Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/noul_xQ52Pi-BuKDw6KVjqJfFVQ.roa
File: noul_xQ52Pi-BuKDw6KVjqJfFVQ.roa (raw, json)
Hash identifier: n5XJeaF0FXjfaI62quyWEQNlvgoyi+RIlcRcuMP3GUQ=
Subject key identifier: 9E:8B:A5:FF:14:39:D8:F8:BE:06:E2:83:C3:A2:95:8E:A2:5F:15:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F7E316B9296F2CE5DF52C2820F6808F3B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/noul_xQ52Pi-BuKDw6KVjqJfFVQ.roa
Signing time: Mon 20 Jul 2026 06:23:15 +0000
ROA not before: Mon 20 Jul 2026 06:23:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 94.183.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:31:6b:92:96:f2:ce:5d:f5:2c:28:20:f6:80:8f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 20 06:23:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e8ba5ff1439d8f8be06e283c3a2958ea25f1554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:39:f7:21:a6:16:f3:3e:45:23:07:53:e3:
e7:0f:0b:f1:74:57:80:fc:9f:dd:11:b7:07:90:a8:
56:c1:40:10:6b:1c:9b:6f:b9:d2:30:e4:4b:26:f5:
55:89:96:ee:65:d4:6e:54:7b:45:6a:c1:24:59:29:
b2:70:cb:ad:c1:6a:ff:b4:55:90:fd:e1:d0:26:f9:
88:9c:9b:36:79:1c:44:79:74:05:fc:95:1a:a1:5d:
99:0f:ba:38:42:eb:1b:5f:2e:1e:1e:e8:94:54:f3:
f0:84:9a:9d:11:58:71:f1:fd:c8:55:9d:18:9a:ff:
a2:24:65:22:35:01:fd:a5:ac:da:7f:55:b4:52:05:
de:62:e9:ec:8d:30:2f:d9:a8:fc:30:3d:aa:59:a0:
86:af:a3:a2:b7:2a:15:40:0b:ab:45:83:5c:5f:03:
42:99:47:43:83:0c:2f:49:77:e4:cf:09:e7:97:40:
2d:c0:e1:31:06:88:1a:42:78:12:01:5f:0b:21:96:
2e:30:86:66:ff:58:3b:a4:ea:1b:07:97:52:34:94:
53:a8:1b:ed:6a:ff:ed:a6:45:83:e7:a0:bb:13:1f:
1d:e6:b3:01:1d:cd:71:a4:40:e2:5c:a7:0b:c5:1d:
66:06:96:a9:4b:e9:81:0d:34:b1:16:6a:ec:5e:a2:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8B:A5:FF:14:39:D8:F8:BE:06:E2:83:C3:A2:95:8E:A2:5F:15:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/noul_xQ52Pi-BuKDw6KVjqJfFVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.218.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e3:71:22:45:5f:fa:3d:ed:6b:1a:e5:fa:a4:39:d9:43:02:
85:d7:4c:df:0e:ad:78:0e:18:81:23:8c:e2:85:26:c0:e6:50:
2c:a8:63:db:6c:a4:4c:5e:1a:88:de:b1:c9:e9:ef:f5:4f:4d:
9b:a8:75:71:42:57:a0:4b:88:dd:24:b0:8e:ad:67:d7:42:cf:
ff:da:42:a5:91:ac:af:3d:35:48:39:a9:53:ff:5b:7b:9e:3f:
af:ec:1a:26:73:2f:d5:c0:6f:7a:b0:aa:8a:f8:cc:a2:5e:5a:
3e:55:9e:f8:f7:c8:24:03:3c:b2:b4:9d:be:69:f2:05:7d:ce:
86:91:57:2a:84:56:5d:7b:83:72:ad:88:19:ef:2a:1b:b8:ab:
87:d0:34:08:51:7b:6a:81:f1:fd:e3:b4:6d:42:3e:69:4a:c7:
c6:9f:af:7d:94:82:6c:a3:97:9a:b6:bb:43:50:a8:85:73:1e:
59:ea:4d:cf:b4:99:f7:58:ad:42:c8:06:76:6b:af:5f:f7:68:
00:0c:89:ce:22:13:fb:63:b7:96:ff:8e:94:d1:6e:31:7f:30:
e6:0a:83:f8:29:4a:73:4a:ff:fd:2a:bb:dc:07:4e:be:75:18:
78:6e:da:f9:6f:74:d5:ed:70:52:0b:ae:90:ee:4a:56:07:ba:
89:70:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:17 2026 by rpki-client