Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa
File: 1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa (raw, json)
Hash identifier: rsYCDsWoGw08rdoTTeUioSThzgVkXlwsJw53AHhyg+Y=
Subject key identifier: FB:E2:D4:07:37:74:FB:81:3A:6E:18:FF:10:9F:C3:24:52:32:7E:31
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019C9AF3AEA94A4BF39144863A48B2844D37
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa
Signing time: Thu 26 Feb 2026 17:16:27 +0000
ROA not before: Thu 26 Feb 2026 17:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.186.0/24 maxlen: 24
62.60.228.0/22 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.249.0/24 maxlen: 24
62.60.251.0/24 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:f3:ae:a9:4a:4b:f3:91:44:86:3a:48:b2:84:4d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 26 17:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbe2d4073774fb813a6e18ff109fc32452327e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:50:cd:dd:80:87:b2:6f:fa:49:57:1a:38:e1:
7f:af:b1:1f:ba:91:a0:82:fd:12:be:06:d0:f9:29:
37:37:e4:94:21:fb:e4:02:98:28:a2:d4:e3:98:39:
e0:98:81:d1:c6:9f:d9:c9:09:ca:ea:d3:6c:6c:d1:
fd:17:19:5b:f0:07:cf:23:e5:b6:be:8b:c6:f8:b3:
d2:c1:52:ad:1a:91:3a:5b:29:0e:2b:ab:50:19:dc:
86:69:01:e1:ef:d9:8f:c8:94:a2:f9:9e:83:f2:65:
57:5a:3d:b8:09:2d:51:c5:a3:34:a1:05:5a:2d:de:
67:5b:14:18:b3:33:e3:d8:0f:01:cd:c9:50:d2:a7:
97:e3:32:49:80:75:9a:49:be:a2:a4:59:32:6e:f6:
bf:03:42:1d:77:e4:7d:bf:e5:eb:7d:0f:3f:6a:e2:
f3:bc:4f:9e:56:3e:76:5b:9f:b7:a7:56:a7:42:97:
20:92:0d:62:1a:70:1a:db:45:2e:5c:6d:64:9d:e6:
a9:95:d3:37:18:64:56:6c:07:60:91:2f:3e:f5:0a:
bc:8c:c7:cd:fc:41:35:23:6a:99:e3:02:1b:19:ff:
0a:ad:97:6f:0f:6c:67:fb:47:d0:ff:87:b8:6a:52:
fc:2e:cc:c7:cc:10:db:89:6b:a7:20:20:ac:9c:e2:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E2:D4:07:37:74:FB:81:3A:6E:18:FF:10:9F:C3:24:52:32:7E:31
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0/22
62.60.156.0/22
62.60.176.0/22
62.60.186.0/24
62.60.228.0/22
62.60.236.0/22
62.60.249.0/24
62.60.251.0/24
213.176.64.0/22
213.176.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:eb:97:a5:8a:65:2a:ca:17:1e:1b:0d:ba:37:3c:56:6a:54:
7a:13:15:22:34:7a:b0:0d:ff:65:40:87:ce:bf:04:a6:8f:8e:
3f:6d:4c:56:3e:24:d9:49:2d:3f:ba:49:4e:23:ca:ad:3f:eb:
ae:f6:d1:37:a1:e1:e4:e3:1f:ee:d5:07:d3:99:f2:e6:74:ad:
2f:01:6f:a5:dc:c4:d8:80:57:73:d7:10:ba:d5:df:36:12:b4:
f7:b2:35:1a:58:65:1d:c8:03:d3:3f:d7:16:5f:5b:a2:09:59:
b0:cd:18:56:fd:79:87:0a:67:9c:94:f9:f5:76:ec:93:bf:71:
13:08:3a:d5:67:63:6e:ef:4f:bc:13:14:83:88:de:c1:eb:c9:
89:65:27:5d:fa:28:4c:84:64:89:71:65:0e:51:fa:db:9f:a3:
2f:e5:6c:fa:a1:64:a6:25:83:55:8f:57:12:30:75:2c:ba:ba:
b0:4e:fb:1d:cd:b6:ee:85:2b:c2:76:53:93:a5:a9:e2:94:a5:
37:9b:23:4f:9a:9c:c7:ba:98:48:3e:68:3c:43:cf:77:74:55:
36:db:fc:bc:32:7f:69:e1:43:95:7c:97:fe:c1:a5:c5:c1:a8:
eb:65:9e:42:10:aa:d4:7a:83:bc:a6:4e:63:63:b1:00:a6:41:
66:f1:6b:c0
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAZya866pSkvzkUSGOkiyhE03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjYwMjI2MTcxNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmUyZDQwNzM3NzRmYjgxM2E2ZTE4ZmYxMDlmYzMyNDUyMzI3ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91DN3YCHsm/6SVcaOOF/r7EfupGg
gv0SvgbQ+Sk3N+SUIfvkApgootTjmDngmIHRxp/ZyQnK6tNsbNH9Fxlb8AfPI+W2
vovG+LPSwVKtGpE6WykOK6tQGdyGaQHh79mPyJSi+Z6D8mVXWj24CS1RxaM0oQVa
Ld5nWxQYszPj2A8BzclQ0qeX4zJJgHWaSb6ipFkybva/A0Idd+R9v+XrfQ8/auLz
vE+eVj52W5+3p1anQpcgkg1iGnAa20UuXG1kneapldM3GGRWbAdgkS8+9Qq8jMfN
/EE1I2qZ4wIbGf8KrZdvD2xn+0fQ/4e4alL8LszHzBDbiWunICCsnOLfbwIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFPvi1Ac3dPuBOm4Y/xCfwyRSMn4xMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvMS0tTFVCemQwLTRFNmJoal9FSl9ESkZJeWZqRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTcvMTMzOWRmLThlMDYtNDFkZS05NGYzLTBjYmEzM2VmYzVi
Yi8xL3c4R0ZKLU9pQnE4b1FnS05sYTdFRXpqbzJ2Zy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBVBggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAj48lAME
Aj48nAMEAj48sAMEAD48ugMEAj485AMEAj487AMEAD48+QMEAD48+wMEAtWwQAME
AtWwcDANBgkqhkiG9w0BAQsFAAOCAQEAPOuXpYplKsoXHhsNujc8VmpUehMVIjR6
sA3/ZUCHzr8Epo+OP21MVj4k2UktP7pJTiPKrT/rrvbRN6Hh5OMf7tUH05ny5nSt
LwFvpdzE2IBXc9cQutXfNhK097I1GlhlHcgD0z/XFl9boglZsM0YVv15hwpnnJT5
9Xbsk79xEwg61Wdjbu9PvBMUg4jewevJiWUnXfooTIRkiXFlDlH625+jL+Vs+qFk
piWDVY9XEjB1LLq6sE77Hc227oUrwnZTk6Wp4pSlN5sjT5qcx7qYSD5oPEPPd3RV
Ntv8vDJ/aeFDlXyX/sGlxcGo62WeQhCq1HqDvKZOY2OxAKZBZvFrwA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:54 2026 by rpki-client