Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qKIPrMBImz-q1a3C6Jm5Lyu-MZQ.roa
File: qKIPrMBImz-q1a3C6Jm5Lyu-MZQ.roa (raw, json)
Hash identifier: aYAAsdyTpxmLfWJEC1hfP5/ulSK+Kq3BHnEipBnD/Wk=
Subject key identifier: A8:A2:0F:AC:C0:48:9B:3F:AA:D5:AD:C2:E8:99:B9:2F:2B:BE:31:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A082C030B453D81C7EEDF47F67DC0EA147
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qKIPrMBImz-q1a3C6Jm5Lyu-MZQ.roa
Signing time: Tue 08 Sep 2026 20:40:28 +0000
ROA not before: Tue 08 Sep 2026 20:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204203
IP address blocks: 94.183.166.0/24 maxlen: 24
217.60.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:c0:30:b4:53:d8:1c:7e:ed:f4:7f:67:dc:0e:a1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 8 20:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8a20facc0489b3faad5adc2e899b92f2bbe3194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:de:1e:34:2f:09:02:a3:9c:8f:1a:ad:91:
31:78:94:19:31:12:d3:ec:70:da:4c:81:3c:8c:bd:
0f:ad:b9:75:39:37:ae:7b:b2:f3:37:8e:27:fc:d8:
af:c4:35:b2:27:e2:16:a4:f8:77:37:34:00:3e:f3:
99:91:11:7c:c7:42:ce:1b:4c:09:36:20:99:a9:8f:
ae:d4:5b:be:90:40:64:0d:4b:46:b1:40:4e:63:cb:
62:0c:ce:37:ce:79:44:78:35:3c:e6:01:d1:e3:78:
e6:89:50:2a:48:76:39:71:95:c1:1b:a9:2f:e4:a1:
fd:c9:40:0b:f5:6f:aa:a7:64:c7:bd:9c:4f:68:dc:
8f:f7:3e:bb:f9:69:bc:97:85:d9:9a:a6:bb:d9:9e:
3f:2c:1a:de:f1:0d:c4:32:da:88:56:d1:a4:73:2e:
a8:66:2c:ed:2c:62:61:29:51:e6:2c:ee:63:d3:2b:
4a:a1:38:96:68:4c:6a:68:7d:2b:6b:3f:dc:3c:df:
fc:4a:56:4f:66:a0:6b:c8:51:28:bb:98:b5:b6:71:
81:f2:54:5c:be:77:8d:fe:c8:d1:ee:c8:02:4a:5a:
bf:fc:c4:26:e5:9e:f5:eb:3e:f1:5e:be:3c:b1:13:
89:d2:c2:92:23:cd:50:a4:a7:c6:45:0a:98:14:78:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:0F:AC:C0:48:9B:3F:AA:D5:AD:C2:E8:99:B9:2F:2B:BE:31:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qKIPrMBImz-q1a3C6Jm5Lyu-MZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.166.0/24
217.60.255.0/24
Signature Algorithm: sha256WithRSAEncryption
99:62:fc:3c:f0:6a:8b:b3:d3:6a:c5:fe:af:85:57:d0:19:b2:
4b:6c:c4:03:1b:39:4b:07:1d:28:38:19:01:3b:aa:92:b8:0e:
b7:05:47:34:5d:28:0b:98:18:c3:9c:b5:e5:e7:21:33:2e:be:
6f:a5:d9:d3:e9:a7:5f:2d:07:f3:78:ea:45:20:eb:06:ab:70:
6e:84:56:28:f0:78:5d:db:57:a9:63:f8:7c:6d:84:09:ec:4f:
76:98:e4:75:d7:22:7d:b3:20:9d:ec:f8:25:72:f3:2d:e8:ea:
04:ee:b1:e6:f7:a2:4e:9e:3a:82:d2:d6:16:38:46:c1:ba:31:
3e:ba:ae:af:70:da:32:a8:5c:05:5c:68:1a:31:39:48:f3:fe:
73:04:03:8f:27:a2:ab:4b:00:0e:02:5a:47:bf:1e:37:81:c7:
a7:3d:d3:01:72:b5:06:03:07:99:50:45:18:4c:f7:54:eb:2a:
5d:38:9e:0f:a6:94:4f:c8:8b:18:96:60:43:6c:94:e1:a1:a8:
8b:87:60:00:96:ca:71:9b:ed:fe:b1:8e:ce:d0:b0:0f:b3:b1:
dd:84:fa:02:2e:e7:7d:0e:2c:6d:66:21:b7:b5:0f:36:7d:9b:
7a:19:64:83:60:ff:63:42:22:7d:86:f9:06:94:e7:ac:47:62:
6d:e5:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:21 2026 by rpki-client