Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HeI8zqjXxft5yVD1pg2VFbTzKTE.roa
File: HeI8zqjXxft5yVD1pg2VFbTzKTE.roa (raw, json)
Hash identifier: NVE0IKfrNjLHD9cn3MZcZ608+7rD88IbUEUMgfShltI=
Subject key identifier: 1D:E2:3C:CE:A8:D7:C5:FB:79:C9:50:F5:A6:0D:95:15:B4:F3:29:31
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A2519907F339E0B036E1C7AD302986376
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HeI8zqjXxft5yVD1pg2VFbTzKTE.roa
Signing time: Mon 27 Oct 2025 09:57:03 +0000
ROA not before: Mon 27 Oct 2025 09:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214957
IP address blocks: 94.183.150.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:19:90:7f:33:9e:0b:03:6e:1c:7a:d3:02:98:63:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 09:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de23ccea8d7c5fb79c950f5a60d9515b4f32931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:65:1d:5d:f2:db:c3:53:d9:e4:e1:b7:58:
7e:0b:03:c5:a3:ab:f4:c6:0a:32:12:c3:1d:ca:b3:
67:23:37:59:46:38:2a:5b:90:70:7a:33:2d:92:14:
90:10:be:10:4f:2f:9a:24:1b:62:f6:62:cf:3f:e9:
4f:3a:76:09:04:84:43:12:1d:9e:e5:f8:9d:47:d8:
98:28:68:47:2a:ec:e8:17:ec:1e:f9:77:62:c8:2e:
f5:be:b2:54:54:d7:86:fb:89:55:fa:35:bb:76:c0:
23:50:e6:12:14:2a:7f:d8:24:12:27:02:15:2e:25:
8b:37:42:1e:97:64:40:8c:6e:a6:94:58:94:c7:12:
d3:12:de:56:9f:2d:be:6d:6a:a4:77:1f:1b:94:db:
b8:5e:eb:27:44:7f:8a:90:46:31:4e:a0:00:92:6e:
34:1b:0e:f6:4c:53:f9:80:8a:ad:1c:50:4e:53:82:
86:05:aa:6d:82:b0:29:1f:48:48:11:3e:d9:a6:f1:
9c:b3:e2:fb:42:8c:b4:62:0d:13:49:e8:8b:1f:33:
5b:d0:12:57:42:56:b4:ae:f1:98:60:3a:98:85:1c:
29:1d:26:ce:6b:93:db:e3:e8:c6:a6:98:fb:cb:bb:
67:c5:09:fb:f7:ef:eb:20:c6:05:cd:43:6d:a1:46:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E2:3C:CE:A8:D7:C5:FB:79:C9:50:F5:A6:0D:95:15:B4:F3:29:31
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HeI8zqjXxft5yVD1pg2VFbTzKTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.150.0/24
94.183.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:71:ae:f0:c5:f9:64:a8:85:85:e6:34:0e:09:76:0a:57:63:
ca:01:c8:2f:7e:6e:9c:df:72:a2:24:12:a4:d7:12:d2:41:14:
02:f1:b9:2d:5e:8d:78:6d:82:d2:91:69:71:b8:60:d2:0f:83:
6a:d9:34:47:59:8f:2d:c9:19:1b:ef:ec:40:bf:26:e8:9a:67:
d3:a0:5b:5a:b0:c1:46:3d:08:a8:38:08:8d:a8:ce:24:c5:16:
68:94:24:92:7a:ab:45:ba:51:d6:6f:4a:d0:24:29:3f:dc:2c:
04:2e:5f:9c:06:63:8f:51:3c:e2:79:c7:bb:5b:17:8b:c3:3d:
4d:e0:b0:01:66:78:e0:10:5e:35:e8:37:61:8a:cd:95:41:08:
6e:22:b7:5a:d3:35:ed:5e:b9:b4:ad:4e:19:bc:1d:0c:cd:df:
3a:a6:05:bc:a3:d8:19:ef:ec:cb:8d:3a:fc:f4:32:2f:41:20:
ea:33:50:6e:67:70:48:95:41:57:9c:0a:54:85:be:f9:9e:b6:
28:4b:f9:fa:45:03:77:1c:66:7b:1a:27:e7:a8:de:f1:db:12:
03:3c:e4:9e:f6:30:b8:f7:c9:63:a0:86:ce:35:29:f1:d3:ff:
f2:63:7a:18:49:7b:d2:47:35:df:07:ca:e4:be:f2:c6:06:26:
38:d9:4d:bd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZolGZB/M54LA24cetMCmGN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMDI3MDk1NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGUyM2NjZWE4ZDdjNWZiNzljOTUwZjVhNjBkOTUxNWI0ZjMyOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ9lHV3y28NT2eTht1h+CwPFo6v0
xgoyEsMdyrNnIzdZRjgqW5BwejMtkhSQEL4QTy+aJBti9mLPP+lPOnYJBIRDEh2e
5fidR9iYKGhHKuzoF+we+XdiyC71vrJUVNeG+4lV+jW7dsAjUOYSFCp/2CQSJwIV
LiWLN0Iel2RAjG6mlFiUxxLTEt5Wny2+bWqkdx8blNu4XusnRH+KkEYxTqAAkm40
Gw72TFP5gIqtHFBOU4KGBaptgrApH0hIET7ZpvGcs+L7Qoy0Yg0TSeiLHzNb0BJX
Qla0rvGYYDqYhRwpHSbOa5Pb4+jGppj7y7tnxQn79+/rIMYFzUNtoUZYrwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB3iPM6o18X7eclQ9aYNlRW08ykxMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSGVJOHpxalh4ZnQ1eVZEMXBnMlZGYlR6S1RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXreWAwQA
XreiMA0GCSqGSIb3DQEBCwUAA4IBAQCica7wxflkqIWF5jQOCXYKV2PKAcgvfm6c
33KiJBKk1xLSQRQC8bktXo14bYLSkWlxuGDSD4Nq2TRHWY8tyRkb7+xAvybommfT
oFtasMFGPQioOAiNqM4kxRZolCSSeqtFulHWb0rQJCk/3CwELl+cBmOPUTziece7
WxeLwz1N4LABZnjgEF416Ddhis2VQQhuIrda0zXtXrm0rU4ZvB0Mzd86pgW8o9gZ
7+zLjTr89DIvQSDqM1BuZ3BIlUFXnApUhb75nrYoS/n6RQN3HGZ7GifnqN7x2xID
POSe9jC498ljoIbONSnx0//yY3oYSXvSRzXfB8rkvvLGBiY42U29
-----END CERTIFICATE-----
Generated at Mon Oct 27 16:20:44 2025 by rpki-client