Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-Sioqtxpw0yV7HkH2ixoBvUoL2U.roa
File: 1-Sioqtxpw0yV7HkH2ixoBvUoL2U.roa (raw, json)
Hash identifier: +J+HE9sZaKMqgiO18yJ/xwyUsnhytIlF/APDPSAjJBU=
Subject key identifier: F9:28:A8:AA:DC:69:C3:4C:95:EC:79:07:DA:2C:68:06:F5:28:2F:65
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A163D99A552C7F490C8799E1A116320D35
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-Sioqtxpw0yV7HkH2ixoBvUoL2U.roa
Signing time: Thu 22 Oct 2026 13:42:47 +0000
ROA not before: Thu 22 Oct 2026 13:42:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 94.183.151.0/24 maxlen: 24
94.183.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:d9:9a:55:2c:7f:49:0c:87:99:e1:a1:16:32:0d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 22 13:42:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f928a8aadc69c34c95ec7907da2c6806f5282f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:17:2a:e2:8f:80:fc:2f:b7:b2:32:5d:2d:0d:
0f:1d:12:83:72:8c:24:c6:ef:34:68:06:fe:58:30:
3d:bd:fd:36:f8:6f:e6:dd:b2:9d:14:ad:ce:95:fd:
bc:e4:2f:83:12:49:e9:ee:0a:0b:98:6d:b1:4e:26:
3d:bc:4b:d5:ce:96:e9:bc:9d:12:67:c1:a4:61:a0:
b0:7f:78:8f:5f:8f:64:3f:69:7f:97:55:0f:9c:6e:
f5:26:6f:dd:f6:cb:1c:4f:70:4f:69:e7:08:7b:31:
ee:27:57:80:70:f3:fb:8a:ef:ca:40:6f:63:c0:48:
8f:6c:d8:24:7b:37:48:38:73:09:32:d2:e2:2a:cf:
38:2d:bf:81:5d:34:77:80:90:27:de:57:20:87:68:
65:33:33:d9:18:fa:9c:da:69:1f:c4:4d:da:a3:83:
08:a6:39:fc:09:a5:eb:22:5c:8b:7b:41:dd:50:87:
c2:f5:e6:7a:cc:56:2d:74:cc:4d:94:a7:93:b6:9d:
0a:45:4b:c8:fd:b7:ad:4a:a5:e5:64:8e:38:61:b3:
b9:65:a4:28:a0:f8:72:88:7a:79:9d:82:47:a3:6f:
a6:81:41:1c:6a:6b:3b:56:ca:a0:9e:e4:b0:62:6b:
ee:57:4d:d3:d0:ea:b7:8f:92:19:b7:38:50:93:fa:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:28:A8:AA:DC:69:C3:4C:95:EC:79:07:DA:2C:68:06:F5:28:2F:65
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-Sioqtxpw0yV7HkH2ixoBvUoL2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.151.0/24
94.183.215.0/24
Signature Algorithm: sha256WithRSAEncryption
af:57:21:f7:c8:4b:30:24:82:95:ea:fa:3f:5b:e5:5d:a4:a0:
b3:07:94:48:f5:b9:a0:5c:a7:0e:33:c4:22:33:72:06:57:79:
53:c1:a0:77:10:3e:b5:65:fa:be:2a:fa:ce:5c:93:d2:c0:20:
dd:74:1a:48:ff:bc:1c:08:13:ad:01:32:2f:e1:43:cc:56:62:
48:2c:da:c2:38:ad:bf:41:a4:27:47:e3:19:e6:d4:e6:1b:b7:
e9:19:ac:10:61:2f:0e:57:4a:c6:bc:9c:9a:61:bf:e2:a8:08:
1a:bc:93:1f:87:4e:18:a0:4f:f9:5d:7f:98:f2:9b:69:65:bd:
bb:8d:5e:7f:1c:09:cb:5a:56:cb:b5:5a:cb:a5:6f:c9:a4:e8:
a9:83:be:b8:c3:2f:b4:97:d1:4b:cd:78:d1:28:75:ca:51:6a:
e7:4f:3a:d4:69:5a:aa:6a:4c:6f:b8:13:93:b1:3e:77:03:4f:
6a:39:87:a7:24:b2:44:0b:a9:17:f9:67:06:9c:fd:a9:19:b1:
5f:2c:37:e6:7d:01:1c:99:ab:88:df:5e:72:fe:bb:6e:68:aa:
ce:01:4a:25:b2:7e:75:5d:c2:89:c5:fa:f6:32:c6:e7:86:35:
f8:ef:ea:67:47:6d:c1:22:01:a2:cb:dc:49:98:77:f7:de:61:
2a:b0:54:69
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAaFj2ZpVLH9JDIeZ4aEWMg01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDIyMTM0MjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTI4YThhYWRjNjljMzRjOTVlYzc5MDdkYTJjNjgwNmY1MjgyZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hcq4o+A/C+3sjJdLQ0PHRKDcowk
xu80aAb+WDA9vf02+G/m3bKdFK3Olf285C+DEknp7goLmG2xTiY9vEvVzpbpvJ0S
Z8GkYaCwf3iPX49kP2l/l1UPnG71Jm/d9sscT3BPaecIezHuJ1eAcPP7iu/KQG9j
wEiPbNgkezdIOHMJMtLiKs84Lb+BXTR3gJAn3lcgh2hlMzPZGPqc2mkfxE3ao4MI
pjn8CaXrIlyLe0HdUIfC9eZ6zFYtdMxNlKeTtp0KRUvI/betSqXlZI44YbO5ZaQo
oPhyiHp5nYJHo2+mgUEcams7VsqgnuSwYmvuV03T0Oq3j5IZtzhQk/q0GwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPkoqKrcacNMlex5B9osaAb1KC9lMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMS1TaW9xdHhwdzB5VjdIa0gyaXhvQnZVb0wyVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTIvNTExZjk1LWU0YmYtNDNmMS1hZjJmLWI4MTFjZmNiOWZk
NS8xL1R4c0pYNnRuWXp3Qko5WWY5b1Y0Wk9wckpjVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF63lwME
AF631zANBgkqhkiG9w0BAQsFAAOCAQEAr1ch98hLMCSCler6P1vlXaSgsweUSPW5
oFynDjPEIjNyBld5U8GgdxA+tWX6vir6zlyT0sAg3XQaSP+8HAgTrQEyL+FDzFZi
SCzawjitv0GkJ0fjGebU5hu36RmsEGEvDldKxrycmmG/4qgIGryTH4dOGKBP+V1/
mPKbaWW9u41efxwJy1pWy7Vay6VvyaToqYO+uMMvtJfRS8140Sh1ylFq50861Gla
qmpMb7gTk7E+dwNPajmHpySyRAupF/lnBpz9qRmxXyw35n0BHJmriN9ecv67bmiq
zgFKJbJ+dV3CicX69jLG54Y1+O/qZ0dtwSIBosvcSZh3995hKrBUaQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:07 2026 by rpki-client