
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sah12qvAiHgntPo80ktBkN2lhjM.roa
File: sah12qvAiHgntPo80ktBkN2lhjM.roa (raw, json)
Hash identifier: ELZCvAo7Ky5Vo53pbBSV4jZttnsfmIHxzWn3+r1Wz2U=
Subject key identifier: B1:A8:75:DA:AB:C0:88:78:27:B4:FA:3C:D2:4B:41:90:DD:A5:86:33
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EF0AF3D0B40ADABBD52A7F5CC92506B55
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sah12qvAiHgntPo80ktBkN2lhjM.roa
Signing time: Mon 22 Jun 2026 18:54:36 +0000
ROA not before: Mon 22 Jun 2026 18:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 94.183.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:af:3d:0b:40:ad:ab:bd:52:a7:f5:cc:92:50:6b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 22 18:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1a875daabc0887827b4fa3cd24b4190dda58633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:45:2c:f9:41:ff:c0:0a:cf:d3:7c:a7:c6:
06:cc:21:09:e4:d1:52:63:f6:7a:6a:21:de:ff:96:
9a:00:a3:18:35:0d:ec:98:08:32:08:a0:8b:db:e7:
6e:b3:e1:0e:58:c1:02:30:91:e6:e4:44:2e:2b:a1:
3f:94:51:95:ae:16:2e:c6:f0:93:f2:69:78:fa:2c:
3f:5f:21:9b:e5:07:c1:94:e2:0d:e2:b6:04:a8:04:
7a:f6:34:92:8f:df:d2:63:ff:f2:09:9d:56:97:86:
96:36:83:ba:31:8d:13:63:6c:0b:c7:78:04:6b:a6:
04:4e:31:f6:30:41:df:b1:d6:aa:f7:51:8f:15:8d:
24:17:d1:06:d0:96:46:62:5d:f5:1b:6c:3e:31:fd:
4b:d1:b8:91:f8:61:a9:f5:5f:d8:08:65:2e:71:28:
bb:db:e1:ba:64:95:0b:44:98:29:61:09:a2:97:77:
50:5d:4f:22:89:02:71:d2:ab:e6:61:05:0b:f2:9a:
81:da:2f:96:b7:7c:c1:f1:40:66:64:02:51:69:51:
ad:7b:25:90:c9:02:91:72:71:c3:7b:dd:b2:21:df:
a8:78:50:53:a9:a6:f9:cb:8a:b4:cb:f0:c3:80:8d:
fd:4a:5d:15:5a:20:2d:8f:20:6f:7a:c8:51:88:04:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:75:DA:AB:C0:88:78:27:B4:FA:3C:D2:4B:41:90:DD:A5:86:33
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sah12qvAiHgntPo80ktBkN2lhjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.169.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1e:f7:b9:4d:1b:a7:da:5c:66:14:5c:9e:dc:16:84:61:22:
2a:57:b8:62:22:19:40:67:07:aa:e1:ed:0d:04:45:84:65:7e:
00:77:de:96:b3:69:c5:6f:92:e6:75:8f:ae:84:0a:86:56:33:
41:33:1e:6e:42:fc:19:a0:16:68:c6:58:1e:df:50:02:5b:97:
fa:fe:82:67:c0:e1:ce:83:f3:d4:6a:3f:88:a4:e3:74:d1:0a:
68:f2:65:da:08:01:64:65:50:84:15:35:14:3d:02:4a:df:8e:
67:46:f8:9e:d9:d3:b4:eb:c5:8f:6e:cc:6c:25:b4:5d:1d:dc:
f8:9c:8a:02:1d:1f:56:df:14:6e:e7:98:83:81:f7:af:31:ed:
56:ab:d5:74:35:56:70:84:28:ff:f1:cd:2e:8d:69:9b:3f:26:
bf:b6:20:33:d6:a7:d1:a6:53:bf:2f:c2:e4:be:cb:7a:59:df:
3c:79:a2:05:c0:08:5f:c2:05:62:f2:32:79:9a:97:6f:48:f4:
f7:62:55:65:78:93:ac:40:04:14:ea:d3:87:e5:91:36:e3:2d:
b7:56:5b:af:33:fd:e3:e4:e2:aa:b6:4e:55:af:24:fb:41:5a:
c7:b2:87:d7:f7:de:cf:d0:4e:2c:a4:ee:2c:c9:62:7e:0f:da:
ee:13:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:05:41 2026 by rpki-client