2026 14:52:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 94.183.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:48:bb:60:bf:c0:a5:31:9f:b6:a4:ba:fe:fb:1c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 17 14:52:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57eda9ef5e2af34fb0c59ea5eb9e2023c8489ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:5f:81:21:46:09:a2:08:08:2a:b0:9b:bd:
b3:4e:09:30:c8:34:e6:9a:53:06:00:e9:0f:cf:d5:
77:ce:8b:5e:df:de:23:5b:90:28:e0:c6:bb:94:4a:
74:c7:12:6c:99:6c:ef:7e:4a:92:e9:41:82:f6:16:
f6:39:2a:4b:a0:13:af:5f:12:a5:8a:6a:ce:d5:f6:
d8:6c:f0:08:b1:85:68:4b:9f:c3:ec:11:d3:78:81:
08:1d:94:7c:5e:4d:12:95:c9:e2:ba:45:57:42:33:
d7:2c:0a:c3:e4:a7:6a:8b:26:6d:cb:e7:cb:e5:01:
3d:1e:07:9b:9f:31:db:a5:43:de:66:88:ba:b6:55:
84:67:47:58:ef:62:25:73:9b:21:79:80:24:42:e5:
72:ac:0e:f8:de:62:03:8e:12:71:d0:22:9b:ad:26:
5e:cb:37:8b:b6:f0:56:c2:08:81:4e:f0:64:e9:41:
e0:ae:20:17:f9:3f:a7:d0:df:42:c5:60:e7:9d:e4:
71:7a:bd:ea:98:e3:45:c0:53:a9:15:69:8c:44:e9:
99:e0:db:0e:af:42:99:04:64:f6:bb:e8:f6:dc:a4:
cd:fb:5c:64:01:05:c2:4a:fb:24:46:62:60:81:c1:
cc:9a:e7:96:a7:b0:1d:66:be:96:bd:89:ef:2d:6f:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:A9:EF:5E:2A:F3:4F:B0:C5:9E:A5:EB:9E:20:23:C8:48:9E:BD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V-2p714q80-wxZ6l654gI8hInr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3d:48:20:ab:b9:1a:34:55:86:f2:f9:be:04:d6:d9:fc:21:
69:a1:96:e0:42:cf:be:69:81:3f:d2:6e:4f:6d:87:cd:0f:59:
5c:ce:18:32:5e:c7:fe:06:4e:2c:a7:f8:95:bf:52:54:2d:43:
19:bb:9e:4a:d0:eb:a9:1b:30:ee:5d:a4:34:10:80:2d:d4:38:
73:3d:90:ec:6c:35:01:68:3c:eb:d7:19:da:ed:d3:db:94:9f:
9a:18:95:ee:fb:ac:73:b5:fb:26:c5:78:83:3a:1a:28:91:6a:
9b:1b:17:7d:ad:b4:f6:09:12:f0:d3:7d:45:65:6a:1d:82:85:
1c:5f:a9:0f:7e:e7:1b:6c:b7:f0:29:03:9d:0e:ed:df:87:a8:
46:3e:09:c5:87:c8:6e:2f:66:09:42:b2:0a:81:ca:d5:3c:f7:
f1:07:30:c3:d0:b9:3f:47:1c:83:bb:39:57:f0:37:cc:02:09:
ab:46:0e:f4:06:d5:e5:64:a4:1f:a9:9c:7c:45:59:8d:0d:d1:
bd:df:d6:14:c1:aa:9f:11:40:74:c8:09:1e:8d:9d:28:97:33:
bd:14:a8:c2:df:82:6e:3e:18:db:d0:ea:a4:38:8a:7b:1e:0d:
c8:38:ba:48:ac:5d:18:cc:d2:53:cc:f1:28:18:d6:5a:31:ce:
2f:97:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:19 2026 by rpki-client