Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zLGCsGZe4b6zK3GH94502eb1t0k.roa
File: zLGCsGZe4b6zK3GH94502eb1t0k.roa (raw, json)
Hash identifier: iArZ9LXTX9PKsrbNHdvFkBI3Hps+8YU7zU+x5EVPjlc=
Subject key identifier: CC:B1:82:B0:66:5E:E1:BE:B3:2B:71:87:F7:8E:74:D9:E6:F5:B7:49
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C50A1F66063F89D620DA24FB3827EA75
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zLGCsGZe4b6zK3GH94502eb1t0k.roa
Signing time: Tue 10 Nov 2026 10:38:57 +0000
ROA not before: Tue 10 Nov 2026 10:38:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201194
IP address blocks: 94.183.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:0a:1f:66:06:3f:89:d6:20:da:24:fb:38:27:ea:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 10:38:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccb182b0665ee1beb32b7187f78e74d9e6f5b749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:96:a7:f4:17:6b:70:c7:cf:c7:04:7f:97:
71:e8:a4:cb:4f:23:ee:74:6a:4c:a0:ac:c6:6a:be:
d6:91:be:d7:13:4b:ff:e1:d0:a9:79:25:85:cc:04:
91:55:4c:d7:f5:6a:b6:1c:2f:a3:93:f4:6f:04:74:
26:cf:07:2b:a8:bc:fc:96:4e:d1:c6:59:e6:d3:10:
d2:74:43:93:38:5a:6d:ab:af:58:cb:af:cb:89:e7:
0c:a2:39:ab:31:35:76:3b:94:5a:c5:e2:da:8a:55:
1d:79:64:b2:56:7c:73:8e:06:c3:8a:8f:96:29:11:
e2:01:a8:7e:f5:5e:7c:b3:7f:27:7c:62:a2:ef:bb:
e9:8c:85:b1:54:25:5c:7f:80:ec:57:47:ec:ee:19:
26:55:1b:2a:f8:37:28:da:d4:3a:a4:30:93:5b:28:
8b:9b:e6:99:4f:55:39:5f:52:08:ec:49:b3:f0:ef:
b3:9d:b1:42:d8:f1:73:ef:82:79:b5:58:4c:ab:7b:
79:cd:e9:b4:7d:c3:b2:58:73:7e:0a:15:1a:65:0f:
21:5a:1e:56:0b:18:b7:a7:88:46:84:27:1a:49:ca:
02:a4:bb:d7:c2:b0:65:9e:41:3d:a7:e9:e8:7d:04:
1c:3e:9c:4c:ef:df:71:af:af:d7:8f:32:8b:84:ea:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B1:82:B0:66:5E:E1:BE:B3:2B:71:87:F7:8E:74:D9:E6:F5:B7:49
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zLGCsGZe4b6zK3GH94502eb1t0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f7:b7:26:b4:41:78:9e:c0:54:ce:ba:f3:eb:c8:ca:f9:af:
6c:e1:4b:3c:38:6f:97:54:82:44:c6:87:92:9d:f0:d5:41:e5:
ee:76:98:35:7e:3e:35:7f:5e:60:34:6f:a5:b1:49:e8:a3:68:
72:2b:61:11:88:44:ac:c3:bb:c5:30:c0:5a:f5:10:8f:3f:25:
5e:2f:6d:b9:9f:40:e6:eb:1e:d6:d3:67:41:71:89:73:2e:b7:
2b:10:0d:b2:d9:9c:dd:0c:93:d0:71:0a:01:42:4d:8c:08:16:
2e:60:ac:91:20:9d:ed:6d:b7:6e:7a:ed:ef:76:7b:f9:8d:55:
6f:4b:17:ce:fc:93:27:54:8e:08:ea:40:af:83:de:fb:48:c2:
84:34:43:0b:3a:d6:fe:b1:71:aa:22:2b:fc:97:61:77:7d:b1:
91:95:00:c4:1d:d7:83:30:04:8e:b9:65:c6:5c:2b:c8:4d:6f:
d3:50:4f:bb:72:38:e2:2f:67:33:10:69:c4:4c:db:b4:29:b5:
a8:da:ef:34:e7:47:56:5f:d5:56:53:50:27:ea:27:09:4b:12:
ba:90:de:a4:54:41:9a:8e:96:94:90:4a:75:dd:2d:1f:71:e2:
be:c5:7a:f8:dd:d0:90:2d:a4:1c:d9:a4:c2:3d:21:73:93:41:
b1:32:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:59:09 2026 by rpki-client