Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5auiWDm9Xf4SGrOHQK3qUAJ0eAU.roa
File: 5auiWDm9Xf4SGrOHQK3qUAJ0eAU.roa (raw, json)
Hash identifier: xUnWQhVUmq/PP0vPogUaOp9130HmyajUwW40TP5qyhw=
Subject key identifier: E5:AB:A2:58:39:BD:5D:FE:12:1A:B3:87:40:AD:EA:50:02:74:78:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A16ECD8961E458B5EE7C96F47239195E51
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5auiWDm9Xf4SGrOHQK3qUAJ0eAU.roa
Signing time: Sat 24 Oct 2026 16:45:26 +0000
ROA not before: Sat 24 Oct 2026 16:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218596
IP address blocks: 94.183.192.0/24 maxlen: 24
94.183.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:cd:89:61:e4:58:b5:ee:7c:96:f4:72:39:19:5e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 24 16:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5aba25839bd5dfe121ab38740adea5002747805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:40:14:fb:ca:94:1d:96:97:80:1e:ec:bf:
44:09:67:27:b1:8b:7e:34:36:ac:36:ff:c6:86:f7:
03:0a:a3:5a:c7:1b:1b:c2:be:aa:49:32:c6:2c:70:
a3:4e:8f:cf:24:f3:43:7b:3b:4a:c3:c8:0f:e9:3f:
ac:1c:24:b5:a7:49:7a:57:4e:e5:17:fd:14:cf:7d:
69:2c:2e:59:7a:96:34:48:5c:3c:04:a6:ea:a0:9a:
4f:9a:08:84:99:fb:c5:da:40:bb:27:f8:c8:6e:83:
7f:13:39:b9:5a:05:a7:29:19:ec:e7:d6:ba:5a:59:
00:6a:22:9a:4b:f6:2c:23:dc:ae:d5:1f:3f:61:f4:
4a:5f:9a:ca:f6:db:fb:55:ad:16:2c:d2:87:7e:cd:
a4:90:05:bd:dd:2a:8b:04:ed:86:5c:12:ae:12:9a:
66:69:63:18:79:ae:cc:e6:30:7a:36:ec:e8:99:29:
a9:77:2e:6f:46:b6:07:9d:0d:d5:23:bd:0d:f0:67:
ae:71:71:aa:fe:34:1f:f8:de:a5:03:1e:5c:11:6a:
43:a8:97:9b:47:74:a2:ca:08:cc:37:b3:d7:91:6a:
47:81:2e:fe:0b:42:4f:83:97:ea:59:5a:bb:cb:2d:
ad:e1:7b:1c:bd:82:28:29:ea:e9:c4:a8:c0:24:74:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AB:A2:58:39:BD:5D:FE:12:1A:B3:87:40:AD:EA:50:02:74:78:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5auiWDm9Xf4SGrOHQK3qUAJ0eAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.192.0/24
94.183.216.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6e:2d:83:6e:17:f0:3e:44:13:89:32:54:0e:a0:bb:0f:17:
c7:ae:01:44:08:6b:8a:84:e8:54:29:b1:2f:c8:81:aa:a7:30:
34:c0:19:85:98:6f:f0:28:9c:ce:18:8e:64:ed:1c:c0:3d:9b:
15:c1:f5:11:54:dc:2b:a6:54:70:94:bc:e9:74:26:6e:13:b5:
77:6d:22:74:f2:8f:44:a1:7a:86:b6:81:46:0b:47:04:03:27:
89:22:f9:e6:cb:9a:59:2d:0c:d0:67:c7:f0:28:4c:9e:9b:08:
45:bd:29:ef:d5:02:b0:23:f1:be:6b:f6:eb:f8:e6:43:9d:0d:
54:00:a0:25:a8:3e:ec:ec:fe:8a:cb:44:38:75:ef:eb:a8:16:
21:2c:fe:d7:4d:5e:e6:6f:20:5a:0b:66:22:30:68:9d:d9:09:
29:2a:9e:fb:24:2b:02:92:15:48:b2:67:f4:c2:fd:bb:5e:c3:
c0:03:08:f3:a0:f5:be:70:a2:8e:42:33:03:25:8e:d6:4e:bc:
aa:15:4f:3c:e9:de:7c:cb:29:d7:6b:db:58:4c:28:ca:e2:2d:
f1:b9:7f:06:0a:08:4d:72:ac:1b:b5:63:e9:e7:db:57:9d:e1:
00:4c:e3:da:c4:36:27:45:2b:79:1f:4a:ee:df:91:69:b0:4f:
f5:3d:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:05 2026 by rpki-client