Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c51qhfapZMP-3FRHxZ4nrL0LvMw.roa
File: c51qhfapZMP-3FRHxZ4nrL0LvMw.roa (raw, json)
Hash identifier: vxqzmfH/HfuHCjAQx289qxiRuV6ONH/8vvl9UjPTTIU=
Subject key identifier: 73:9D:6A:85:F6:A9:64:C3:FE:DC:54:47:C5:9E:27:AC:BD:0B:BC:CC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F7089F1DC9EB6BB3DDC557CEFDA68AA91
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c51qhfapZMP-3FRHxZ4nrL0LvMw.roa
Signing time: Fri 17 Jul 2026 14:45:16 +0000
ROA not before: Fri 17 Jul 2026 14:45:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214431
IP address blocks: 94.183.207.0/24 maxlen: 24
94.183.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:89:f1:dc:9e:b6:bb:3d:dc:55:7c:ef:da:68:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 17 14:45:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=739d6a85f6a964c3fedc5447c59e27acbd0bbccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:20:8a:e8:f9:67:d6:4f:1d:dd:37:fb:58:
c9:4e:4c:ce:6b:70:d3:5b:d9:25:be:c6:a9:e7:8d:
3e:c8:63:4c:9d:fe:fe:b4:0f:f8:46:c0:1d:78:1b:
54:8b:2d:ff:91:0a:d2:36:f7:c4:76:58:bc:40:57:
ea:86:6b:75:c4:b1:b6:9d:88:50:60:98:33:13:e2:
27:94:da:22:25:e4:2a:75:15:cc:29:95:62:5f:68:
09:7e:bd:26:46:b3:01:b2:a1:d4:f4:72:77:b4:f1:
19:28:7f:0f:7e:49:8f:c7:13:eb:e6:45:ad:82:1d:
12:87:50:62:89:4f:bd:85:41:35:ee:f8:37:e6:a6:
1f:24:da:bf:79:b3:d2:ea:7c:d7:28:5e:84:1b:89:
84:65:52:dc:84:ce:5b:55:71:28:9a:a8:96:b4:a2:
68:4e:60:90:db:1c:d0:0a:b6:9b:e2:97:f6:cf:d3:
b6:7f:45:2b:f8:64:e5:87:2a:9b:46:ba:80:7c:96:
23:82:0b:73:7d:d6:db:2c:b4:f5:16:08:8b:09:21:
94:42:0e:21:4d:ac:ee:37:3c:f5:80:b6:e1:76:d8:
22:56:fb:04:78:f8:c5:1a:79:d0:27:48:c4:81:bb:
cb:75:dc:30:73:0b:a8:d8:e4:ad:f6:e7:9b:17:d5:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9D:6A:85:F6:A9:64:C3:FE:DC:54:47:C5:9E:27:AC:BD:0B:BC:CC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c51qhfapZMP-3FRHxZ4nrL0LvMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.207.0/24
94.183.225.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6b:11:fd:0e:b4:f4:21:47:80:bc:e8:69:c9:7f:10:c2:d0:
4b:f3:45:68:5d:87:57:90:1b:2a:00:f3:64:6c:e9:25:70:f3:
b6:4e:d9:c0:13:46:ae:33:a5:d0:d0:3a:fe:6a:32:95:10:a7:
d3:ac:46:df:88:20:b3:01:29:16:a7:68:fd:22:67:d2:74:32:
0c:cd:df:92:66:ef:ca:67:e4:e1:cc:64:23:0a:78:67:9d:3e:
39:0a:35:08:78:e9:84:56:e9:5e:a0:fc:36:77:6a:5e:97:ef:
1f:1b:1f:44:8a:0b:93:bd:92:c3:28:44:81:02:9c:85:b3:a3:
e7:26:43:20:89:d6:ef:29:da:c5:51:58:2b:a9:47:85:a7:5a:
07:c2:56:01:cc:79:0f:d6:15:2f:e7:b5:3c:50:5c:d7:2f:3e:
26:41:90:65:2e:ca:08:e2:69:bc:52:8c:fd:0f:cc:b0:33:7a:
ba:f2:24:9a:22:40:5f:1d:65:d4:53:9c:a4:0e:bc:ed:71:8e:
87:e8:bc:ae:94:2b:3a:19:4d:4f:a4:0b:f4:9b:36:a2:fb:cf:
73:7d:47:4c:fd:08:63:48:c3:be:fe:62:d6:3e:45:b7:79:32:
96:6e:ba:66:1b:58:76:81:05:85:30:02:9f:01:64:f9:7e:ee:
e8:78:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:15 2026 by rpki-client