Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jKY6wJBhiao-IM_4sdguwu2MbZM.roa
File: jKY6wJBhiao-IM_4sdguwu2MbZM.roa (raw, json)
Hash identifier: F6iO/CrrmyzsDyuW+IYclvuj8DvSpuvOxb5lktkc7jc=
Subject key identifier: 8C:A6:3A:C0:90:61:89:AA:3E:20:CF:F8:B1:D8:2E:C2:ED:8C:6D:93
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D1B18D831BF99537A94C6A030C096697A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jKY6wJBhiao-IM_4sdguwu2MbZM.roa
Signing time: Mon 23 Mar 2026 14:28:26 +0000
ROA not before: Mon 23 Mar 2026 14:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200579
IP address blocks: 94.183.151.0/24 maxlen: 24
94.183.192.0/19 maxlen: 24
94.183.224.0/21 maxlen: 24
94.183.244.0/24 maxlen: 24
94.183.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:18:d8:31:bf:99:53:7a:94:c6:a0:30:c0:96:69:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 23 14:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ca63ac0906189aa3e20cff8b1d82ec2ed8c6d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:ca:13:07:2d:54:23:2c:dc:ca:25:03:c7:
a4:bb:8b:95:43:2a:2a:93:fa:f7:d5:32:ff:61:d5:
55:a3:de:f0:ba:09:58:12:72:3a:de:9d:fe:70:a2:
c7:e6:77:00:7f:77:27:27:86:8f:7b:60:d9:8b:dd:
98:68:3f:50:c3:58:2c:b3:71:d9:0d:c8:99:bf:94:
7d:69:6c:eb:15:24:85:ab:db:83:d1:c9:a8:0d:59:
0b:41:c1:0d:ba:46:ca:e3:50:c1:c8:da:7f:98:e3:
c1:9f:70:ba:6d:93:60:e7:c5:40:ce:c4:a2:49:fa:
87:a6:4a:f2:0f:08:5f:fe:2f:6c:42:1a:7a:1e:e6:
7f:74:d6:aa:78:09:26:9a:65:04:d1:86:d0:cb:c8:
b3:7d:1b:90:0d:7e:73:02:e6:7f:4d:76:ae:3a:29:
a9:8a:78:78:91:a6:a4:82:05:b2:f5:6d:ea:3c:61:
2f:88:c7:e8:5b:2e:16:23:f1:06:6e:3e:70:64:4e:
e6:f9:1e:aa:ea:b9:98:38:c2:62:53:90:b3:6e:b4:
4c:00:85:89:ae:9a:06:72:13:9a:c5:a7:9e:cd:6d:
dd:15:aa:49:f5:ad:58:71:03:c5:e6:bc:2d:51:64:
e0:e0:99:44:2e:c3:d5:4b:04:30:52:14:b8:9e:7d:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A6:3A:C0:90:61:89:AA:3E:20:CF:F8:B1:D8:2E:C2:ED:8C:6D:93
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jKY6wJBhiao-IM_4sdguwu2MbZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.151.0/24
94.183.192.0-94.183.231.255
94.183.244.0/24
94.183.248.0/21
Signature Algorithm: sha256WithRSAEncryption
30:cf:2f:0b:9f:c6:0c:9b:16:50:9a:7d:e7:c0:b1:0a:1d:25:
8d:79:ef:a7:ad:4d:05:57:37:cc:fd:70:4f:46:7a:4c:ea:20:
fb:f5:09:55:42:d1:87:dd:f4:29:04:3b:7f:ed:bc:b7:82:8b:
a5:3f:b4:f4:94:4b:2f:90:c7:e9:70:88:b2:a5:d2:13:ae:66:
ea:da:4d:14:f4:58:6a:2a:9a:8a:f2:f2:62:3a:f0:d2:6f:45:
f1:b5:1e:09:78:dc:b3:f9:a6:88:4d:46:ef:6c:3d:41:62:3f:
37:69:7e:a8:a0:2f:db:f9:6a:79:c6:d2:80:46:a8:78:16:e0:
22:14:ca:bb:d9:09:37:90:7a:e0:87:fb:8b:e1:96:b1:ca:90:
74:08:39:fb:e6:3e:93:48:6c:ad:7d:ab:38:0b:c0:78:82:20:
95:31:a8:45:74:d2:64:1e:a0:d4:78:2a:0c:04:34:bf:56:07:
59:a7:ec:d6:fa:9a:ef:16:7e:ad:c0:89:f5:04:1d:ab:18:bf:
8e:42:e3:c4:75:d8:2c:58:5c:2d:e3:e1:dc:a9:e3:df:aa:3c:
90:99:ea:44:ee:67:3e:14:db:60:ac:20:0d:9b:63:a2:f1:7b:
99:68:cd:7a:f1:23:de:3b:7b:ed:99:12:29:7a:10:ce:3b:44:
72:f5:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:28 2026 by rpki-client