Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ljZpIW-mC_fWQx_utMrhzauP04c.roa
File: ljZpIW-mC_fWQx_utMrhzauP04c.roa (raw, json)
Hash identifier: fssEVvMdMiEY4M15+u5wuOcxmy37RCVEt3VLgMsNaf4=
Subject key identifier: 96:36:69:21:6F:A6:0B:F7:D6:43:1F:EE:B4:CA:E1:CD:AB:8F:D3:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F8800B6E2D67D32DA34CE04A8C0435362
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ljZpIW-mC_fWQx_utMrhzauP04c.roa
Signing time: Wed 22 Jul 2026 04:06:15 +0000
ROA not before: Wed 22 Jul 2026 04:06:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 94.183.150.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:00:b6:e2:d6:7d:32:da:34:ce:04:a8:c0:43:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 22 04:06:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=963669216fa60bf7d6431feeb4cae1cdab8fd387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:36:ff:73:cd:a6:c4:67:f3:2f:14:91:d6:fe:
ba:7b:d1:25:05:50:33:2d:6b:b5:0c:d1:fa:e6:d4:
de:c4:89:9e:12:bd:be:8d:a9:45:e9:4d:b9:ba:b5:
68:41:78:92:42:ee:36:fc:de:cc:48:af:f6:25:f8:
9e:f3:0c:25:21:81:c3:76:dc:3b:dd:79:ba:8b:fd:
57:ca:43:de:01:1b:66:a2:87:55:dc:a0:87:48:ed:
2c:60:00:8e:35:df:6f:1c:f1:f4:0f:41:23:1a:cc:
2a:8d:dd:d8:eb:c7:cc:44:52:97:5f:f8:13:96:ad:
1c:f1:62:65:2d:e6:97:bc:6d:44:85:6a:e8:ca:d0:
55:d1:ab:17:07:a5:30:15:e7:8f:1c:f1:a8:f6:04:
35:73:3e:38:92:b2:a0:7d:d3:f3:72:fb:18:bb:94:
d1:de:d1:71:07:81:8a:fb:1c:77:10:27:4c:87:ad:
eb:81:40:ee:42:8e:f8:3c:68:28:86:8e:7d:a5:b6:
1c:19:7f:ee:87:f5:d9:64:76:dc:cd:80:18:2f:0b:
35:50:70:f3:89:5d:b2:f2:44:f5:70:e8:6b:89:a6:
38:5f:05:79:68:97:40:06:f9:25:f1:ec:49:0b:2a:
9d:58:70:21:a8:7e:96:20:eb:10:bb:ba:e8:28:7f:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:69:21:6F:A6:0B:F7:D6:43:1F:EE:B4:CA:E1:CD:AB:8F:D3:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ljZpIW-mC_fWQx_utMrhzauP04c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.150.0/24
94.183.162.0/24
94.183.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7a:c4:f1:47:0c:39:47:3b:92:f3:04:95:08:7c:45:d4:88:
6a:a0:c3:31:9b:67:62:f2:fb:a2:c6:a4:fc:0d:d7:34:79:17:
e1:63:1d:8d:59:b1:30:b2:12:5c:61:19:00:1c:48:0a:37:73:
a3:2a:bc:d4:04:a5:6c:07:b4:f7:9d:5c:49:b0:65:a2:f3:44:
a2:1f:56:fe:97:61:d5:5b:dc:8d:b9:fa:a8:7e:9d:0e:6a:0d:
1e:3a:5b:18:c2:f0:c1:2a:5c:a0:3a:74:3c:17:75:f6:6b:f3:
a8:89:e1:b3:b2:7e:cb:c1:3b:30:e2:de:fc:c0:ca:2d:75:68:
57:32:d5:90:25:97:fe:c2:c7:f9:69:9b:41:bd:a2:be:7e:27:
b8:92:d8:53:f3:ba:58:56:ce:3b:b8:a5:df:92:f1:25:f9:60:
24:64:cc:5d:16:d6:60:fc:6c:36:85:a9:32:79:2f:08:3f:c3:
49:c9:36:a3:67:2c:79:d9:f5:e9:47:d1:98:ef:eb:82:ae:80:
47:8d:97:4a:c9:28:7b:aa:d7:67:cc:ce:84:46:5c:d5:9e:38:
68:43:2d:18:23:cb:d7:6e:3c:ee:5b:a7:52:cb:0b:96:58:5c:
f6:3f:66:97:32:21:b7:d7:54:9b:1f:47:cf:66:22:b4:26:38:
03:d2:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:12 2026 by rpki-client