Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A1Us9287M6kW1OewJc_xsyqALXI.roa
File: A1Us9287M6kW1OewJc_xsyqALXI.roa (raw, json)
Hash identifier: cm2iGPLTyIhppfSFBKzepr1jhvusE+6LETi8qRKdA2E=
Subject key identifier: 03:55:2C:F7:6F:3B:33:A9:16:D4:E7:B0:25:CF:F1:B3:2A:80:2D:72
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197F3FD3CCC512FA76CA1759C348323FE65
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A1Us9287M6kW1OewJc_xsyqALXI.roa
Signing time: Thu 10 Jul 2025 10:59:09 +0000
ROA not before: Thu 10 Jul 2025 10:59:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215496
IP address blocks: 94.183.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:fd:3c:cc:51:2f:a7:6c:a1:75:9c:34:83:23:fe:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 10 10:59:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03552cf76f3b33a916d4e7b025cff1b32a802d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:5b:24:57:50:54:ba:0d:9a:c4:1a:4c:f9:
b5:a7:57:d1:77:81:16:9a:89:6b:04:b0:ba:64:37:
d1:89:8d:eb:76:d8:75:7d:2d:02:8c:a0:f4:5d:c6:
82:77:cd:72:16:ea:6f:2d:23:d2:97:95:ef:5b:fb:
b7:bf:46:61:4a:12:0a:c0:7c:38:1c:ea:28:17:6d:
c1:b4:91:8a:e6:08:6f:a7:69:9f:ab:3c:33:fc:93:
9a:50:d1:8e:96:bb:ab:94:ca:c9:d9:a5:8a:11:c7:
44:ce:5f:25:f5:93:61:2d:a7:d1:f2:f9:cc:8c:b8:
c5:4e:78:12:c1:8e:d6:0b:b3:95:a3:fa:1f:94:d6:
08:62:41:87:ff:41:b7:ff:5c:1e:3e:48:f8:00:b4:
38:3d:35:30:b3:b1:47:c0:f1:9c:06:5a:45:9b:f8:
ec:2e:e9:d7:81:3b:45:d9:b0:2f:f1:d6:0b:da:da:
3c:64:1a:ee:87:b6:39:eb:b4:30:b7:79:d3:e2:9e:
94:03:6c:7c:2e:76:63:23:f3:bb:9b:01:7b:0e:dd:
85:85:d3:f6:84:76:46:eb:90:fe:63:f6:2c:69:eb:
8b:c3:b3:ce:7b:6b:44:12:00:2c:e4:ca:28:81:25:
4b:9d:ee:54:4c:2f:fb:73:3e:c2:d2:5f:93:e0:0a:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:2C:F7:6F:3B:33:A9:16:D4:E7:B0:25:CF:F1:B3:2A:80:2D:72
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A1Us9287M6kW1OewJc_xsyqALXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.164.0/24
Signature Algorithm: sha256WithRSAEncryption
60:71:69:90:bb:b1:00:6c:1e:9f:e3:41:54:a3:c1:08:c4:a6:
9b:bc:c8:37:48:b1:53:25:9d:bf:dd:01:83:81:0e:c5:49:91:
9f:a8:73:9b:db:c5:d5:37:d9:34:5d:22:b1:7d:f9:a5:26:47:
0e:9c:8b:32:3f:97:36:71:c5:2d:ce:b0:3b:83:a1:da:cf:87:
ca:06:e1:c2:29:b0:4e:ef:1c:ba:9d:ca:dd:93:32:31:35:b0:
da:00:4d:5d:24:1f:b5:78:cc:fb:62:58:14:2c:64:18:61:85:
f0:7e:02:4a:31:30:05:47:5c:92:d9:76:94:62:d3:00:f5:88:
ce:31:81:ae:b9:af:d6:89:77:36:50:4a:05:9b:81:a7:7b:c0:
af:1b:3a:4f:c5:6a:e3:81:21:1a:fe:c2:2e:04:0d:42:5d:63:
e5:99:56:9f:2d:76:ab:c9:8e:65:4f:68:83:35:43:99:01:ca:
07:15:c6:19:bd:41:92:52:b6:21:0a:a0:d2:fd:97:5e:6a:ef:
e5:e8:e4:34:0f:49:9c:dd:81:97:6e:99:43:96:89:29:7c:e2:
a0:76:18:25:77:f7:1f:49:b3:19:fc:59:39:9f:4d:4c:35:71:
6d:4d:15:a4:84:6d:60:78:fd:32:34:84:e1:11:87:e7:ea:e5:
63:37:ca:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfz/TzMUS+nbKF1nDSDI/5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzEwMTA1OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzU1MmNmNzZmM2IzM2E5MTZkNGU3YjAyNWNmZjFiMzJhODAyZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fBbJFdQVLoNmsQaTPm1p1fRd4EW
molrBLC6ZDfRiY3rdth1fS0CjKD0XcaCd81yFupvLSPSl5XvW/u3v0ZhShIKwHw4
HOooF23BtJGK5ghvp2mfqzwz/JOaUNGOlrurlMrJ2aWKEcdEzl8l9ZNhLafR8vnM
jLjFTngSwY7WC7OVo/oflNYIYkGH/0G3/1wePkj4ALQ4PTUws7FHwPGcBlpFm/js
LunXgTtF2bAv8dYL2to8ZBruh7Y567Qwt3nT4p6UA2x8LnZjI/O7mwF7Dt2FhdP2
hHZG65D+Y/YsaeuLw7POe2tEEgAs5MoogSVLne5UTC/7cz7C0l+T4AplLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFANVLPdvOzOpFtTnsCXP8bMqgC1yMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQTFVczkyODdNNmtXMU9ld0pjX3hzeXFBTFhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrekMA0G
CSqGSIb3DQEBCwUAA4IBAQBgcWmQu7EAbB6f40FUo8EIxKabvMg3SLFTJZ2/3QGD
gQ7FSZGfqHOb28XVN9k0XSKxffmlJkcOnIsyP5c2ccUtzrA7g6Haz4fKBuHCKbBO
7xy6ncrdkzIxNbDaAE1dJB+1eMz7YlgULGQYYYXwfgJKMTAFR1yS2XaUYtMA9YjO
MYGuua/WiXc2UEoFm4Gne8CvGzpPxWrjgSEa/sIuBA1CXWPlmVafLXaryY5lT2iD
NUOZAcoHFcYZvUGSUrYhCqDS/Zdeau/l6OQ0D0mc3YGXbplDlokpfOKgdhgld/cf
SbMZ/Fk5n01MNXFtTRWkhG1geP0yNIThEYfn6uVjN8pn
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:17 2025 by rpki-client