Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hj8dWrWS1koVrBcEdh9eYSsz2Dc.roa
File: hj8dWrWS1koVrBcEdh9eYSsz2Dc.roa (raw, json)
Hash identifier: OdLjOJoXhGsZ9Dr30/hx3Lg+HYzQtbspXimq43J1WMI=
Subject key identifier: 86:3F:1D:5A:B5:92:D6:4A:15:AC:17:04:76:1F:5E:61:2B:33:D8:37
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0390B2F3741E7A2342DB6D5043787D666
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hj8dWrWS1koVrBcEdh9eYSsz2Dc.roa
Signing time: Tue 25 Aug 2026 13:10:29 +0000
ROA not before: Tue 25 Aug 2026 13:10:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203676
IP address blocks: 94.183.252.0/24 maxlen: 24
217.60.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:0b:2f:37:41:e7:a2:34:2d:b6:d5:04:37:87:d6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 25 13:10:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=863f1d5ab592d64a15ac1704761f5e612b33d837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:67:56:78:86:05:64:b0:14:e7:95:c8:8a:f2:
4e:ed:a1:22:14:92:f9:d6:59:84:54:cc:99:52:62:
19:db:eb:12:cc:c3:4f:2a:f5:e0:76:ec:4c:2b:cf:
3d:1e:67:88:cd:f9:c1:e4:c3:3d:eb:81:6a:fe:30:
92:08:55:9a:2b:97:c6:d8:4d:89:27:f6:bd:09:16:
e2:25:67:c0:73:c7:43:2c:24:4a:c2:2d:9b:e2:11:
9f:c0:cf:30:1e:b0:67:4b:3a:1f:34:3e:a3:6e:a9:
e7:13:1c:e0:54:c0:98:70:a5:8e:8b:19:f0:47:9a:
0d:e6:b3:f6:c2:db:da:ff:16:c2:c7:94:2b:5f:ee:
d2:d8:d7:2d:7a:6e:fd:95:20:a5:8d:69:4d:57:50:
a2:7d:d3:93:15:3f:5c:67:ec:93:0e:dc:b2:75:78:
bb:dc:64:34:32:f7:f5:13:f8:4a:5e:98:f0:7a:74:
5f:5d:ea:70:73:8a:50:49:ac:e2:ed:65:42:1a:95:
05:73:3b:01:9d:5b:94:b7:72:aa:32:14:30:36:7d:
ea:5f:2c:a2:b5:3f:a2:8f:ca:14:87:47:b6:70:6e:
ce:0b:22:00:c8:62:b1:4f:99:33:73:ea:53:11:37:
66:a6:a5:91:31:67:43:8d:92:58:f8:e6:ba:e6:ce:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:1D:5A:B5:92:D6:4A:15:AC:17:04:76:1F:5E:61:2B:33:D8:37
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hj8dWrWS1koVrBcEdh9eYSsz2Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.252.0/24
217.60.22.0/24
Signature Algorithm: sha256WithRSAEncryption
90:59:54:c9:d5:cc:2d:2c:7d:92:0f:d1:60:d8:fd:4c:07:9a:
76:db:b1:41:35:ca:f6:26:a5:b3:bd:26:4f:d6:b5:4a:30:49:
f5:d9:28:bb:3b:1e:b7:8e:3e:f0:64:33:ee:c9:10:45:1d:2d:
65:46:87:c6:2b:56:29:39:50:0e:4e:a6:b0:33:d3:28:0b:51:
f2:db:e1:b9:4f:5f:e2:e5:f5:86:01:90:e1:a5:9a:9f:74:e3:
b7:02:8a:82:ac:cd:dd:76:c2:57:9d:c0:11:ef:b0:1a:5b:65:
49:fe:76:6f:0a:8c:64:98:09:51:ab:fb:df:8f:18:99:a3:2e:
51:52:4f:77:8a:28:3f:aa:6d:35:21:08:ec:fe:77:74:81:ae:
bd:52:c5:9f:de:1a:0b:5c:2d:08:cd:bb:3e:b6:c7:d0:bd:da:
87:2b:e8:7f:00:e7:3a:4c:d2:97:9c:17:42:03:2c:6a:a8:9b:
f8:0b:7f:cf:06:65:a5:f4:67:a5:c7:6d:4f:43:26:1d:1c:5a:
f4:1e:01:fc:09:a5:1c:98:d7:30:e5:89:7a:74:b4:2b:ea:e0:
18:9d:bc:32:5c:33:10:e2:fc:b3:08:ff:26:9f:8f:22:5a:86:
1b:fd:df:6c:ea:da:5e:19:34:04:24:7c:3c:3e:44:2e:6f:73:
30:f7:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 01:19:02 2026 by rpki-client