Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lGpKfb387dJ-gTpd4Pl0eW2v0R0.roa
File: lGpKfb387dJ-gTpd4Pl0eW2v0R0.roa (raw, json)
Hash identifier: Zl0uw6Yh1EdIEQDQm/Nn8F5bBx3uYGVb7qOgW552exQ=
Subject key identifier: 94:6A:4A:7D:BD:FC:ED:D2:7E:81:3A:5D:E0:F9:74:79:6D:AF:D1:1D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A10C5BAD482D2AE7781ECDD3ADAEAF4326
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lGpKfb387dJ-gTpd4Pl0eW2v0R0.roa
Signing time: Mon 05 Oct 2026 13:58:17 +0000
ROA not before: Mon 05 Oct 2026 13:58:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 94.183.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:5b:ad:48:2d:2a:e7:78:1e:cd:d3:ad:ae:af:43:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 5 13:58:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=946a4a7dbdfcedd27e813a5de0f974796dafd11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:c5:36:a6:18:0e:df:72:02:0f:39:45:e2:
2f:52:07:f0:01:df:da:41:e5:76:10:38:45:09:35:
94:c6:c6:37:c0:e9:87:be:64:8f:37:32:f7:cd:12:
da:13:93:6e:2b:8e:82:32:27:06:51:6a:d3:5e:16:
07:96:3a:ed:70:03:0a:19:b5:c1:de:dc:a9:98:9a:
ae:fa:34:fa:49:17:e3:65:7e:e6:c9:d2:15:95:de:
6f:d7:04:d6:de:fc:d1:98:f1:c9:e3:60:19:8d:ea:
87:28:0f:73:d2:dc:24:c9:9c:49:9e:57:ba:3b:0c:
db:a4:21:63:51:19:ae:4e:de:2c:b9:6a:05:c0:23:
8a:c3:a0:09:9b:89:2d:a5:50:33:7c:4e:ee:06:c8:
f0:f5:fb:2d:c8:d5:de:d0:33:37:bf:11:38:62:85:
61:98:aa:d0:24:f2:f7:c8:d2:1e:18:66:4c:3d:a1:
f4:ff:cf:22:ab:21:f9:6b:a6:07:fc:a9:8a:bb:16:
1b:6a:45:d8:08:7b:2a:ee:6c:26:85:fe:f7:5d:f3:
1b:02:31:48:d2:82:e0:6a:f7:5c:78:5e:de:ce:7a:
7f:ad:bd:24:8b:9d:45:d6:5b:21:8a:8b:1f:94:82:
d9:df:ba:3e:91:b1:fe:94:5a:3d:0e:e4:6c:bc:54:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6A:4A:7D:BD:FC:ED:D2:7E:81:3A:5D:E0:F9:74:79:6D:AF:D1:1D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lGpKfb387dJ-gTpd4Pl0eW2v0R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5d:94:09:79:4a:12:9c:a4:54:7b:ce:aa:46:99:6e:cc:bf:
66:12:f0:ac:1c:c3:51:88:a8:58:41:5b:6b:4b:e2:fb:43:37:
25:6e:78:e8:da:5d:d8:7c:e6:aa:42:7e:dd:69:2f:fb:e2:5a:
03:8b:38:66:9d:36:1f:6f:04:b4:a2:d1:2b:b6:bf:0c:10:09:
8c:f2:78:6d:82:7b:58:2f:83:9f:a1:74:67:bf:bc:9e:e7:9a:
e3:d8:cb:ae:00:19:41:0f:fa:c8:e5:8d:af:26:3d:df:6f:94:
51:da:0c:42:3a:48:25:26:ec:14:cd:5f:f9:f8:1f:10:e8:ad:
22:d3:36:71:2c:ab:ea:e5:2e:ff:75:d7:36:cf:2e:48:5a:e9:
fd:cb:95:85:3f:5e:4e:a9:b7:83:3e:a8:89:fe:d8:12:4b:1d:
61:eb:64:09:3e:8e:67:3f:a3:b2:d2:c3:a1:72:77:a3:9b:e4:
13:c4:84:68:e5:b3:07:a6:96:e3:de:f6:bb:cc:41:8a:11:ca:
18:0c:63:b1:71:ff:68:e9:91:e5:f1:e4:05:da:3d:4e:6e:2c:
a3:78:c0:b9:52:91:4f:5c:ad:02:fe:67:1c:1f:4f:5a:28:86:
ad:a3:44:09:e4:a3:4e:9b:a2:0b:88:3e:e3:64:07:62:fa:3e:
21:6f:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:08 2026 by rpki-client