Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9JsNpzlzbRxBtqylceqyVkd3qPc.roa
File: 9JsNpzlzbRxBtqylceqyVkd3qPc.roa (raw, json)
Hash identifier: oOnczSl2iRejZOod30vEGS0+/a++/jEZz9s0eG27shM=
Subject key identifier: F4:9B:0D:A7:39:73:6D:1C:41:B6:AC:A5:71:EA:B2:56:47:77:A8:F7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197F960F12770BD4383A58BF49A92F51E0F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9JsNpzlzbRxBtqylceqyVkd3qPc.roa
Signing time: Fri 11 Jul 2025 12:06:09 +0000
ROA not before: Fri 11 Jul 2025 12:06:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210705
IP address blocks: 94.183.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:60:f1:27:70:bd:43:83:a5:8b:f4:9a:92:f5:1e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 11 12:06:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f49b0da739736d1c41b6aca571eab2564777a8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:8e:65:a4:8d:36:a0:d2:8b:f0:9a:6c:75:
33:ee:21:d0:3b:73:c9:e2:3c:b3:12:7f:8e:bf:30:
a6:a8:fc:1d:e6:3c:8b:22:ee:b4:32:b5:f6:c9:76:
39:ed:a7:b6:64:71:23:63:7c:14:bd:cf:b8:a3:50:
38:68:61:17:b5:e1:d7:e4:18:be:a2:c7:a6:2a:ec:
86:66:0e:3d:9d:f0:69:bd:ff:e8:05:de:fb:8c:f6:
9f:68:ac:2b:84:21:7f:d0:a3:96:75:cc:e4:fd:76:
f9:b3:22:2c:3c:bc:bc:19:07:28:aa:ab:83:58:8d:
1a:33:18:c7:0e:b1:b2:ec:00:cb:ee:24:55:63:41:
2c:bc:06:f8:07:ab:3b:a9:34:43:85:33:e5:bc:aa:
3a:c2:07:30:df:af:88:2b:a1:e5:39:f5:4a:24:0b:
b5:63:f4:c2:9b:3e:3e:dd:dd:d9:c5:33:7c:67:69:
9f:b4:6f:ab:14:e4:89:c0:b4:71:40:c0:29:da:92:
0d:84:1f:04:83:44:75:5b:2c:9b:10:a9:4f:6e:fd:
0d:7a:7e:0e:bc:8f:35:9a:df:0f:41:07:5f:58:6f:
5f:38:25:a9:1d:3e:8c:59:ea:9f:f1:fe:c6:86:01:
35:35:41:a6:73:b5:22:03:a2:f0:b6:26:48:44:af:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:0D:A7:39:73:6D:1C:41:B6:AC:A5:71:EA:B2:56:47:77:A8:F7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9JsNpzlzbRxBtqylceqyVkd3qPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:4d:76:f9:ec:7a:d6:e6:c7:02:e3:7c:be:5e:46:7f:1e:66:
a1:cf:e9:b5:e5:2b:36:6e:8a:71:7d:33:77:b3:20:bb:ca:e0:
52:ec:06:95:de:3f:75:35:91:c8:03:c6:b3:18:8f:ed:a2:ab:
9e:07:03:a6:01:07:57:6a:ce:67:6a:39:dd:ac:f8:25:4f:7f:
fb:2c:fa:ab:72:1d:86:87:25:32:a4:6d:6b:7f:35:0a:06:e7:
d0:96:d2:91:e0:79:4d:54:b5:60:f4:c3:0f:d8:ed:9d:9e:20:
83:ac:db:f9:20:79:b7:1a:42:6f:06:92:59:a8:9d:a7:9e:86:
84:bd:64:7b:71:2e:8e:70:f5:dc:c6:d8:be:5d:d8:59:a1:49:
a3:08:1a:84:10:3d:1e:b6:eb:36:f2:33:0a:aa:25:bc:3f:d5:
03:92:4b:f9:05:fb:a8:9a:57:73:19:0c:ae:96:94:05:6f:2b:
50:49:e2:9f:bb:14:81:f1:52:ce:23:3a:34:b1:f9:fd:5b:d6:
76:bd:1f:f3:f1:6f:be:54:4a:5a:7d:18:a2:8f:9d:59:da:f9:
f5:e6:17:08:00:4c:00:a5:c7:bc:f9:7d:13:e1:af:2e:e9:31:
00:7c:ad:1e:32:63:e7:ce:1d:8d:0f:26:13:1d:3e:48:ec:cb:
0b:ba:74:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf5YPEncL1Dg6WL9JqS9R4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzExMTIwNjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDliMGRhNzM5NzM2ZDFjNDFiNmFjYTU3MWVhYjI1NjQ3NzdhOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVWOZaSNNqDSi/CabHUz7iHQO3PJ
4jyzEn+OvzCmqPwd5jyLIu60MrX2yXY57ae2ZHEjY3wUvc+4o1A4aGEXteHX5Bi+
osemKuyGZg49nfBpvf/oBd77jPafaKwrhCF/0KOWdczk/Xb5syIsPLy8GQcoqquD
WI0aMxjHDrGy7ADL7iRVY0EsvAb4B6s7qTRDhTPlvKo6wgcw36+IK6HlOfVKJAu1
Y/TCmz4+3d3ZxTN8Z2mftG+rFOSJwLRxQMAp2pINhB8Eg0R1WyybEKlPbv0Nen4O
vI81mt8PQQdfWG9fOCWpHT6MWeqf8f7GhgE1NUGmc7UiA6LwtiZIRK/QWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSbDac5c20cQbaspXHqslZHd6j3MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvOUpzTnB6bHpiUnhCdHF5bGNlcXlWa2QzcVBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrelMA0G
CSqGSIb3DQEBCwUAA4IBAQC1TXb57HrW5scC43y+XkZ/Hmahz+m15Ss2bopxfTN3
syC7yuBS7AaV3j91NZHIA8azGI/toqueBwOmAQdXas5najndrPglT3/7LPqrch2G
hyUypG1rfzUKBufQltKR4HlNVLVg9MMP2O2dniCDrNv5IHm3GkJvBpJZqJ2nnoaE
vWR7cS6OcPXcxti+XdhZoUmjCBqEED0etus28jMKqiW8P9UDkkv5BfuomldzGQyu
lpQFbytQSeKfuxSB8VLOIzo0sfn9W9Z2vR/z8W++VEpafRiij51Z2vn15hcIAEwA
pce8+X0T4a8u6TEAfK0eMmPnzh2NDyYTHT5I7MsLunRi
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:07:11 2025 by rpki-client