Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kEaPkB0Of8pcvaPk3yFvbzRvRuE.roa
File: kEaPkB0Of8pcvaPk3yFvbzRvRuE.roa (raw, json)
Hash identifier: uMiHDcvAu1AOeBuMWAHNNBcNCITKDNx0GMXEuKjZSQo=
Subject key identifier: 90:46:8F:90:1D:0E:7F:CA:5C:BD:A3:E4:DF:21:6F:6F:34:6F:46:E1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E22BA0997BC72257E48CD5EA8B807E813
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kEaPkB0Of8pcvaPk3yFvbzRvRuE.roa
Signing time: Wed 13 May 2026 19:04:37 +0000
ROA not before: Wed 13 May 2026 19:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23507
IP address blocks: 94.183.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:ba:09:97:bc:72:25:7e:48:cd:5e:a8:b8:07:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 13 19:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90468f901d0e7fca5cbda3e4df216f6f346f46e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:9f:0a:ca:e7:c1:59:53:d3:3b:fb:d7:29:
7f:da:38:90:80:8f:e5:1e:e8:fc:36:da:12:56:4e:
6d:a1:79:ba:14:c0:38:7f:d3:6b:e4:ea:4a:b3:63:
ab:1e:b0:b5:63:f9:64:82:84:ea:3b:6c:c3:48:af:
d1:45:3b:b7:47:2b:6c:38:4e:86:c5:1c:74:cb:86:
bc:14:4c:b8:30:83:dd:8e:fd:28:13:1a:9b:98:b0:
ab:a5:7d:c6:36:3d:bb:98:80:91:29:67:31:41:5a:
40:4e:eb:96:26:bf:a4:1d:a9:54:57:ce:14:03:5e:
aa:92:0b:4d:ce:a6:52:4b:f9:af:6f:c6:e9:4f:68:
3b:d2:fb:fe:cc:e3:23:3f:97:f5:e4:32:b9:b1:13:
46:f5:e7:bb:29:b9:da:56:03:90:ed:d9:0b:b5:8f:
b9:70:94:e6:ae:8b:93:95:76:0d:1c:4f:89:fb:b5:
ed:94:c6:62:90:a7:f9:8e:0a:77:72:e1:f3:10:3d:
ac:ae:b3:30:3c:ef:9a:50:0c:ca:66:c3:92:2b:da:
e5:3f:a9:28:56:25:28:cb:c9:98:bf:b8:32:dc:27:
a4:1a:09:83:f6:fa:16:c7:7c:72:95:bb:22:f3:50:
0f:b7:d1:b6:f8:86:f2:db:67:d9:ef:e4:e9:19:9d:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:46:8F:90:1D:0E:7F:CA:5C:BD:A3:E4:DF:21:6F:6F:34:6F:46:E1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kEaPkB0Of8pcvaPk3yFvbzRvRuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.226.0/23
Signature Algorithm: sha256WithRSAEncryption
19:15:5c:3d:65:db:33:94:7b:fd:7a:d2:53:d8:19:33:ca:f3:
bd:62:1f:a4:cf:5b:a7:44:fe:51:e1:e2:2c:8c:97:e0:bd:09:
eb:5f:e2:d3:51:9f:d3:8b:73:a6:f5:a4:09:aa:84:2a:23:a8:
a1:f7:5a:79:23:dc:8e:fb:e3:1c:7f:4a:69:e5:9f:b1:2a:e4:
16:61:33:49:a3:e8:f6:98:ec:ef:cf:71:81:76:cb:30:6c:fd:
37:5e:9f:81:9d:40:bf:b1:35:f6:45:87:b1:90:c0:06:2f:0c:
00:0b:7b:d3:a4:d9:10:eb:d7:bb:ff:c9:2d:ae:13:1a:2c:33:
bf:e6:13:38:35:35:69:ce:f0:11:f0:f7:6b:49:77:be:61:27:
73:f6:21:0d:c2:23:fc:8d:82:5a:fc:10:7e:10:c3:37:2d:b8:
81:7e:6f:df:e9:6f:99:80:77:ba:5c:5c:72:9b:d3:59:f9:1c:
ab:a6:1b:37:db:23:f2:15:84:df:9d:9a:43:48:d1:11:7a:fa:
a2:79:ce:6f:6a:a0:47:f6:9f:a3:9c:eb:e7:ae:6d:2b:80:24:
09:71:2b:cd:1e:41:2c:a8:43:d6:57:e8:89:5b:c6:c0:8f:02:
2c:c4:fb:4b:14:ca:2e:c7:5c:f9:8a:95:e2:fb:f4:8d:ee:50:
10:44:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:54:51 2026 by rpki-client