Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mNCOk3qz6a0eMrQ8wuDhWcM4SDA.roa
File: mNCOk3qz6a0eMrQ8wuDhWcM4SDA.roa (raw, json)
Hash identifier: BjSyXKUKoW7Yzp9v5s3Pb0QHIIjZBOkbYhUrbVdISGk=
Subject key identifier: 98:D0:8E:93:7A:B3:E9:AD:1E:32:B4:3C:C2:E0:E1:59:C3:38:48:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A13110FE7738381711C9D27D6BF84F1296
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mNCOk3qz6a0eMrQ8wuDhWcM4SDA.roa
Signing time: Mon 12 Oct 2026 17:02:39 +0000
ROA not before: Mon 12 Oct 2026 17:02:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214078
IP address blocks: 94.183.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:10:fe:77:38:38:17:11:c9:d2:7d:6b:f8:4f:12:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 12 17:02:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98d08e937ab3e9ad1e32b43cc2e0e159c3384830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:0e:84:db:59:15:0b:52:40:c7:20:59:05:
ac:1f:15:bd:40:56:a5:df:c0:7b:0d:38:83:ea:c5:
7d:77:ac:3c:a1:f9:79:80:5a:c2:6d:0b:5b:b6:58:
13:fd:c9:a2:37:56:54:c5:72:35:e3:86:e0:54:d5:
4e:b6:9b:9e:0f:57:8c:3e:03:34:59:1b:24:02:79:
79:18:27:ca:21:14:1a:af:4a:5b:f0:50:95:c1:9d:
1c:02:62:3c:42:3e:94:c4:93:ac:01:e5:6c:68:bf:
2d:75:4f:2c:92:64:db:2e:0c:8c:79:81:66:1e:97:
0f:aa:41:98:f2:0b:28:91:29:a9:72:13:14:ae:9d:
11:c0:13:11:4e:e2:16:48:73:12:82:50:eb:2d:ba:
a2:40:56:ea:d6:e7:74:48:ef:f8:d6:e5:f0:29:18:
a0:42:f0:5d:ae:44:d7:f9:6d:be:a5:86:65:ad:ef:
1e:bb:6a:25:ae:8e:db:d9:0a:68:53:a1:11:98:0e:
3e:2b:6b:7d:a4:ea:aa:60:8a:d6:93:73:39:7c:f1:
7a:e9:94:7a:07:9f:20:05:50:99:46:20:e5:07:13:
36:ea:4a:cf:62:eb:90:e4:ee:1e:7c:9e:c1:63:1d:
59:5f:45:72:ff:33:f1:6e:0c:f5:2e:d7:4a:22:d4:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D0:8E:93:7A:B3:E9:AD:1E:32:B4:3C:C2:E0:E1:59:C3:38:48:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mNCOk3qz6a0eMrQ8wuDhWcM4SDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.215.0/24
Signature Algorithm: sha256WithRSAEncryption
23:4a:44:1e:4e:35:86:60:3e:15:4f:52:7a:07:73:1e:96:ae:
60:2f:8b:bf:d1:cc:e2:11:a9:b4:bf:01:27:4a:e1:46:05:ba:
99:95:b2:7c:e0:19:ac:a2:1c:88:2c:79:95:f3:a3:1b:51:86:
c3:ae:c5:9a:95:74:22:6c:89:d7:06:26:97:72:f8:88:8b:bf:
ce:df:c6:0b:b1:d7:97:3f:a6:4d:a6:8f:69:ab:db:a6:ce:89:
34:87:59:0f:13:b9:8a:b4:cd:d6:b5:52:23:ac:98:05:9b:53:
43:de:b5:fa:97:6b:67:2b:70:be:04:8a:9d:13:96:22:48:7a:
a6:3a:40:b4:ea:6b:82:ed:f5:f6:cf:ab:58:a7:a0:84:d9:7a:
63:eb:a1:c6:4d:48:1d:c2:3d:71:ff:57:8a:7a:bb:02:da:c6:
90:f2:cf:8e:a6:f1:41:5e:3b:38:50:ad:40:fe:e9:f9:8d:a9:
82:72:11:25:f1:7c:ad:cd:2f:8b:90:29:13:3c:15:5b:47:5c:
7c:ad:8f:64:b5:1d:06:23:ec:a5:be:fe:24:e4:42:0e:cc:22:
dd:6a:c0:b3:18:77:56:74:0b:e6:93:ef:1d:95:9b:c3:f8:5f:
9d:3f:cf:9f:d0:4d:53:42:24:eb:cd:63:71:b4:f8:f9:c7:b0:
6d:76:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:17 2026 by rpki-client