Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Iyvz5xweNLylOI724z-WDUlniVM.roa
File: Iyvz5xweNLylOI724z-WDUlniVM.roa (raw, json)
Hash identifier: O5gjuekUdPaJm2l3IMUsV+bxjkuWXORT0iQSgs64vvk=
Subject key identifier: 23:2B:F3:E7:1C:1E:34:BC:A5:38:8E:F6:E3:3F:96:0D:49:67:89:53
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A88AE089075CED75C1B4A4E395BEADC19
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Iyvz5xweNLylOI724z-WDUlniVM.roa
Signing time: Sat 15 Nov 2025 18:01:38 +0000
ROA not before: Sat 15 Nov 2025 18:01:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214431
IP address blocks: 94.183.156.0/24 maxlen: 24
94.183.157.0/24 maxlen: 24
94.183.160.0/24 maxlen: 24
94.183.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:88:ae:08:90:75:ce:d7:5c:1b:4a:4e:39:5b:ea:dc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 18:01:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=232bf3e71c1e34bca5388ef6e33f960d49678953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:59:7d:e0:92:b2:56:44:dc:09:29:43:44:
89:8c:b1:a2:04:43:a3:83:6c:db:47:2e:f3:90:a4:
40:ed:c7:b5:9d:40:9b:0d:a4:ac:c8:d1:04:0f:67:
11:d3:c1:6b:9d:b0:3f:03:5e:33:be:f6:11:3f:21:
7f:0c:8e:e6:be:1f:b6:97:86:65:b6:9f:e7:87:00:
aa:ff:66:1d:86:dd:ce:b5:ad:ff:0e:6c:ac:aa:83:
36:76:9e:93:ee:82:04:cf:a8:63:a4:3e:53:f0:87:
70:a4:52:34:e2:e8:59:4b:d8:4e:c5:f3:a4:12:3d:
63:4e:40:e5:34:86:36:2a:47:31:0c:95:3a:09:1e:
a8:6b:92:c4:32:bf:90:19:47:11:a1:56:f9:ed:76:
f6:70:54:7c:66:08:3f:66:1e:95:e1:d9:5e:68:cb:
9a:04:10:dd:fb:1b:e9:48:fb:70:90:04:38:4b:ea:
34:9c:a2:e3:48:10:4e:3e:5d:66:8c:f2:d3:18:e2:
31:6a:c4:06:21:ee:6a:7f:2e:27:0f:b9:aa:f5:51:
95:be:8d:64:25:ae:46:0b:c5:f2:d6:91:47:92:ac:
5c:07:1b:af:a7:51:ae:24:63:74:09:bc:cd:aa:79:
7a:30:d4:9d:39:39:c0:e2:a8:76:5d:ee:56:86:b9:
50:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:F3:E7:1C:1E:34:BC:A5:38:8E:F6:E3:3F:96:0D:49:67:89:53
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Iyvz5xweNLylOI724z-WDUlniVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.156.0/23
94.183.160.0/24
94.183.164.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a4:85:8b:25:e7:74:3f:bd:31:83:b0:21:8e:eb:ba:e6:0d:
66:5d:b8:85:3f:cd:dc:fb:da:6f:cf:72:d6:b0:a6:76:d1:d4:
15:3f:a7:42:ff:dc:bf:b1:c5:1f:c3:5c:3a:ce:7c:70:80:db:
9b:2b:a6:33:05:4c:7a:39:2a:19:be:8d:0a:07:f0:e2:37:eb:
d1:95:41:c2:f7:e9:70:bc:19:6b:1e:ce:24:f9:2e:bd:2c:0a:
8d:1a:79:80:79:7c:8e:d9:20:21:60:30:d6:9e:84:2f:ad:04:
91:80:ab:ee:24:df:28:be:32:44:2c:de:84:a9:70:4a:18:30:
ee:86:f4:6c:9c:77:4c:f8:6f:c1:6b:41:ec:53:1e:96:89:a4:
1e:97:f0:3b:da:94:f4:cc:35:02:d9:fd:34:ee:27:e4:18:ce:
1e:32:4e:ea:64:f7:41:5c:94:97:97:3a:b7:af:4b:19:56:d2:
97:2c:be:7a:91:45:a5:ec:d9:72:f8:b5:9f:ab:03:66:92:b7:
84:2f:cc:cc:29:96:29:c1:24:d2:2d:1a:dd:1b:97:3d:be:a0:
66:fe:12:8b:ff:76:5e:59:95:36:6c:b1:92:15:07:a6:47:f4:
a2:82:9f:a4:9a:18:3a:3b:51:46:0b:bd:6e:25:71:65:70:7b:
8a:90:ce:92
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZqIrgiQdc7XXBtKTjlb6twZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMTE1MTgwMTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzJiZjNlNzFjMWUzNGJjYTUzODhlZjZlMzNmOTYwZDQ5Njc4OTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNBZfeCSslZE3AkpQ0SJjLGiBEOj
g2zbRy7zkKRA7ce1nUCbDaSsyNEED2cR08FrnbA/A14zvvYRPyF/DI7mvh+2l4Zl
tp/nhwCq/2Ydht3Ota3/DmysqoM2dp6T7oIEz6hjpD5T8IdwpFI04uhZS9hOxfOk
Ej1jTkDlNIY2KkcxDJU6CR6oa5LEMr+QGUcRoVb57Xb2cFR8Zgg/Zh6V4dleaMua
BBDd+xvpSPtwkAQ4S+o0nKLjSBBOPl1mjPLTGOIxasQGIe5qfy4nD7mq9VGVvo1k
Ja5GC8Xy1pFHkqxcBxuvp1GuJGN0CbzNqnl6MNSdOTnA4qh2Xe5WhrlQ3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCMr8+ccHjS8pTiO9uM/lg1JZ4lTMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSXl2ejV4d2VOTHlsT0k3MjR6LVdEVWxuaVZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXrecAwQA
XregAwQAXrekMA0GCSqGSIb3DQEBCwUAA4IBAQB4pIWLJed0P70xg7Ahjuu65g1m
XbiFP83c+9pvz3LWsKZ20dQVP6dC/9y/scUfw1w6znxwgNubK6YzBUx6OSoZvo0K
B/DiN+vRlUHC9+lwvBlrHs4k+S69LAqNGnmAeXyO2SAhYDDWnoQvrQSRgKvuJN8o
vjJELN6EqXBKGDDuhvRsnHdM+G/Ba0HsUx6WiaQel/A72pT0zDUC2f007ifkGM4e
Mk7qZPdBXJSXlzq3r0sZVtKXLL56kUWl7Nly+LWfqwNmkreEL8zMKZYpwSTSLRrd
G5c9vqBm/hKL/3ZeWZU2bLGSFQemR/Sigp+kmhg6O1FGC71uJXFlcHuKkM6S
-----END CERTIFICATE-----
Generated at Mon Nov 17 00:48:41 2025 by rpki-client