Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tO7lBQ1w62hZFWW3NI0iyLgQeOI.roa
File: tO7lBQ1w62hZFWW3NI0iyLgQeOI.roa (raw, json)
Hash identifier: icmPEVjcIKyknofDAuF3I5K1laKGV7u8s7YxZ6gXdGA=
Subject key identifier: B4:EE:E5:05:0D:70:EB:68:59:15:65:B7:34:8D:22:C8:B8:10:78:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07BE9E7585868DA13E065F2EDB1473335
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tO7lBQ1w62hZFWW3NI0iyLgQeOI.roa
Signing time: Mon 07 Sep 2026 12:48:41 +0000
ROA not before: Mon 07 Sep 2026 12:48:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200436
IP address blocks: 94.183.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:e9:e7:58:58:68:da:13:e0:65:f2:ed:b1:47:33:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 7 12:48:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4eee5050d70eb68591565b7348d22c8b81078e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:d9:d7:ef:7b:82:6c:c5:e1:ee:3b:de:90:
56:47:d4:ff:e7:4b:7d:de:91:c8:e1:67:e5:32:47:
a8:b2:38:bc:f4:a9:d1:19:8d:11:63:88:57:5b:35:
21:aa:bf:d3:42:20:06:96:68:d9:4f:c5:aa:88:d5:
fc:1e:5d:eb:0d:30:f0:22:b9:2f:b8:50:38:b7:0e:
be:54:1e:e6:24:90:f0:b3:de:0f:98:2e:6c:7e:0d:
c3:ef:2d:8b:e2:0f:3c:06:51:9e:4c:df:46:83:94:
d1:03:95:01:5d:d3:68:be:6e:af:70:cb:b0:a4:2a:
a6:37:6a:59:a8:f6:ad:14:74:91:ce:8d:88:94:79:
35:39:3d:ad:cd:5d:7f:69:18:08:7f:7a:67:1c:27:
ae:e2:f4:eb:7f:6a:f8:1b:fd:d7:8b:7f:78:5f:85:
12:f8:00:90:0c:65:44:56:3d:12:a8:2a:21:dc:89:
7b:0b:02:7e:f4:5e:7d:b7:50:88:14:a6:7a:bc:16:
64:11:54:3f:7c:a8:b4:48:ba:27:c2:02:e5:ab:3b:
10:98:25:5e:be:1f:05:d9:ae:c9:af:c0:26:44:00:
5a:7d:95:8c:95:68:57:4a:eb:e3:b4:68:ab:d6:84:
59:47:f0:0c:08:4a:94:0a:56:d2:7a:f7:3d:96:73:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EE:E5:05:0D:70:EB:68:59:15:65:B7:34:8D:22:C8:B8:10:78:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tO7lBQ1w62hZFWW3NI0iyLgQeOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:69:79:9d:69:e0:84:2b:ff:31:50:a2:df:b5:13:be:66:9d:
e5:ac:93:5f:6a:63:bb:21:f3:c4:18:bf:b3:bb:d8:62:43:d2:
45:2e:06:ea:99:21:8a:92:99:0d:dd:d3:44:44:43:ef:b4:32:
9e:90:b7:66:48:c5:1c:87:5a:18:e8:8e:5e:92:22:a3:7c:ff:
28:4d:c8:2b:b5:c5:cb:14:de:bc:a5:ff:a1:47:58:eb:1e:6b:
fa:35:1e:0f:9f:6b:2d:14:85:cd:4a:5b:b6:b3:ca:57:cb:e9:
6e:b7:3f:ef:95:9c:5b:7c:75:5b:20:fb:76:2e:56:40:ac:2e:
c2:a0:e7:24:02:bf:3b:aa:b7:ad:53:b8:67:b4:7c:38:46:fb:
8c:b8:b6:b6:5c:84:2c:65:b3:52:f2:f1:c3:70:57:5d:55:a6:
b3:60:0d:fb:da:a6:66:b2:6f:63:87:60:24:2c:15:76:da:dd:
aa:51:ef:82:f9:84:d4:e8:49:09:87:5a:51:d1:9c:ca:7d:18:
80:4d:68:55:ce:84:9b:c5:41:51:af:90:a7:44:a1:f6:0a:1b:
18:44:4f:6f:09:43:b2:a8:bb:10:f0:b1:b0:ce:d7:ba:83:4a:
a6:13:45:56:fb:cf:42:a4:af:89:23:40:2c:12:b3:72:7a:13:
2a:d6:24:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB76edYWGjaE+Bl8u2xRzM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTA3MTI0ODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGVlZTUwNTBkNzBlYjY4NTkxNTY1YjczNDhkMjJjOGI4MTA3OGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjTZ1+97gmzF4e473pBWR9T/50t9
3pHI4WflMkeosji89KnRGY0RY4hXWzUhqr/TQiAGlmjZT8WqiNX8Hl3rDTDwIrkv
uFA4tw6+VB7mJJDws94PmC5sfg3D7y2L4g88BlGeTN9Gg5TRA5UBXdNovm6vcMuw
pCqmN2pZqPatFHSRzo2IlHk1OT2tzV1/aRgIf3pnHCeu4vTrf2r4G/3Xi394X4US
+ACQDGVEVj0SqCoh3Il7CwJ+9F59t1CIFKZ6vBZkEVQ/fKi0SLonwgLlqzsQmCVe
vh8F2a7Jr8AmRABafZWMlWhXSuvjtGir1oRZR/AMCEqUClbSevc9lnO2aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLTu5QUNcOtoWRVltzSNIsi4EHjiMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdE83bEJRMXc2MmhaRldXM05JMGl5TGdRZU9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrezMA0G
CSqGSIb3DQEBCwUAA4IBAQAeaXmdaeCEK/8xUKLftRO+Zp3lrJNfamO7IfPEGL+z
u9hiQ9JFLgbqmSGKkpkN3dNEREPvtDKekLdmSMUch1oY6I5ekiKjfP8oTcgrtcXL
FN68pf+hR1jrHmv6NR4Pn2stFIXNSlu2s8pXy+lutz/vlZxbfHVbIPt2LlZArC7C
oOckAr87qretU7hntHw4RvuMuLa2XIQsZbNS8vHDcFddVaazYA372qZmsm9jh2Ak
LBV22t2qUe+C+YTU6EkJh1pR0ZzKfRiATWhVzoSbxUFRr5CnRKH2ChsYRE9vCUOy
qLsQ8LGwzte6g0qmE0VW+89CpK+JI0AsErNyehMq1iSt
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:31 2026 by rpki-client