Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RatsTfVZfbGWl5NVmQoR1tBQlkI.roa
File: RatsTfVZfbGWl5NVmQoR1tBQlkI.roa (raw, json)
Hash identifier: MJJn2vxr3ooGJFPRdW4UU4sAj7+8a7oirMDcZwr6k9w=
Subject key identifier: 45:AB:6C:4D:F5:59:7D:B1:96:97:93:55:99:0A:11:D6:D0:50:96:42
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019ED940F90A828FCE7F9C1D7C3DD3161776
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RatsTfVZfbGWl5NVmQoR1tBQlkI.roa
Signing time: Thu 18 Jun 2026 05:42:54 +0000
ROA not before: Thu 18 Jun 2026 05:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 94.183.150.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.216.0/24 maxlen: 24
94.183.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:40:f9:0a:82:8f:ce:7f:9c:1d:7c:3d:d3:16:17:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 18 05:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45ab6c4df5597db196979355990a11d6d0509642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:52:90:bc:c7:75:15:0f:26:e2:f9:4f:fe:
4a:e1:39:e1:8e:d6:1d:ea:55:53:5b:ab:56:43:94:
50:f7:2b:ac:da:54:92:05:c1:59:6a:46:12:73:bf:
5d:5d:6f:44:d5:ff:af:e8:63:11:d1:38:46:b9:63:
fe:b1:d9:6a:92:61:8f:cc:f4:3f:36:05:6b:af:db:
17:7d:eb:8d:b2:52:9a:8b:bc:4c:96:b6:8a:1c:d1:
aa:48:41:23:91:7f:52:5b:98:d0:77:87:f6:a5:12:
9e:d1:4b:86:e6:4c:ad:81:55:42:de:76:c5:94:37:
fe:03:0e:8f:08:25:a2:0b:89:41:54:7e:86:a5:90:
8a:1e:26:59:41:73:7d:1c:cf:3a:2b:3f:62:d8:e0:
7d:ca:0b:34:52:cd:13:58:f0:27:a8:25:70:e4:60:
85:e9:00:e1:d5:e7:30:06:a2:25:24:86:c2:0a:e4:
b3:9d:61:a6:d2:c9:6c:5f:3e:43:5a:cf:20:c0:ab:
13:9f:5d:bc:e8:84:23:8a:27:e2:e3:67:8e:90:0f:
6c:b7:3f:68:d8:80:d4:be:d2:96:3c:0a:7d:c3:08:
13:54:07:cf:fb:9a:49:a1:a9:c6:1d:75:2c:17:1c:
48:ab:9d:5b:e1:18:61:ea:85:09:84:8a:ea:28:32:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:6C:4D:F5:59:7D:B1:96:97:93:55:99:0A:11:D6:D0:50:96:42
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RatsTfVZfbGWl5NVmQoR1tBQlkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.150.0/24
94.183.162.0/24
94.183.216.0/24
94.183.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:92:1e:86:b2:91:56:05:f0:ad:ba:ce:42:67:b1:c3:61:28:
5c:85:fe:d8:fd:41:d0:55:29:c3:c5:43:ec:e4:d2:e1:4e:e1:
e3:7a:42:f7:05:65:54:60:39:46:34:6c:c3:cd:f6:e7:d9:27:
25:ca:cf:4b:8a:d4:18:dc:d2:83:fe:9e:24:4b:e3:ad:8a:cf:
1c:34:f7:37:da:1d:fe:9a:c0:c9:07:00:a7:e5:3d:9b:f1:10:
41:47:4f:d4:f4:a0:61:d5:4d:08:43:ea:d1:43:17:6f:e9:9f:
36:e3:68:98:a1:bb:d1:dd:aa:f0:a0:26:40:49:dd:49:de:8b:
ab:21:de:8a:2e:c6:a4:8b:59:42:c9:91:b6:7a:7a:04:79:8a:
62:74:37:67:b7:40:c9:27:4e:19:52:ae:df:00:70:bd:c0:e1:
b2:ac:d4:66:2d:f5:ae:3b:25:4a:c5:48:32:b3:08:3e:b4:b3:
28:66:96:6c:f0:2d:53:c5:f2:45:ba:c9:06:94:6d:cb:b6:84:
19:7b:72:ad:33:ec:55:b6:8b:dd:28:7d:03:f2:70:1a:26:e0:
ae:78:07:26:0d:63:ce:f1:ba:26:37:d6:2b:56:8a:c4:98:b7:
2f:3b:ce:c8:01:13:25:ac:52:7d:eb:26:ac:01:30:06:fa:46:
d0:b9:8e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:05:06 2026 by rpki-client