Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sxlc_2g41Qo_auX_jLtEVM2IsOY.roa
File: sxlc_2g41Qo_auX_jLtEVM2IsOY.roa (raw, json)
Hash identifier: wiAU20J/wCkd5EEgR/1bpS20X6LfBqqnuNd91HfwR1M=
Subject key identifier: B3:19:5C:FF:68:38:D5:0A:3F:6A:E5:FF:8C:BB:44:54:CD:88:B0:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F95C9275DB568645451A4D27D20AC7AEC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sxlc_2g41Qo_auX_jLtEVM2IsOY.roa
Signing time: Fri 24 Jul 2026 20:20:15 +0000
ROA not before: Fri 24 Jul 2026 20:20:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 94.183.150.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.216.0/24 maxlen: 24
94.183.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:c9:27:5d:b5:68:64:54:51:a4:d2:7d:20:ac:7a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 20:20:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3195cff6838d50a3f6ae5ff8cbb4454cd88b0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:32:03:4f:11:d8:db:75:47:d2:0c:a9:78:
7c:83:70:45:03:48:e3:ad:51:08:13:fa:93:f4:7c:
67:89:7e:b4:69:fa:ab:58:46:4d:ee:8f:ec:c6:f0:
8c:fe:fc:b0:ef:b3:02:4b:9c:7a:f9:a4:ba:c4:07:
39:37:c9:0f:a3:2a:91:88:05:ed:32:c2:db:eb:81:
88:53:00:18:e1:39:a7:b2:ed:18:f4:7a:b5:e0:00:
31:0b:c4:d0:f8:88:9b:df:28:a6:99:7f:d9:50:6b:
db:05:35:ba:ab:62:fb:30:60:d8:36:c1:6a:6e:b6:
e0:5b:19:de:c0:a4:e9:2f:4f:27:93:79:91:99:83:
dc:1f:e4:7b:46:1c:1d:25:7b:3e:6c:4e:3b:c3:99:
0e:bc:e1:43:07:30:27:46:72:15:4c:73:a1:9f:90:
71:2b:37:3f:a9:83:50:0f:44:07:e7:ad:09:56:b1:
3f:26:6a:d0:b4:8c:70:0d:6f:48:74:ca:7d:f5:2b:
43:02:72:e7:3d:b5:37:21:3a:cb:93:c0:5f:0c:b1:
86:e5:ed:f2:e0:46:e3:a0:b6:f3:1e:40:73:31:61:
2b:cb:27:7f:c1:a9:bc:1b:8e:5d:d7:a5:56:13:df:
7f:32:4c:c4:f3:e7:89:4e:cd:31:6e:2e:1d:f0:f9:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:5C:FF:68:38:D5:0A:3F:6A:E5:FF:8C:BB:44:54:CD:88:B0:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sxlc_2g41Qo_auX_jLtEVM2IsOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.150.0/24
94.183.162.0/24
94.183.216.0/24
94.183.218.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ab:56:cf:79:1b:db:27:bb:b4:d7:5e:08:22:94:cc:77:c6:
98:3a:70:91:af:28:59:24:3c:1b:6a:96:67:ae:45:a0:fc:5c:
1b:dc:c5:fc:10:95:08:ea:f2:c2:65:e1:62:8d:01:0a:1a:ad:
2c:ce:5e:c9:3b:e5:41:96:a5:85:3d:1a:83:86:ef:6e:e0:46:
c8:14:6c:74:e6:a2:1c:7b:0e:d1:39:96:60:21:b9:59:a6:c7:
20:fc:0a:ae:cd:32:9f:9e:0b:da:c9:6b:36:ca:a2:60:bc:56:
75:47:98:df:88:0f:a4:83:49:eb:5c:54:39:27:d1:ee:31:2b:
f9:0f:7b:4b:5f:eb:0b:95:42:8c:28:e9:e9:8e:4c:92:89:bb:
7e:29:f1:d7:ed:e1:2e:6c:c0:b4:cb:22:b4:a0:58:e8:c5:da:
0c:a4:60:25:90:ac:28:7b:b6:49:85:62:d0:88:db:b6:45:ee:
3d:29:5b:e7:41:73:68:1b:56:68:33:e8:25:be:be:e0:4a:96:
72:37:fb:c4:dc:23:d6:31:ba:7c:e6:77:84:34:d8:00:9a:3f:
6c:72:27:41:52:d2:9c:03:e3:1e:3e:4e:04:ac:a2:95:7d:9f:
c6:a4:a8:3f:49:ba:24:62:4c:61:67:5d:97:f2:d4:4b:f1:ee:
72:35:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:28 2026 by rpki-client