Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/az1-TGZRgwu6kpegBkCXvpaWGBo.roa
File: az1-TGZRgwu6kpegBkCXvpaWGBo.roa (raw, json)
Hash identifier: kGo8clBLmenqm/hNIbFqnahrHgny0WPjQrg7QvBcIrg=
Subject key identifier: 6B:3D:7E:4C:66:51:83:0B:BA:92:97:A0:06:40:97:BE:96:96:18:1A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C04AB6213E3920D63819E0235122E9A8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/az1-TGZRgwu6kpegBkCXvpaWGBo.roa
Signing time: Mon 09 Nov 2026 12:31:24 +0000
ROA not before: Mon 09 Nov 2026 12:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 94.183.199.0/24 maxlen: 24
217.60.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:4a:b6:21:3e:39:20:d6:38:19:e0:23:51:22:e9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 9 12:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b3d7e4c6651830bba9297a0064097be9696181a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f2:e8:57:c1:c0:c3:e5:33:34:a2:f6:a4:a0:
66:f9:4c:7d:ef:10:b6:ed:e4:31:62:04:ff:42:fa:
d3:06:75:88:b2:74:25:3a:16:fe:fe:a3:35:89:fe:
3e:6d:1e:6b:61:70:ad:95:23:c0:fc:7a:a7:d4:43:
a9:bf:79:85:3b:9f:fa:08:f9:48:26:4e:0c:15:ea:
24:8b:26:3e:c8:f9:79:81:c6:d0:75:4b:90:58:35:
81:cd:45:5a:14:c9:61:aa:cd:7c:65:09:44:90:3f:
09:67:ba:83:6b:d5:7e:e7:dd:b7:42:3a:06:f5:2d:
95:80:c2:f3:d2:7e:44:1d:07:df:6f:47:e9:81:e2:
1e:e1:44:d6:d1:70:b9:5b:d7:0d:33:f9:a3:70:86:
bb:42:90:9f:37:33:24:3a:43:7a:51:aa:b1:47:ff:
44:6c:f5:f5:34:42:6e:40:08:a7:84:d1:7a:88:73:
88:fb:08:a8:38:89:9e:fc:48:0b:54:92:bd:2a:f2:
60:4e:fe:c7:42:6a:d7:a2:c1:b8:c1:b4:cc:89:6c:
e6:73:a0:3f:14:d2:2f:96:c4:7c:17:68:69:0c:83:
1f:78:99:b1:bb:50:70:70:4a:10:81:dc:6f:47:05:
4b:67:68:98:15:9b:7f:1f:18:59:70:a6:13:25:a0:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:7E:4C:66:51:83:0B:BA:92:97:A0:06:40:97:BE:96:96:18:1A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/az1-TGZRgwu6kpegBkCXvpaWGBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.199.0/24
217.60.70.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a4:5a:b1:dc:2f:39:ca:97:af:97:5f:2e:cd:04:e4:ac:7a:
8c:07:e0:50:38:71:39:30:32:6b:9f:1b:01:26:24:8b:04:22:
b8:39:bf:01:e8:53:0e:64:aa:48:eb:21:1f:bf:1e:ae:4d:9b:
e3:07:2b:d1:72:ac:c1:23:0a:3e:91:8b:b7:87:c1:ad:c4:bd:
28:ac:32:12:49:67:55:9f:97:6c:2a:2c:05:e9:2c:3b:63:3c:
37:65:ef:07:bc:7d:88:ac:47:99:3f:29:b0:48:43:1a:6d:cb:
7b:7f:13:97:23:08:66:3d:64:00:fc:be:42:e8:c0:08:d0:a7:
c0:1d:2b:a6:36:5f:79:27:82:3a:9c:62:32:21:71:6d:90:c6:
c3:14:b0:0d:b5:ce:1f:21:86:0c:c7:0c:fa:ed:12:51:f8:3b:
74:a3:5d:24:da:67:0c:3b:8d:ab:2e:bf:3e:2a:4c:42:05:18:
5c:f6:55:58:b9:46:4c:af:e9:46:6f:84:48:82:08:8c:98:36:
09:3e:56:3f:a8:3a:94:fe:62:b2:2e:93:bc:f6:cd:88:eb:22:
fb:ce:3d:84:aa:1b:4d:42:c8:1f:eb:a0:4f:69:12:d7:19:74:
cd:22:80:ea:5f:c3:97:b8:62:9d:2c:69:21:5c:f8:85:be:74:
13:71:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:50 2026 by rpki-client