Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rYXUccUVP65zco7EK1xCGah40Gk.roa
File: rYXUccUVP65zco7EK1xCGah40Gk.roa (raw, json)
Hash identifier: 8zCH52VsrLI0bpH/uFklVBAgt382CDsQgzODbanEhzc=
Subject key identifier: AD:85:D4:71:C5:15:3F:AE:73:72:8E:C4:2B:5C:42:19:A8:78:D0:69
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1DF5E2F8CC02CADF0E8AE189D98191186
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rYXUccUVP65zco7EK1xCGah40Gk.roa
Signing time: Sun 15 Nov 2026 13:20:53 +0000
ROA not before: Sun 15 Nov 2026 13:20:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61248
IP address blocks: 94.183.176.0/24 maxlen: 24
94.183.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:5e:2f:8c:c0:2c:ad:f0:e8:ae:18:9d:98:19:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 13:20:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad85d471c5153fae73728ec42b5c4219a878d069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:70:26:91:af:e5:34:d8:9f:e9:fc:17:d0:67:
e2:eb:b7:f4:93:6e:67:59:5f:24:56:c9:e5:4a:9f:
36:ad:3f:b9:e7:53:8a:3d:98:9f:71:7f:d6:b1:35:
99:3d:89:d2:ef:67:44:61:7a:cc:2f:a4:24:a8:52:
0e:3e:70:1a:22:82:71:86:3f:cc:35:2e:54:4f:b7:
ef:a4:1f:53:29:68:c5:6e:27:4d:28:06:66:71:d2:
ef:6e:42:ca:c5:9d:75:49:ad:c9:f1:c2:fc:c1:66:
d8:c2:67:f2:90:0e:4c:00:2d:c8:e5:bd:57:60:94:
bb:4f:b2:ff:9a:2e:e3:f9:71:74:48:7a:43:3b:46:
07:c1:96:d1:bb:09:42:1e:3b:4f:1e:7b:62:8e:03:
f0:56:0d:17:14:43:76:b1:d4:98:95:c2:5e:46:45:
49:49:52:70:3e:59:62:4a:1e:86:b2:66:4b:00:f7:
37:6d:fa:7e:ba:5a:40:0c:5a:a2:6d:3e:fd:59:48:
37:7f:b2:6e:22:26:d6:a4:c3:84:e9:38:a4:ad:4e:
34:88:1d:52:aa:02:bc:15:e2:c7:c5:49:5c:19:21:
e6:41:18:8e:77:d5:51:38:c9:a5:92:58:e9:ab:e5:
1d:a6:f4:ec:31:e2:65:20:2f:1c:43:89:a9:ba:f0:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:85:D4:71:C5:15:3F:AE:73:72:8E:C4:2B:5C:42:19:A8:78:D0:69
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rYXUccUVP65zco7EK1xCGah40Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.176.0/24
94.183.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ec:86:5d:ad:1e:91:ff:83:2a:e0:bf:cf:e8:34:3b:5c:ff:
3d:0d:ff:48:9d:e3:7c:05:a1:66:2f:a2:cf:23:5e:d2:59:85:
74:72:99:5f:1d:cb:4e:b2:79:5b:e5:8a:69:47:26:a3:85:b0:
55:85:67:0c:8c:3e:8c:53:e9:ab:73:82:39:c7:f2:ab:32:22:
f6:39:f2:2d:5b:06:06:9b:29:6f:73:42:e5:b0:f1:7a:ef:53:
c3:71:93:ff:ec:a3:c1:f3:e3:cd:60:71:da:3f:81:32:db:21:
e2:3c:c0:f8:16:11:04:be:0b:81:0e:94:95:e6:65:08:23:c0:
21:6a:ed:77:85:a9:69:1d:88:41:e4:5d:d9:12:47:84:e9:34:
57:fa:50:6b:df:75:1b:9f:04:3a:5a:9c:e9:7e:59:9d:64:30:
fa:f7:77:a1:88:c6:09:62:de:f1:d9:d0:a7:7f:76:fe:ed:68:
3f:60:58:f8:cd:43:e3:a5:2c:dd:bf:13:15:8c:ad:95:e2:8f:
62:8b:d3:4a:7e:c2:bf:a0:9f:e5:3e:fd:e1:a7:f8:2e:34:b3:
5f:f9:b1:e6:7d:52:a3:87:1e:97:64:52:72:08:aa:1c:9e:7f:
f4:49:ec:68:e8:ba:f6:4d:ff:94:c9:8f:51:dc:0c:7e:21:80:
3c:bb:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:57 2026 by rpki-client