Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iqxY968gB7pYBepLB0EwyJZc2-o.roa
File: iqxY968gB7pYBepLB0EwyJZc2-o.roa (raw, json)
Hash identifier: qBFVm1EWKUP+CRK7Hexv2eWYQv0IaYUH7MyOTAPJ9EU=
Subject key identifier: 8A:AC:58:F7:AF:20:07:BA:58:05:EA:4B:07:41:30:C8:96:5C:DB:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0CD55C2178E2C415E263421A4DC13B4F0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iqxY968gB7pYBepLB0EwyJZc2-o.roa
Signing time: Wed 23 Sep 2026 08:15:44 +0000
ROA not before: Wed 23 Sep 2026 08:15:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 94.183.248.0/24 maxlen: 24
94.183.249.0/24 maxlen: 24
94.183.250.0/24 maxlen: 24
94.183.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:55:c2:17:8e:2c:41:5e:26:34:21:a4:dc:13:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 23 08:15:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aac58f7af2007ba5805ea4b074130c8965cdbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:dc:b9:f9:b0:0f:0d:b7:ca:1b:85:ec:95:
44:cc:20:70:62:be:2d:5a:d6:3c:51:22:99:78:b0:
0c:c9:fb:7c:f0:e9:b2:a7:65:91:c7:02:ab:96:9d:
1c:e5:1b:80:7e:ef:c1:89:6d:16:ee:f0:9a:1e:69:
9c:c4:4c:70:06:2b:ef:4a:e0:91:a2:42:67:8f:a5:
b8:c5:a8:66:c0:ca:36:73:af:37:6c:5e:00:30:6f:
9e:8b:b1:20:6b:4a:ef:42:35:06:8b:ea:d0:37:30:
84:2c:d5:15:16:e7:4a:7d:1d:56:06:cd:3d:d8:19:
c2:f8:ec:63:4c:ce:13:1b:91:ca:b5:4d:37:22:e5:
a0:e6:5b:b7:e6:97:2e:38:e1:68:6f:df:27:3c:c4:
52:c7:08:09:71:cc:32:51:62:07:2a:14:20:e8:c6:
66:ad:d4:ff:cc:43:39:3f:0d:ce:a5:9c:10:3a:2f:
b4:8e:09:54:0b:6c:e2:3c:4d:f8:fc:31:34:08:6e:
13:6b:44:e6:cc:1c:83:b4:6e:5a:0c:bf:5c:22:48:
f6:0a:26:72:d4:7f:0b:34:f3:a6:1c:8b:af:73:5c:
2e:ac:d4:73:d1:d7:a7:e5:f8:4c:e4:89:51:40:c6:
cf:9e:a7:99:2b:69:15:80:46:b4:05:30:95:92:2a:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:58:F7:AF:20:07:BA:58:05:EA:4B:07:41:30:C8:96:5C:DB:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iqxY968gB7pYBepLB0EwyJZc2-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.248.0/22
Signature Algorithm: sha256WithRSAEncryption
03:72:02:51:ae:5f:50:68:fe:e3:24:e0:bc:b6:56:43:1f:11:
81:dc:41:ae:b2:07:32:24:cc:e8:36:fe:b9:e1:62:7e:51:ae:
c1:fd:8d:5e:8e:dc:a4:1a:ba:42:8f:e1:c2:fb:20:e6:dd:21:
e8:be:57:51:8a:87:9a:d9:51:f1:50:4f:01:dc:45:74:3e:35:
ea:d2:eb:ad:ca:7e:08:36:53:7d:cc:d4:21:6c:87:de:92:25:
1f:97:2c:fd:ef:5e:e1:68:3e:99:e4:92:48:af:66:6e:7d:ad:
89:cc:44:ff:59:83:b2:3c:de:55:1e:3e:aa:f8:8b:e9:74:8a:
84:84:80:d5:5e:82:fb:77:98:7b:16:6a:84:da:b7:18:33:83:
4f:6d:11:95:a5:5e:d3:3e:41:0b:1b:2f:53:18:04:5a:b8:df:
e3:cc:00:ef:7a:16:4b:13:3f:2a:47:64:32:ad:b1:2c:93:11:
5c:b4:f4:e7:14:ec:3b:d6:31:5e:88:df:79:02:2f:cc:51:2d:
45:80:34:eb:32:62:ea:52:6b:3b:1f:21:ba:4a:2c:27:91:e0:
25:d9:d0:38:20:ab:c4:6c:15:8f:a1:5d:b0:df:c3:70:61:b0:
61:de:d7:e5:08:6b:95:51:b1:6b:41:d2:52:e5:14:1a:b2:b8:
c4:ce:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:55 2026 by rpki-client