Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bQNKpUFelNQAWrWOgk7HquZDXeQ.roa
File: bQNKpUFelNQAWrWOgk7HquZDXeQ.roa (raw, json)
Hash identifier: zka3tamjPAdY1WCR58TXbjCs/38yxP2tp11o8hMMVbw=
Subject key identifier: 6D:03:4A:A5:41:5E:94:D4:00:5A:B5:8E:82:4E:C7:AA:E6:43:5D:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A17C6E01D6A5D68EE21B4C83A0CA7DA8E6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bQNKpUFelNQAWrWOgk7HquZDXeQ.roa
Signing time: Tue 27 Oct 2026 08:15:46 +0000
ROA not before: Tue 27 Oct 2026 08:15:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218596
IP address blocks: 94.183.192.0/24 maxlen: 24
94.183.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:6e:01:d6:a5:d6:8e:e2:1b:4c:83:a0:ca:7d:a8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 08:15:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d034aa5415e94d4005ab58e824ec7aae6435de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:84:69:68:13:56:40:26:ff:fa:56:81:e2:
f9:ca:7b:98:32:43:ae:7e:3a:3c:78:39:ad:70:c9:
12:e7:96:9e:3d:7e:23:fc:db:ee:d5:1c:ea:03:80:
71:b3:9d:70:d9:d2:fb:99:d4:0e:cd:b6:7c:82:68:
48:53:1e:70:c6:36:f7:61:be:79:2f:c6:45:74:cb:
05:27:46:34:d6:6b:93:8d:74:2a:44:e5:b1:41:d2:
a0:4c:01:e2:81:12:0a:33:28:48:ff:76:a8:23:09:
e4:32:9e:21:c7:5a:7d:d4:30:d0:8d:39:ce:9d:b2:
1f:cc:0c:40:ed:99:b1:e9:8f:d0:6e:b1:05:49:72:
93:a0:c0:2c:c9:9f:7c:61:e5:b7:60:e8:25:e5:a6:
30:1b:a9:7f:f0:67:de:c8:eb:cc:92:7d:47:95:2d:
72:16:b6:77:93:dd:c7:1c:6c:37:ad:fb:fc:ae:61:
7a:83:b0:31:59:36:e4:e4:90:fa:12:08:84:a0:a2:
a3:78:a7:ee:07:f8:e3:a9:ae:78:6a:25:db:48:79:
cf:83:15:4d:b4:02:d5:85:08:17:a0:e1:99:ec:24:
95:05:23:89:ac:ae:78:51:6e:62:c8:bf:cb:ac:0b:
2e:78:2b:d1:0e:b1:e8:98:69:58:fe:50:1b:64:09:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:03:4A:A5:41:5E:94:D4:00:5A:B5:8E:82:4E:C7:AA:E6:43:5D:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bQNKpUFelNQAWrWOgk7HquZDXeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.192.0/24
94.183.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:21:2f:d0:de:0d:6b:86:0d:f4:7a:c8:ce:af:d9:bd:6d:1d:
50:d2:0c:0e:fb:10:4f:d2:ab:4d:c6:77:be:79:f0:32:0f:2b:
73:f9:c5:1c:ee:28:67:52:ab:09:cb:63:95:fa:0c:98:6c:e8:
51:08:61:bc:79:16:2f:d6:e0:50:0a:0a:ee:24:00:06:4f:5a:
f0:9d:d0:69:de:76:0a:65:c4:1f:ff:70:ed:6d:f3:30:76:0d:
2d:8c:86:dc:65:88:fd:f8:d7:63:8a:f4:44:ea:7e:27:e0:c4:
65:e5:4b:f2:08:ab:d9:24:fa:c3:92:f1:5b:a7:fd:a4:c8:be:
02:38:bc:09:90:41:4e:2d:9d:70:2e:70:75:a2:e0:61:42:66:
f6:ff:76:d3:86:d6:2f:e6:bf:d5:e5:e6:ad:20:4b:f4:cf:64:
63:80:c9:35:bd:c5:1a:22:4a:e7:ec:65:f2:2d:72:d5:45:98:
31:6e:16:23:b3:08:6a:3c:14:7a:e9:19:84:25:95:8a:77:43:
d8:65:0d:12:3d:f3:3f:41:51:42:82:51:72:42:f9:f4:b4:20:
78:d3:13:fe:87:3f:5c:ca:72:9b:2f:91:8d:48:d7:03:ce:2f:
81:c4:85:44:02:e5:be:5c:ce:24:56:6a:33:13:d2:1b:4c:25:
a4:38:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:54 2026 by rpki-client