Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f3A78XGqW4Pu2V1NFnQ8ZrnWhcQ.roa
File: f3A78XGqW4Pu2V1NFnQ8ZrnWhcQ.roa (raw, json)
Hash identifier: RXxbdkngoRi8DHsLvIvMY5MMcSz0GNxyWUcGxNeWuEo=
Subject key identifier: 7F:70:3B:F1:71:AA:5B:83:EE:D9:5D:4D:16:74:3C:66:B9:D6:85:C4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A06C80E8315FEB97EFA647AB22FA34FBD4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f3A78XGqW4Pu2V1NFnQ8ZrnWhcQ.roa
Signing time: Fri 04 Sep 2026 12:59:42 +0000
ROA not before: Fri 04 Sep 2026 12:59:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 94.183.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:80:e8:31:5f:eb:97:ef:a6:47:ab:22:fa:34:fb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 4 12:59:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f703bf171aa5b83eed95d4d16743c66b9d685c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:3d:90:7f:70:de:91:7b:30:d7:49:e1:db:
ac:82:4c:a0:2e:e6:95:db:06:74:d8:7e:bf:31:82:
6d:76:fe:96:8e:8f:94:cd:37:79:22:e3:44:33:f9:
08:84:3e:1d:7b:f6:81:a8:9a:98:d0:5a:be:ff:18:
fe:80:5b:4d:29:37:b2:0b:11:68:c9:ec:fa:8f:1c:
98:99:6f:d0:9f:b1:f6:67:76:b3:a5:22:11:70:ca:
26:a1:6b:2b:56:5d:6a:8f:d7:99:56:3c:ad:d7:70:
ee:f7:c5:32:c2:16:12:81:88:63:da:2f:73:19:6f:
db:65:53:a0:10:48:58:d5:7c:74:96:82:47:08:84:
e2:32:a0:8c:0b:de:19:12:29:65:13:30:38:20:50:
14:34:94:84:fd:05:49:b6:57:f8:b8:0a:c7:0f:1b:
d7:02:a1:1c:e3:03:46:6b:b5:f5:f9:f2:28:e6:f8:
56:ac:97:b1:e9:bf:31:95:00:4e:93:73:86:21:89:
64:f3:95:ac:d9:f9:12:09:96:cb:b4:0e:14:36:e5:
a6:03:08:2f:cd:14:f9:a3:d7:47:d5:d5:0a:bd:a5:
d1:70:a1:59:81:21:21:e5:e4:16:f0:cd:9c:ff:a4:
09:5f:08:d0:0b:ef:49:7c:94:05:40:e8:46:17:42:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:3B:F1:71:AA:5B:83:EE:D9:5D:4D:16:74:3C:66:B9:D6:85:C4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f3A78XGqW4Pu2V1NFnQ8ZrnWhcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.214.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d5:ba:fe:c3:47:ba:34:3f:c2:44:42:7f:58:d0:ab:52:4b:
25:3d:e2:db:c9:e6:ab:5c:8c:b4:ba:80:9c:47:37:92:09:81:
f8:eb:0b:b4:2b:7a:5d:21:10:63:0b:29:30:f0:7a:9c:b9:13:
e7:cf:c0:cf:ad:da:b6:e8:f3:29:fb:7f:5b:88:7e:41:c5:39:
37:52:e2:ce:a4:6f:66:cc:fe:df:b5:27:16:57:bb:07:a4:f1:
96:2a:1c:cb:c9:57:12:f3:86:f3:60:81:d9:ca:51:c7:0b:c8:
6e:f7:0c:18:bc:42:2d:73:57:9b:e1:31:aa:27:7d:69:92:7e:
23:fa:14:9f:ec:0e:c7:2f:67:12:76:f7:07:6c:5b:bc:4d:1c:
79:af:e5:08:97:67:31:77:5a:44:96:98:40:d2:3c:c3:c4:49:
13:ae:0f:a7:84:d8:17:31:1d:99:74:f2:d3:13:08:66:ab:df:
ae:09:2a:dc:a2:d5:db:e2:83:ae:e9:f0:e9:08:01:4b:2f:ab:
c7:39:6c:cb:9f:29:62:4c:e0:e7:d7:a1:09:2a:aa:02:69:00:
60:93:63:8b:2e:6c:86:b1:8c:74:aa:b0:44:a5:a1:34:99:1c:
9b:e1:e7:37:71:c2:6f:08:ab:6e:36:30:9a:fb:8c:e9:0f:ac:
69:7e:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:19 2026 by rpki-client