Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mncfnrlg3GkhA106WP0HvKavSNA.roa
File: mncfnrlg3GkhA106WP0HvKavSNA.roa (raw, json)
Hash identifier: XdP+3SWnqNi3ENdQfhIdfOihUPccw2dCpz2TGSe2VNM=
Subject key identifier: 9A:77:1F:9E:B9:60:DC:69:21:03:5D:3A:58:FD:07:BC:A6:AF:48:D0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A12EE61F6656C45CA7247972740810C04B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mncfnrlg3GkhA106WP0HvKavSNA.roa
Signing time: Mon 12 Oct 2026 06:56:35 +0000
ROA not before: Mon 12 Oct 2026 06:56:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212056
IP address blocks: 94.183.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:e6:1f:66:56:c4:5c:a7:24:79:72:74:08:10:c0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 12 06:56:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a771f9eb960dc6921035d3a58fd07bca6af48d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:7d:ed:6d:87:5e:14:07:19:18:76:1e:ad:
59:c3:ff:d5:f0:5d:79:06:5a:30:1c:93:f8:c0:9b:
b9:c1:72:e8:13:7b:9f:28:31:95:16:3a:8e:ee:77:
c4:ef:3f:a5:6b:69:07:3e:c2:b2:89:5d:9e:ee:e2:
a6:00:19:c6:59:c9:25:ac:40:b6:b7:16:f7:8d:4f:
b6:c0:ad:8d:44:4d:24:57:84:db:b1:3b:8e:31:5c:
e2:56:2b:de:b2:fd:77:70:9b:51:40:5d:77:2d:e3:
9d:72:23:96:ee:8c:0d:10:aa:38:18:f1:79:7e:87:
2f:a2:14:d8:e6:69:8e:1f:19:85:d9:fe:02:88:52:
60:4e:d0:fa:5c:e1:75:07:82:11:12:63:1c:2e:da:
cb:99:87:1c:55:13:71:c8:ee:92:e6:88:f7:8c:4c:
6f:36:6a:e7:f2:c8:3d:b2:7b:e6:7e:26:81:8b:03:
b3:96:67:27:d4:f1:30:e0:e9:fe:e9:4d:cd:1c:7f:
ba:13:89:84:63:c4:ec:27:1c:07:3b:3c:a7:f2:3d:
c1:9c:50:16:ba:9b:58:05:d5:5f:de:eb:cf:29:b2:
34:13:11:5d:0f:43:b6:6a:44:a6:8e:f2:8f:19:7f:
c6:cf:4d:ef:3f:44:12:5e:4a:af:7c:9b:17:84:c2:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:77:1F:9E:B9:60:DC:69:21:03:5D:3A:58:FD:07:BC:A6:AF:48:D0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mncfnrlg3GkhA106WP0HvKavSNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.223.0/24
Signature Algorithm: sha256WithRSAEncryption
83:30:ec:36:42:44:aa:98:ff:2d:d9:e0:07:10:77:0a:76:13:
f1:9a:83:e2:33:32:25:84:e3:25:15:3f:c9:0e:8f:70:73:4a:
fd:2b:1f:8d:05:8c:40:6b:66:27:ae:c9:e3:ba:10:be:63:85:
11:c1:4e:49:04:3a:b2:61:13:3e:c8:cd:16:cd:75:32:c6:d4:
dd:f1:01:78:2b:4e:b1:ff:1f:4d:5d:18:55:4f:77:1f:f0:b3:
c6:6c:cc:3f:a6:8a:d7:c7:3f:a5:23:4b:3c:bb:3d:08:f9:20:
5a:7b:32:ac:90:ce:91:22:2e:65:e7:a3:9a:9d:b0:79:da:51:
8f:25:03:68:77:9d:13:b2:35:c6:ca:9d:35:97:72:10:ea:42:
7f:ba:fa:e7:49:d6:da:4f:08:96:c8:65:ed:f2:17:68:f7:3a:
09:55:3e:2c:c5:ab:f6:d0:d3:7a:2b:f5:22:6e:9f:61:22:14:
67:9c:1e:49:f2:2a:7e:43:be:0f:d7:a5:bf:23:1d:a2:ed:5d:
66:a9:a6:86:df:4b:ba:7a:75:aa:79:46:34:0f:28:16:8b:aa:
7a:41:e1:da:f8:73:3f:2f:d6:19:07:38:1a:65:1d:e9:5b:32:
92:22:54:41:75:0a:4c:70:04:e7:d3:02:14:04:9a:d9:f5:82:
18:c0:3f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:11 2026 by rpki-client