Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VHgX5JPViOFc_CBL08l8uBEm2qg.roa
File: VHgX5JPViOFc_CBL08l8uBEm2qg.roa (raw, json)
Hash identifier: ujqT+PAn07YV4AKOZKaPr3stI+qwa4yduR1CUifwZQI=
Subject key identifier: 54:78:17:E4:93:D5:88:E1:5C:FC:20:4B:D3:C9:7C:B8:11:26:DA:A8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EDAC6ECB44AE13593BF9A80078990449D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VHgX5JPViOFc_CBL08l8uBEm2qg.roa
Signing time: Thu 18 Jun 2026 12:48:50 +0000
ROA not before: Thu 18 Jun 2026 12:48:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219506
IP address blocks: 94.183.206.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:c6:ec:b4:4a:e1:35:93:bf:9a:80:07:89:90:44:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 18 12:48:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=547817e493d588e15cfc204bd3c97cb81126daa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:53:21:f5:92:f3:9a:b1:0a:70:71:7f:26:
ca:4a:73:d6:48:ac:f2:85:90:85:61:6e:54:d1:a2:
be:de:d6:73:2c:87:c0:fe:70:7f:cb:78:9b:50:0a:
e1:0f:3e:62:13:de:9e:ae:a8:05:c7:7f:cc:56:cc:
47:a9:cc:10:16:3f:12:6b:7a:f3:24:cd:98:d7:59:
9b:76:0b:df:cc:12:41:f1:7d:bc:6b:3f:36:4b:84:
24:ee:d8:cd:c4:b5:7e:aa:6d:93:af:89:f5:13:ea:
eb:0e:61:54:2a:78:94:c8:79:83:f9:77:97:43:7e:
64:78:cf:84:49:7b:dd:9d:2c:76:37:df:fc:97:1e:
6e:c1:91:97:61:7e:0c:04:c6:c0:9b:e1:86:66:c6:
f0:d3:7d:b9:33:97:89:25:ad:64:05:bf:76:5b:d6:
58:0a:02:bb:e7:88:4a:e3:01:91:c3:ff:65:25:28:
e2:69:6d:48:6c:79:b4:a3:f1:6f:b2:2f:84:1f:1c:
e6:4b:cb:96:68:e7:df:b7:8a:8e:a0:41:66:74:65:
4b:f6:42:f3:d7:97:d3:ec:a6:4d:cc:23:d8:0e:4b:
72:b5:50:cd:a4:07:fd:68:f6:64:c7:03:d7:36:70:
3a:95:4e:01:1d:4f:6d:2b:21:f5:e6:5d:23:58:b4:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:78:17:E4:93:D5:88:E1:5C:FC:20:4B:D3:C9:7C:B8:11:26:DA:A8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VHgX5JPViOFc_CBL08l8uBEm2qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.206.0/24
94.183.226.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6d:bd:70:a1:af:c6:ec:73:2a:33:5e:8d:b4:00:fc:73:e9:
62:db:77:a5:b2:ca:ef:34:5b:21:fc:bf:95:7c:0b:78:60:f3:
e7:48:ea:5b:a8:4f:b4:69:45:03:e1:14:ba:2c:44:e0:63:f0:
df:2b:aa:2c:5f:bd:ba:c4:5b:53:33:1f:4a:fa:a6:7a:05:cb:
24:0d:1b:d6:21:93:d6:b3:fc:c4:05:a3:8e:6a:15:b1:23:d1:
0c:fa:05:21:04:00:f0:22:d2:cd:17:3d:37:4b:a5:9b:5b:09:
00:83:bb:f3:96:af:71:87:22:37:95:c7:40:fd:78:42:65:8f:
5b:15:30:e8:14:d4:68:49:49:95:cf:19:d2:62:4c:ca:3f:0c:
e4:d3:99:6a:88:72:42:47:49:0b:d3:c7:99:fe:d9:49:ac:87:
8f:21:79:d5:87:2a:65:e6:14:56:33:3f:7f:23:6c:c9:5b:56:
2c:83:81:58:48:12:61:96:59:5a:16:39:6a:44:3d:ae:a2:1f:
d3:11:dc:85:42:72:d3:75:85:3a:69:a6:bd:32:bd:d3:d7:d8:
35:d9:8c:d7:0f:46:e2:86:dc:73:10:1b:52:65:4e:8b:5f:2b:
33:90:36:a8:2f:f7:2c:9d:1a:fc:5c:29:c9:05:5b:68:94:14:
46:be:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:01:04 2026 by rpki-client