Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MzvyVGd47ngnLBUwsal9Nv3ORA.roa
File: 5MzvyVGd47ngnLBUwsal9Nv3ORA.roa (raw, json)
Hash identifier: PGhmINK7lcaROnFrUr42PtG2Kwij+MhWZfl8DcdtaMo=
Subject key identifier: E4:CC:EF:C9:51:9D:E3:B9:E0:9C:B0:54:C2:C6:A5:F4:DB:F7:39:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0573396C523B7CF1A80C344B6563CF1DB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MzvyVGd47ngnLBUwsal9Nv3ORA.roa
Signing time: Mon 31 Aug 2026 09:43:13 +0000
ROA not before: Mon 31 Aug 2026 09:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 94.183.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:33:96:c5:23:b7:cf:1a:80:c3:44:b6:56:3c:f1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 31 09:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4ccefc9519de3b9e09cb054c2c6a5f4dbf73910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:57:87:20:73:df:7a:ba:6b:e8:5a:16:f8:
64:b6:74:27:c5:8c:00:71:2f:26:cd:f5:47:36:e9:
47:0b:5b:d8:d3:a7:9e:47:d5:5f:4a:ba:b0:ad:3c:
c8:d9:2f:33:ba:a5:a9:28:93:d7:96:13:e2:49:35:
e8:aa:dd:61:2c:04:64:0d:42:16:1e:ef:61:e0:b2:
cb:1f:b3:6b:d8:12:d9:37:54:a5:5b:40:01:78:09:
fc:72:b4:f0:42:26:db:c4:72:d9:e5:2f:a8:89:a3:
ee:b3:78:f9:d8:84:27:96:50:b1:54:eb:9a:0d:6d:
ba:de:74:68:11:9c:40:08:7a:56:42:c5:1f:60:d9:
4a:31:47:7c:95:41:dd:ed:38:6b:59:cb:45:56:8d:
28:d5:78:ea:4d:42:bb:15:27:45:c2:78:fa:08:e7:
2c:9e:41:f1:99:07:d3:01:98:3e:6e:f1:31:69:c7:
bb:84:47:9c:89:70:69:bc:50:85:26:2f:be:c7:ce:
da:91:de:9a:8b:e0:c6:04:d2:d2:96:2a:9b:7d:6e:
39:35:f6:82:fa:82:2b:6d:f2:03:02:1b:4f:1b:86:
15:ed:9a:e9:df:d1:0c:a5:d8:ce:5a:3a:52:4a:2f:
25:65:b5:e5:fe:56:3a:5b:b4:37:ee:69:82:a6:60:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:EF:C9:51:9D:E3:B9:E0:9C:B0:54:C2:C6:A5:F4:DB:F7:39:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MzvyVGd47ngnLBUwsal9Nv3ORA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:6b:4b:0b:00:fd:95:a2:1f:9e:46:c9:06:da:af:db:0a:c1:
6f:90:36:f3:10:61:53:3c:02:90:33:9a:e3:d4:ef:c7:2c:e5:
1d:3f:6e:2f:f2:6f:fd:f9:ad:d8:e6:cf:99:5d:ce:25:c2:90:
95:98:18:d3:ad:93:ef:d1:11:21:db:15:4f:cb:14:3f:fc:0a:
f6:17:6e:16:10:a9:f7:97:cf:74:c7:ca:c0:d8:fa:3f:37:0c:
f3:e1:05:26:14:aa:7e:28:b6:7c:8a:3b:7e:24:9f:cf:64:50:
a8:35:be:94:db:6b:8b:d0:cf:c9:ff:cf:23:52:30:94:f5:6f:
a1:81:26:d2:6d:60:cd:db:76:ff:db:d1:6d:e4:87:28:fc:56:
5d:5a:45:80:61:40:52:88:a7:3b:e3:2e:69:c0:d6:37:1c:6b:
f7:4b:ba:d2:e7:55:46:5d:b7:85:a8:0c:f5:d8:5c:4c:ea:64:
75:15:6f:a7:dc:9c:ea:5c:20:aa:ca:aa:19:dd:a4:38:76:81:
6d:17:1a:ed:92:19:ef:a4:2b:e8:5e:fe:fe:bf:67:47:36:c1:
10:e6:94:58:0f:57:52:7b:82:f4:3a:af:74:ea:f9:54:8b:91:
11:69:47:7d:d9:55:e8:3b:cc:30:1c:e2:b8:3c:3e:d5:d1:23:
d8:63:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:41 2026 by rpki-client