Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wOIwi6RIc82ZmSColarwvK-n6sY.roa
File: wOIwi6RIc82ZmSColarwvK-n6sY.roa (raw, json)
Hash identifier: B64as/Iaq8zuZ8NFtKnTz819Rz58omOoaugEmf6mS3Y=
Subject key identifier: C0:E2:30:8B:A4:48:73:CD:99:99:20:A8:95:AA:F0:BC:AF:A7:EA:C6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EC759379678D273B8DF2E68038F551695
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wOIwi6RIc82ZmSColarwvK-n6sY.roa
Signing time: Sun 14 Jun 2026 18:16:13 +0000
ROA not before: Sun 14 Jun 2026 18:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 94.183.167.0/24 maxlen: 24
94.183.212.0/24 maxlen: 24
94.183.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:59:37:96:78:d2:73:b8:df:2e:68:03:8f:55:16:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 14 18:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0e2308ba44873cd999920a895aaf0bcafa7eac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:5b:ff:82:78:94:c1:f9:0f:e1:af:28:99:
34:5d:f5:37:8e:d5:f6:7f:83:fc:2f:ec:ac:94:a4:
ee:2f:b9:ef:d3:21:63:62:f1:21:8a:80:2d:15:83:
db:84:05:ce:72:f4:ac:db:ce:e3:b7:9f:7f:06:03:
3f:98:cd:dc:0f:27:99:39:64:46:7f:05:de:bf:12:
e2:91:2c:67:84:81:ee:be:fd:d1:d0:6d:4e:3c:9e:
36:35:77:ae:ee:83:0f:7a:1e:eb:07:bc:84:18:c0:
38:03:67:16:a6:d6:1f:87:a2:0d:8d:a9:b7:4e:5b:
a6:73:86:b3:0a:aa:c0:99:07:9c:21:e0:de:0b:c4:
1b:43:59:20:93:fa:40:80:e4:d8:17:ba:b7:e6:52:
e8:1d:7d:18:93:99:7e:9b:fe:ed:78:98:f1:eb:5c:
d6:5c:da:9a:32:8b:6f:e1:6c:a1:e5:91:c6:f7:08:
1b:31:bc:fc:bb:1b:a2:dc:42:ed:91:8f:88:e4:dc:
96:fe:75:ab:8e:96:c2:82:d9:a3:0e:ba:9f:1b:e9:
6b:27:30:ee:32:18:cb:d5:d4:42:c1:8c:cd:da:05:
b9:d5:5b:db:b0:dd:58:d4:55:b1:62:52:2a:77:e3:
df:97:6b:40:97:aa:3e:c6:ca:f4:af:fd:b8:66:72:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:30:8B:A4:48:73:CD:99:99:20:A8:95:AA:F0:BC:AF:A7:EA:C6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wOIwi6RIc82ZmSColarwvK-n6sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.167.0/24
94.183.212.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:46:06:70:30:d8:39:62:34:36:f6:d3:b2:7d:e5:2b:5e:86:
dd:94:f7:f3:80:58:a7:ce:9b:b9:6c:9c:65:77:aa:b9:55:28:
9e:e9:77:c2:33:e4:31:c0:c2:1d:1e:62:83:16:0c:3b:5e:36:
85:23:ba:a7:1f:08:d0:63:97:88:d3:8c:aa:1e:ad:27:76:0c:
ad:17:6c:e0:58:4d:0d:fe:9d:e8:7d:98:e9:19:8b:36:66:35:
be:a9:e0:1b:c3:b3:9d:e4:e7:a8:b9:d0:05:dc:53:fc:5c:1d:
7a:20:d9:f4:ea:c2:35:fc:6d:e0:62:f1:54:2b:44:df:a8:db:
c8:76:85:0a:a4:cd:49:59:43:c4:56:10:07:25:0a:47:c2:1e:
02:4b:7e:09:84:0c:71:f8:5c:13:a1:ff:bc:04:4c:40:46:2e:
45:26:93:5e:0c:05:66:15:89:7b:0b:f2:9c:86:04:79:be:c4:
e3:31:5d:9f:a7:2b:24:f4:37:dd:8a:6d:36:b4:5a:23:43:a3:
c3:f0:42:21:f4:ba:1a:64:c6:d2:77:94:9c:fa:bd:e6:87:99:
51:c1:f8:5d:a8:e3:21:63:b4:4b:07:7a:8e:99:8b:2a:3c:01:
ad:4c:67:13:5d:18:b0:6a:d5:d1:17:b1:67:16:59:e4:28:49:
ce:50:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:02:35 2026 by rpki-client