Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P_yLX-S0AcOQvNCmniOPdHFw6wA.roa
File: P_yLX-S0AcOQvNCmniOPdHFw6wA.roa (raw, json)
Hash identifier: QWdcrBnqb3gI0uulZB2JXx8T3PI/hhckECQjzRlwYcQ=
Subject key identifier: 3F:FC:8B:5F:E4:B4:01:C3:90:BC:D0:A6:9E:23:8F:74:71:70:EB:00
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019ED57151A85C9F9C8D17A5D0167EB4B83C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P_yLX-S0AcOQvNCmniOPdHFw6wA.roa
Signing time: Wed 17 Jun 2026 11:57:13 +0000
ROA not before: Wed 17 Jun 2026 11:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201194
IP address blocks: 94.183.173.0/24 maxlen: 24
94.183.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:71:51:a8:5c:9f:9c:8d:17:a5:d0:16:7e:b4:b8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 17 11:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ffc8b5fe4b401c390bcd0a69e238f747170eb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6a:0c:e9:35:f4:fb:5e:ed:20:a2:8e:c1:11:
5c:70:f2:ea:9f:c6:1e:e4:1a:ba:71:28:47:47:76:
3c:33:61:37:73:1e:0b:b0:3b:98:d1:7e:2c:5a:8c:
83:30:11:d0:6a:20:1b:02:25:75:35:42:e0:67:ba:
99:03:ee:f3:0a:55:e1:16:84:46:42:69:55:0d:77:
ac:f3:e1:89:9f:24:bd:ec:6f:52:71:8f:de:e7:83:
84:69:40:61:9f:ac:b3:f9:61:70:2d:dd:de:1d:3f:
c0:9e:30:5e:05:b2:cc:dc:27:37:69:ba:75:72:e4:
7f:88:d8:04:6c:00:69:db:ef:c8:8a:31:c6:a7:90:
d6:26:a4:e6:7b:2b:46:4e:16:c2:fe:77:a1:8a:20:
3d:23:06:e9:19:b2:7b:06:85:82:41:b1:0e:af:4b:
27:70:9a:08:e3:13:9f:89:ed:ff:31:aa:94:ce:79:
f0:4f:97:e2:84:9c:6a:f2:cb:fa:d2:7c:96:39:f1:
86:14:41:83:01:e0:45:63:fe:df:ea:27:2b:59:8c:
47:b3:76:af:14:96:47:77:ac:22:e9:76:82:0e:c5:
7a:fe:44:0c:af:3a:5c:a9:a3:60:05:60:e6:8e:e8:
45:98:dd:d8:a8:41:25:b4:1a:30:04:e1:48:75:12:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:8B:5F:E4:B4:01:C3:90:BC:D0:A6:9E:23:8F:74:71:70:EB:00
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P_yLX-S0AcOQvNCmniOPdHFw6wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.173.0/24
94.183.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9d:c8:30:bd:e4:e4:23:f1:f1:e7:9a:30:19:ac:4a:1c:cb:
22:ce:3b:59:b9:8b:72:88:3c:53:67:f6:2e:42:14:3e:7a:ac:
27:6a:6f:f3:23:56:8b:cb:85:dd:8b:7f:e6:71:71:c9:df:a6:
45:d2:d2:7f:aa:28:00:55:19:2f:56:77:b8:71:6f:d8:33:a1:
92:b0:e8:c8:66:35:13:24:ca:3b:46:b8:9e:ae:95:bd:6f:3f:
07:be:cd:51:56:fc:60:17:0d:75:75:4d:1d:cb:bc:a0:e9:b3:
30:f2:c2:5c:20:79:fb:73:e9:f1:5a:70:e8:f9:66:6b:89:3c:
45:73:8a:ad:fa:78:db:76:4e:f0:98:df:72:9f:2b:1f:4a:12:
ee:e8:12:26:0c:01:ed:96:1f:13:42:3c:62:f5:ed:b9:77:b8:
85:e8:2f:6c:5c:d9:e0:7a:33:e0:b1:e9:71:1e:72:02:52:39:
5b:eb:20:3e:d0:3f:b6:fa:18:c6:44:09:cb:71:25:8a:a9:ba:
0a:81:f3:b0:ee:d8:12:94:fd:34:20:93:25:a4:ef:67:b8:96:
3a:1b:91:3e:d9:78:ef:fb:75:f7:dc:e1:dc:3b:f3:bb:34:c7:
60:b3:27:01:d2:2b:df:58:5f:65:95:de:e0:3d:bc:50:fa:77:
e2:6c:62:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7VcVGoXJ+cjRel0BZ+tLg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjE3MTE1NzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmZjOGI1ZmU0YjQwMWMzOTBiY2QwYTY5ZTIzOGY3NDcxNzBlYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WoM6TX0+17tIKKOwRFccPLqn8Ye
5Bq6cShHR3Y8M2E3cx4LsDuY0X4sWoyDMBHQaiAbAiV1NULgZ7qZA+7zClXhFoRG
QmlVDXes8+GJnyS97G9ScY/e54OEaUBhn6yz+WFwLd3eHT/AnjBeBbLM3Cc3abp1
cuR/iNgEbABp2+/IijHGp5DWJqTmeytGThbC/nehiiA9IwbpGbJ7BoWCQbEOr0sn
cJoI4xOfie3/MaqUznnwT5fihJxq8sv60nyWOfGGFEGDAeBFY/7f6icrWYxHs3av
FJZHd6wi6XaCDsV6/kQMrzpcqaNgBWDmjuhFmN3YqEEltBowBOFIdRIrRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD/8i1/ktAHDkLzQpp4jj3RxcOsAMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUF95TFgtUzBBY09Rdk5DbW5pT1BkSEZ3NndBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXretAwQA
XrfSMA0GCSqGSIb3DQEBCwUAA4IBAQA7ncgwveTkI/Hx55owGaxKHMsizjtZuYty
iDxTZ/YuQhQ+eqwnam/zI1aLy4Xdi3/mcXHJ36ZF0tJ/qigAVRkvVne4cW/YM6GS
sOjIZjUTJMo7RrierpW9bz8Hvs1RVvxgFw11dU0dy7yg6bMw8sJcIHn7c+nxWnDo
+WZriTxFc4qt+njbdk7wmN9ynysfShLu6BImDAHtlh8TQjxi9e25d7iF6C9sXNng
ejPgselxHnICUjlb6yA+0D+2+hjGRAnLcSWKqboKgfOw7tgSlP00IJMlpO9nuJY6
G5E+2Xjv+3X33OHcO/O7NMdgsycB0ivfWF9lld7gPbxQ+nfibGKr
-----END CERTIFICATE-----
Generated at Fri Jun 26 17:05:01 2026 by rpki-client