Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7A_Wg-GrnQXpFUXuOQAivYNJ_rQ.roa
File: 7A_Wg-GrnQXpFUXuOQAivYNJ_rQ.roa (raw, json)
Hash identifier: 2k5I60ryuJpSRHrRxZ/1aGdhd3wJv6KTjrP7UTeG+LM=
Subject key identifier: EC:0F:D6:83:E1:AB:9D:05:E9:15:45:EE:39:00:22:BD:83:49:FE:B4
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019EAB1A5B4FDB2024E60DA683753B4E31D4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7A_Wg-GrnQXpFUXuOQAivYNJ_rQ.roa
Signing time: Tue 09 Jun 2026 06:38:11 +0000
ROA not before: Tue 09 Jun 2026 06:38:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213990
IP address blocks: 62.60.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:1a:5b:4f:db:20:24:e6:0d:a6:83:75:3b:4e:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 9 06:38:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec0fd683e1ab9d05e91545ee390022bd8349feb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:a3:bc:85:c4:d9:40:2f:19:50:95:28:e1:
ec:22:81:7b:ef:24:c5:22:94:9d:66:72:f8:f4:c1:
74:c3:e9:c0:d1:65:26:30:e5:b6:77:18:a6:35:c1:
ea:7d:f3:11:4b:49:2c:de:37:75:27:5f:82:6f:ed:
37:0e:a8:5f:1a:90:be:ba:00:d5:17:b0:bb:0a:fd:
3f:73:31:56:b3:a1:45:ef:61:57:cf:44:35:7d:4b:
9e:f4:36:d4:8f:5f:dd:97:7b:74:b9:a5:2c:8f:4d:
a6:14:f8:d4:a8:b0:c5:34:7c:38:32:d4:04:bd:30:
b0:04:3b:23:bb:85:61:05:38:fe:70:28:40:75:dc:
d2:2b:ce:93:f5:c0:2f:90:16:de:81:cc:db:6b:86:
8c:9d:f9:5b:c2:30:f7:00:d4:8c:26:87:ed:8c:ba:
47:30:84:4e:45:0e:12:90:a6:c1:a6:dc:a4:74:d7:
5e:d3:88:2f:73:0f:e3:5f:35:60:90:6a:1d:9e:d4:
de:35:03:d2:a1:b9:58:6d:a0:92:4a:13:a5:a7:1b:
6e:66:a4:f6:ec:ea:da:1b:e6:38:fc:53:60:82:f5:
c9:54:b7:0d:0b:13:b3:c6:76:c1:19:4b:3e:64:c2:
00:38:2b:a0:15:e4:66:04:e8:77:70:b0:68:72:9d:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0F:D6:83:E1:AB:9D:05:E9:15:45:EE:39:00:22:BD:83:49:FE:B4
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7A_Wg-GrnQXpFUXuOQAivYNJ_rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:46:7f:99:a8:f4:62:ef:9f:02:63:c0:7e:c5:80:44:e4:51:
25:3c:4c:86:ae:7e:9c:fe:85:a5:14:14:d4:70:46:84:1c:3c:
aa:ba:28:19:7a:13:e3:a4:8b:44:7d:e4:62:49:9a:8a:e0:af:
5a:07:be:19:e2:8a:6f:28:6f:d5:b1:91:fb:62:0d:60:1b:a9:
2f:0f:b0:5b:a1:fe:93:0b:0d:4d:77:df:ad:8d:8c:15:bc:0f:
76:1d:fd:20:56:c0:58:af:59:a5:8b:e6:ca:a6:14:ce:9b:73:
25:2b:e6:ca:58:f1:0d:1d:4b:7b:ad:c8:39:33:2c:b2:38:ac:
73:a4:ee:28:4f:04:dc:c1:48:ef:a1:ff:78:ac:69:1c:e4:b5:
0e:10:6f:78:bd:8c:58:9a:81:76:ad:94:27:da:36:61:09:7b:
57:8b:93:98:6c:62:85:ec:63:03:83:de:dd:5b:62:7e:d8:08:
fd:4c:17:9c:21:af:2f:8a:1e:ae:4c:f7:71:b8:9c:40:b8:04:
42:52:5f:38:91:ba:b4:6e:5a:4c:bd:98:c5:00:3d:bc:a8:29:
82:bf:22:52:bc:88:c3:83:8c:70:67:6e:70:13:6a:67:ae:83:
22:a0:99:25:98:b2:ca:f0:89:e0:6d:f5:90:60:f1:40:3a:72:
a1:96:c4:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6rGltP2yAk5g2mg3U7TjHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjYwNjA5MDYzODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzBmZDY4M2UxYWI5ZDA1ZTkxNTQ1ZWUzOTAwMjJiZDgzNDlmZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp6jvIXE2UAvGVCVKOHsIoF77yTF
IpSdZnL49MF0w+nA0WUmMOW2dximNcHqffMRS0ks3jd1J1+Cb+03DqhfGpC+ugDV
F7C7Cv0/czFWs6FF72FXz0Q1fUue9DbUj1/dl3t0uaUsj02mFPjUqLDFNHw4MtQE
vTCwBDsju4VhBTj+cChAddzSK86T9cAvkBbegczba4aMnflbwjD3ANSMJoftjLpH
MIRORQ4SkKbBptykdNde04gvcw/jXzVgkGodntTeNQPSoblYbaCSShOlpxtuZqT2
7OraG+Y4/FNggvXJVLcNCxOzxnbBGUs+ZMIAOCugFeRmBOh3cLBocp0lTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOwP1oPhq50F6RVF7jkAIr2DSf60MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvN0FfV2ctR3JuUVhwRlVYdU9RQWl2WU5KX3JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjyGMA0G
CSqGSIb3DQEBCwUAA4IBAQBtRn+ZqPRi758CY8B+xYBE5FElPEyGrn6c/oWlFBTU
cEaEHDyquigZehPjpItEfeRiSZqK4K9aB74Z4opvKG/VsZH7Yg1gG6kvD7Bbof6T
Cw1Nd9+tjYwVvA92Hf0gVsBYr1mli+bKphTOm3MlK+bKWPENHUt7rcg5MyyyOKxz
pO4oTwTcwUjvof94rGkc5LUOEG94vYxYmoF2rZQn2jZhCXtXi5OYbGKF7GMDg97d
W2J+2Aj9TBecIa8vih6uTPdxuJxAuARCUl84kbq0blpMvZjFAD28qCmCvyJSvIjD
g4xwZ25wE2pnroMioJklmLLK8IngbfWQYPFAOnKhlsSB
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:46 2026 by rpki-client