Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tQ7ZWxTA-UVLuV-M-11N6XITRwc.roa
File: tQ7ZWxTA-UVLuV-M-11N6XITRwc.roa (raw, json)
Hash identifier: ScyD8V/47wNnjbxN3a3ayou43BALxZ8d7Crbi3wFqpY=
Subject key identifier: B5:0E:D9:5B:14:C0:F9:45:4B:B9:5F:8C:FB:5D:4D:E9:72:13:47:07
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199674C1808E89E9F06238E6E2C2886628C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tQ7ZWxTA-UVLuV-M-11N6XITRwc.roa
Signing time: Sat 20 Sep 2025 13:24:23 +0000
ROA not before: Sat 20 Sep 2025 13:24:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44436
IP address blocks: 94.183.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:67:4c:18:08:e8:9e:9f:06:23:8e:6e:2c:28:86:62:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 20 13:24:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b50ed95b14c0f9454bb95f8cfb5d4de972134707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:04:e7:7b:22:89:56:86:62:fa:11:22:aa:
ab:c8:62:13:84:f3:7c:39:c9:41:43:16:aa:90:11:
cd:33:8a:3d:99:35:cd:13:b2:1b:d3:fc:f0:82:f4:
f5:51:00:b1:d7:c7:84:a3:38:64:ec:6e:e5:28:2a:
5d:40:b0:c6:bd:45:e2:5f:97:b5:76:ce:58:f4:c8:
3e:5e:ad:48:1f:dd:d8:b0:e6:cd:57:02:ed:92:12:
c5:36:04:65:25:16:0f:54:d2:13:04:c4:e2:cd:3a:
0f:d4:8f:1a:8e:ad:0b:c3:9d:09:ac:30:41:bb:da:
ad:c1:5c:76:1a:3e:fe:0d:07:76:07:2f:c4:cf:c1:
9f:b2:c3:cd:e5:72:66:b3:88:12:75:26:09:48:fc:
d4:5c:af:22:8b:d4:36:60:5e:9b:05:8d:b3:5c:9d:
f5:9a:fa:aa:2c:12:f4:da:f4:c8:69:e0:a7:2e:c8:
94:67:22:51:86:45:d3:bb:43:92:0f:e3:8e:dc:f7:
cf:4e:34:44:4f:c5:70:8d:55:15:18:64:c9:1e:70:
e5:60:fb:be:33:00:21:4b:c2:3b:4a:68:ab:87:e9:
37:b4:a0:ed:76:9d:0d:5b:a4:c0:35:db:c6:bc:4f:
be:ca:39:95:ce:e8:39:79:ec:27:6b:cc:39:16:ee:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0E:D9:5B:14:C0:F9:45:4B:B9:5F:8C:FB:5D:4D:E9:72:13:47:07
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tQ7ZWxTA-UVLuV-M-11N6XITRwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:56:46:df:c7:f6:5a:f2:7b:98:e9:8f:bf:c8:1d:07:b0:f3:
b4:21:45:8e:1c:18:51:bc:29:e3:5a:d8:b1:39:8b:e1:47:c0:
aa:ef:f7:7c:0a:e8:56:69:b1:3f:a7:5d:a7:d2:9a:93:e2:30:
f9:0d:06:2c:be:58:15:89:83:c2:5a:b7:87:02:4d:a4:98:a2:
cc:a5:67:7f:16:5e:f7:60:f1:f0:70:0e:ac:da:ee:66:dd:c9:
7c:fb:49:15:65:84:43:2b:83:1e:36:a2:84:2e:02:9e:c1:73:
b5:27:f5:44:ad:38:92:f8:b4:08:ea:45:7c:ef:61:21:d5:3c:
ae:47:d3:1e:b7:08:9d:4a:78:d9:97:7a:b1:ba:87:3b:7c:1b:
f2:3d:82:44:bc:3a:00:0e:e9:68:9c:6b:da:fa:9f:92:a2:68:
fa:4f:7d:ee:5b:27:e9:82:ad:6f:df:de:f4:34:35:55:e7:c7:
3e:b6:ec:31:df:47:53:76:e0:93:da:82:45:17:36:96:32:39:
50:65:17:10:3b:ea:03:c1:37:fc:53:8a:57:4b:76:1e:b8:47:
05:9c:b3:a1:03:57:2c:43:1c:87:2a:62:bf:4a:b4:49:b8:e8:
d7:d4:86:3f:e2:35:c7:92:4c:e5:67:5c:fb:cf:ae:a8:e8:ac:
98:17:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:04 2025 by rpki-client