Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jK_ead73q3OdE4PGnxsrmAvInnY.roa
File: jK_ead73q3OdE4PGnxsrmAvInnY.roa (raw, json)
Hash identifier: 3AXdweZNhPdsb6gTcufnJrX1pJRNIqW80FJqwGQXQSI=
Subject key identifier: 8C:AF:DE:69:DE:F7:AB:73:9D:13:83:C6:9F:1B:2B:98:0B:C8:9E:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EC19477BA900BC7D214A710C510F6DB2C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jK_ead73q3OdE4PGnxsrmAvInnY.roa
Signing time: Sat 13 Jun 2026 15:23:13 +0000
ROA not before: Sat 13 Jun 2026 15:23:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205536
IP address blocks: 94.183.175.0/24 maxlen: 24
94.183.227.0/24 maxlen: 24
94.183.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:94:77:ba:90:0b:c7:d2:14:a7:10:c5:10:f6:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 13 15:23:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cafde69def7ab739d1383c69f1b2b980bc89e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:d6:01:37:c5:e2:10:95:fe:45:d3:2a:36:
22:c6:ef:c2:5f:a5:54:14:02:52:e8:fc:0b:fe:af:
69:e8:f6:39:1d:43:fe:a2:f1:44:60:80:b3:30:13:
ce:d9:f9:4c:e6:69:0a:bf:94:fb:f4:23:14:f0:60:
5c:64:41:d8:d1:93:9b:8a:98:dd:ad:a1:33:58:f2:
a8:00:46:4e:c4:3e:6a:8c:64:be:85:e5:4d:c2:99:
a0:7e:b1:7c:0d:9c:04:9d:82:0e:41:28:be:6a:86:
7e:f2:08:85:04:38:5d:44:0f:74:63:cb:3c:d5:33:
e6:51:1e:18:65:ef:08:22:3f:66:3d:0b:e8:85:55:
da:20:a7:76:a5:01:63:12:8e:d6:61:bd:2e:d9:fc:
44:1d:18:f2:35:f9:6a:6c:b3:c3:f8:41:16:f1:6a:
bd:b7:ff:5d:4f:1f:b2:75:96:e5:7a:70:62:0d:9b:
e5:83:18:ec:88:1e:a3:1a:2e:77:e8:28:fe:50:a1:
24:7b:c3:c3:02:2c:d3:59:3d:e4:4b:4d:ef:08:95:
cf:77:ea:e9:10:a7:bb:90:02:75:79:02:5d:47:9d:
f0:d3:47:d9:92:4e:f9:2c:fd:c8:8a:cc:82:83:f8:
45:3d:c8:40:ec:5f:57:8e:ab:5f:08:ba:dd:a3:06:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:DE:69:DE:F7:AB:73:9D:13:83:C6:9F:1B:2B:98:0B:C8:9E:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jK_ead73q3OdE4PGnxsrmAvInnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.175.0/24
94.183.227.0/24
94.183.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6b:37:24:fe:e9:4a:33:59:f3:79:d8:dd:e0:39:c0:ce:06:
a2:71:54:21:c5:5b:e3:7e:f2:2f:f1:29:f4:0c:dd:b6:79:c7:
e5:be:eb:74:26:dd:8b:77:27:e7:73:de:ff:31:d9:92:d7:b8:
31:d4:2b:54:01:aa:16:c8:ea:ce:e3:bd:f8:dd:ca:69:34:68:
e8:db:ea:26:f1:f6:d9:12:04:5a:28:a9:0b:e3:a9:eb:3c:25:
d6:4d:e9:99:3e:d1:57:67:e9:bf:21:18:53:ff:b3:57:11:f0:
16:5d:79:d3:a6:51:f4:f7:18:21:6b:4d:a7:5c:6c:e6:9d:23:
b8:2b:9a:73:bd:ac:79:bc:db:5b:b3:6b:a1:f2:c3:d3:88:b7:
66:3f:7b:4a:a6:93:31:d3:2b:28:f6:c9:b8:b8:03:b5:00:31:
e9:51:98:42:22:77:dd:70:ad:44:28:47:03:42:e5:e2:88:76:
1e:92:a6:8d:7a:52:c4:e0:9e:d9:63:8c:cb:b6:b0:3c:28:16:
97:5b:72:75:72:1e:c0:0f:82:fc:15:08:cd:b0:e4:7e:2a:be:
06:b4:1c:58:59:08:74:cf:8d:17:4c:2b:c2:ad:57:1e:23:5f:
7d:aa:4f:72:0a:4a:19:80:3a:9e:d0:43:81:d6:95:84:8f:bf:
c7:34:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:03:23 2026 by rpki-client