Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YtJk1N7wBPL6sySyKpw5v62PVCU.roa
File: YtJk1N7wBPL6sySyKpw5v62PVCU.roa (raw, json)
Hash identifier: Ux6WCIy6kRL/gJZLZ71eQTI0UTzBelo5KdYaZDkHNTw=
Subject key identifier: 62:D2:64:D4:DE:F0:04:F2:FA:B3:24:B2:2A:9C:39:BF:AD:8F:54:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019ECCBB6B9C87F3525F970B95DCD9A16098
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YtJk1N7wBPL6sySyKpw5v62PVCU.roa
Signing time: Mon 15 Jun 2026 19:21:35 +0000
ROA not before: Mon 15 Jun 2026 19:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198685
IP address blocks: 94.183.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:bb:6b:9c:87:f3:52:5f:97:0b:95:dc:d9:a1:60:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 15 19:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62d264d4def004f2fab324b22a9c39bfad8f5425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:5b:bf:6c:ff:e3:6d:d9:00:12:2a:12:5a:
9a:49:14:d8:ac:d6:ef:8f:51:2f:ce:f7:5e:51:49:
1d:86:6c:38:f3:32:fe:7d:24:03:74:0c:8f:9b:a9:
ce:99:da:78:86:93:38:78:1e:1d:b6:1c:49:08:e6:
66:e0:f5:1d:21:13:9e:7e:f1:94:13:00:c3:ae:31:
5d:1c:2d:b0:3e:fe:22:6a:e9:ee:ea:57:74:6c:75:
df:ac:53:c2:a6:2c:37:29:13:4c:f7:62:96:72:a3:
8d:e3:3b:95:df:7b:30:f5:25:69:2b:b1:7b:12:08:
a6:76:e9:5d:5d:df:24:3d:74:83:ac:be:39:69:c6:
83:b6:31:47:4d:de:15:04:ad:8d:65:59:25:73:ee:
e5:ce:a6:ea:a6:7a:06:2a:70:90:66:43:df:7e:11:
49:2a:a4:de:5b:d0:72:b0:22:57:f3:51:ee:f1:9b:
90:3a:aa:04:5f:0f:2c:f9:0e:16:d6:ae:db:42:f5:
dd:5b:8e:7f:ab:a9:fc:3a:9c:34:45:39:7c:3c:78:
1a:cd:29:79:eb:93:7b:be:07:30:b8:ef:4b:19:cd:
e0:ff:3d:16:26:b4:cb:f7:81:79:ab:6c:7c:78:6f:
a5:31:86:21:19:02:f2:cd:73:e3:b4:ee:09:1b:2a:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:64:D4:DE:F0:04:F2:FA:B3:24:B2:2A:9C:39:BF:AD:8F:54:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YtJk1N7wBPL6sySyKpw5v62PVCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.224.0/24
Signature Algorithm: sha256WithRSAEncryption
63:aa:50:57:dd:23:b6:0f:f9:99:3f:46:38:4a:64:72:57:32:
52:72:b6:33:b2:b2:45:9d:4a:91:f9:5d:b4:b1:d1:13:0b:87:
b3:c0:5b:62:b7:8b:d9:db:cb:dd:45:60:f4:c3:44:03:c3:ec:
d7:53:e4:01:01:67:39:aa:38:ee:bc:c8:dd:82:aa:f7:c2:03:
d5:51:14:66:9f:3d:7d:0a:41:1f:f4:79:40:c5:97:af:f3:b2:
3e:ab:49:7e:45:6d:7a:93:ee:7b:7e:66:d3:c7:57:ec:fa:33:
a4:df:e2:55:7c:df:ab:00:3a:52:e4:0a:df:42:eb:ac:d5:ee:
9c:ca:d5:cb:18:ea:7f:fb:e8:59:df:28:26:59:92:cb:e4:c0:
3f:9e:cb:19:12:34:a0:1e:f7:6c:60:09:d5:b5:c4:10:5e:56:
5c:b5:4c:a5:88:59:bd:40:06:31:e0:cf:b9:e9:59:04:f2:45:
5b:37:de:3c:1c:cf:21:b3:7b:5e:98:e4:ea:51:4d:ec:66:12:
e5:0d:b1:f5:79:d0:4e:58:f5:45:76:be:6f:34:25:e8:02:96:
55:23:18:2c:dc:4d:69:0c:8b:35:3f:ae:43:f1:c0:27:5e:8a:
a0:3f:a9:c4:c0:e1:95:bd:f9:c2:86:07:78:4b:88:ac:4e:af:
41:ff:12:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7Mu2uch/NSX5cLldzZoWCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjE1MTkyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmQyNjRkNGRlZjAwNGYyZmFiMzI0YjIyYTljMzliZmFkOGY1NDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrRbv2z/423ZABIqElqaSRTYrNbv
j1EvzvdeUUkdhmw48zL+fSQDdAyPm6nOmdp4hpM4eB4dthxJCOZm4PUdIROefvGU
EwDDrjFdHC2wPv4iaunu6ld0bHXfrFPCpiw3KRNM92KWcqON4zuV33sw9SVpK7F7
EgimduldXd8kPXSDrL45acaDtjFHTd4VBK2NZVklc+7lzqbqpnoGKnCQZkPffhFJ
KqTeW9BysCJX81Hu8ZuQOqoEXw8s+Q4W1q7bQvXdW45/q6n8Opw0RTl8PHgazSl5
65N7vgcwuO9LGc3g/z0WJrTL94F5q2x8eG+lMYYhGQLyzXPjtO4JGypHaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLSZNTe8ATy+rMksiqcOb+tj1QlMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWXRKazFON3dCUEw2c3lTeUtwdzV2NjJQVkNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrfgMA0G
CSqGSIb3DQEBCwUAA4IBAQBjqlBX3SO2D/mZP0Y4SmRyVzJScrYzsrJFnUqR+V20
sdETC4ezwFtit4vZ28vdRWD0w0QDw+zXU+QBAWc5qjjuvMjdgqr3wgPVURRmnz19
CkEf9HlAxZev87I+q0l+RW16k+57fmbTx1fs+jOk3+JVfN+rADpS5ArfQuus1e6c
ytXLGOp/++hZ3ygmWZLL5MA/nssZEjSgHvdsYAnVtcQQXlZctUyliFm9QAYx4M+5
6VkE8kVbN948HM8hs3temOTqUU3sZhLlDbH1edBOWPVFdr5vNCXoApZVIxgs3E1p
DIs1P65D8cAnXoqgP6nEwOGVvfnChgd4S4isTq9B/xJ4
-----END CERTIFICATE-----
Generated at Sat Jun 20 06:09:05 2026 by rpki-client