Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g-ZEgQFbVkmrk1rXzqDlWFYYWTg.roa
File: g-ZEgQFbVkmrk1rXzqDlWFYYWTg.roa (raw, json)
Hash identifier: czdIaQyJnte8ocXS8yJqLONjdL4jZSc86iSpZH1yW7A=
Subject key identifier: 83:E6:44:81:01:5B:56:49:AB:93:5A:D7:CE:A0:E5:58:56:18:59:38
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E6423F4350D5E07C7BE85E6406F664CAC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g-ZEgQFbVkmrk1rXzqDlWFYYWTg.roa
Signing time: Tue 26 May 2026 11:55:38 +0000
ROA not before: Tue 26 May 2026 11:55:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31549
IP address blocks: 94.183.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:23:f4:35:0d:5e:07:c7:be:85:e6:40:6f:66:4c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 26 11:55:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83e64481015b5649ab935ad7cea0e55856185938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:a2:a1:59:e0:0d:2a:50:55:ba:1e:9c:9c:
c8:c7:0d:a3:24:f0:44:2f:2d:ae:6a:37:c1:b5:6e:
2a:b1:dc:d6:d2:e8:34:38:0c:b0:74:73:d9:f5:31:
a9:1f:27:6e:cf:a0:68:0a:af:ac:da:dc:03:57:62:
6e:d4:8d:55:d0:14:e8:3b:1d:9f:67:ef:f5:44:4d:
82:20:44:2a:77:c3:0d:14:ce:0d:e9:a4:8b:f7:37:
05:fd:d8:1a:2f:9c:e5:4c:54:d5:c7:a0:2b:9d:2d:
42:1c:1e:87:e0:c6:f7:db:5b:5a:ae:51:90:4a:77:
c4:bd:a8:2d:e7:6f:a1:25:1e:13:d8:5c:df:e4:d8:
d9:f6:f0:52:b9:c6:d7:95:0b:7e:40:49:94:5f:a7:
c8:b4:f8:76:97:e8:1e:04:70:3f:d0:af:21:4f:0c:
07:2a:78:eb:a9:db:8e:11:7a:3e:5d:68:2c:08:f6:
63:ba:bd:76:3a:18:51:e8:69:87:28:12:60:62:4d:
87:82:c2:b6:bc:b7:92:7f:82:a2:b7:15:18:3e:a7:
c6:6d:aa:16:b1:52:df:94:92:08:b8:7b:55:34:14:
c9:b2:1f:3d:58:b5:47:fc:bd:35:da:32:86:52:25:
5f:6b:17:13:7c:16:96:bf:a7:e1:3d:7b:ed:1d:45:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:44:81:01:5B:56:49:AB:93:5A:D7:CE:A0:E5:58:56:18:59:38
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g-ZEgQFbVkmrk1rXzqDlWFYYWTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5d:1e:08:e1:ad:2f:cf:ca:c0:34:cc:18:74:4e:01:53:a1:
49:61:40:32:26:6f:b7:ba:ba:5b:69:ed:04:7b:e8:c1:57:e9:
81:74:0f:c9:63:77:89:bb:de:fa:d0:6f:8e:fe:d8:5a:3e:c8:
a9:b6:db:39:fc:2e:d3:ef:b8:44:d7:4f:c1:1c:08:55:d2:f7:
ac:23:b2:6b:57:02:0e:10:c5:bc:fe:ea:21:c5:93:43:51:9a:
c3:a5:7b:8b:4c:be:62:83:be:bd:47:5b:06:06:7e:13:3c:01:
a2:05:2d:fd:8e:9a:4a:72:43:d0:9c:86:f4:e2:15:89:3e:01:
fb:56:de:74:4d:aa:da:b0:c9:71:9f:37:81:92:ac:83:7a:b6:
64:d0:8b:24:a4:68:41:fc:bb:20:9b:dd:de:4a:52:fd:54:d8:
d1:b9:15:25:d3:a8:6a:72:cb:7b:05:44:45:ce:8e:bd:bd:34:
e4:8a:54:ef:e2:bc:b7:81:6e:cc:b5:98:6b:bb:e2:b4:17:6f:
72:b3:66:b2:f6:71:21:e0:b0:25:84:cc:59:b9:79:f9:e8:b7:
59:1a:82:a9:f9:8e:b7:59:b2:a4:df:b7:9c:41:d7:9e:f9:46:
89:6e:9f:0e:45:e1:17:df:f3:54:fc:1c:7a:e7:bc:56:82:48:
73:70:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:59:26 2026 by rpki-client