Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1Iua0btse_JMGppmWMWrSUC1tSI.roa
File: 1Iua0btse_JMGppmWMWrSUC1tSI.roa (raw, json)
Hash identifier: QScoEc9vcQRxwovGvRWCHEfKK/cR5SSU+9+SBNvofxc=
Subject key identifier: D4:8B:9A:D1:BB:6C:7B:F2:4C:1A:9A:66:58:C5:AB:49:40:B5:B5:22
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C6302CCCAB8A487866B263EDBB938C47F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1Iua0btse_JMGppmWMWrSUC1tSI.roa
Signing time: Sun 15 Feb 2026 20:34:13 +0000
ROA not before: Sun 15 Feb 2026 20:34:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 217.60.236.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:63:02:cc:ca:b8:a4:87:86:6b:26:3e:db:b9:38:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 15 20:34:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d48b9ad1bb6c7bf24c1a9a6658c5ab4940b5b522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:53:9b:21:46:d1:17:99:65:6f:18:7a:c6:
5a:53:9d:62:30:b1:24:79:58:a1:86:8a:fc:7c:75:
1f:62:fc:e2:8c:50:bc:b0:de:f9:ff:a9:15:5f:be:
12:c7:f4:39:dc:3a:b4:aa:60:f1:1d:83:70:f9:fe:
d1:c9:34:78:69:27:d6:69:19:8a:1e:47:d4:af:a6:
4d:6e:96:72:d5:2a:08:97:85:2e:8b:61:40:cc:6d:
68:7a:a3:1d:88:59:75:9e:10:6f:2f:18:4b:94:63:
97:ce:cb:2e:ff:1c:e9:37:68:46:ea:a5:0d:c9:f2:
4d:60:71:9c:b0:ad:39:92:b9:70:24:96:20:f1:e5:
9c:4a:2a:97:f1:8c:5c:63:6f:cd:16:0f:ea:70:65:
38:aa:86:18:f3:d4:d7:8d:17:0a:ef:f0:45:29:7c:
71:6e:71:82:93:32:eb:41:be:8a:69:16:57:05:5e:
fb:a4:e7:f2:41:85:9b:97:aa:fa:ae:50:4c:76:e3:
4a:e6:3f:f0:9f:13:18:bd:a7:70:59:29:2f:0b:01:
2b:67:15:2c:2c:20:f8:50:7d:99:73:53:b2:b8:7d:
68:c5:c9:e7:79:a6:e3:b3:82:af:aa:ae:d4:0a:76:
6d:f7:5f:ad:56:8f:c1:a4:d7:a0:e3:dc:cd:f3:c0:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8B:9A:D1:BB:6C:7B:F2:4C:1A:9A:66:58:C5:AB:49:40:B5:B5:22
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1Iua0btse_JMGppmWMWrSUC1tSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.236.0/24
217.60.247.0/24
Signature Algorithm: sha256WithRSAEncryption
96:46:12:f8:30:be:f1:14:1d:a3:6b:93:ce:b9:05:91:f5:29:
7f:f2:42:16:cb:e8:92:ce:a6:b7:22:cc:b2:99:af:16:5d:d9:
53:2e:49:7d:1a:94:80:f8:28:11:28:3f:91:29:28:bd:8d:c6:
94:b9:4d:06:03:05:0e:79:b7:50:3e:da:85:e6:f6:ab:9a:c9:
fe:48:7f:00:14:95:c7:75:d5:a3:dc:10:07:02:80:7d:d5:77:
9a:e2:cb:a8:3e:0a:13:bf:3f:c3:ba:c5:d3:d5:fa:f1:e2:02:
6d:d9:9c:3d:f3:63:3b:ab:db:c2:4c:14:d8:12:5f:82:80:24:
0c:9f:2b:8b:f3:c8:f1:55:69:87:e8:fe:5c:c5:d7:c5:b2:a2:
b0:80:0f:45:4c:92:66:72:d0:40:44:ec:2e:2b:0c:97:61:3e:
0e:2f:3d:5b:bb:a8:1e:9b:2a:d0:da:54:f9:19:5e:b5:c3:48:
c3:0a:26:79:01:8c:0f:b5:79:5e:f5:61:b9:8b:19:05:e6:94:
03:d9:a0:82:74:29:47:de:4a:b9:09:bc:40:87:42:46:20:25:
12:d0:30:88:0d:10:d2:c5:c5:6a:00:33:79:89:ed:48:7d:7e:
0f:60:ab:4c:f6:f2:3d:7b:70:e0:cc:e5:d2:ed:5b:2b:d5:02:
f0:be:4a:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZxjAszKuKSHhmsmPtu5OMR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjE1MjAzNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDhiOWFkMWJiNmM3YmYyNGMxYTlhNjY1OGM1YWI0OTQwYjViNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ylTmyFG0ReZZW8YesZaU51iMLEk
eVihhor8fHUfYvzijFC8sN75/6kVX74Sx/Q53Dq0qmDxHYNw+f7RyTR4aSfWaRmK
HkfUr6ZNbpZy1SoIl4Uui2FAzG1oeqMdiFl1nhBvLxhLlGOXzssu/xzpN2hG6qUN
yfJNYHGcsK05krlwJJYg8eWcSiqX8YxcY2/NFg/qcGU4qoYY89TXjRcK7/BFKXxx
bnGCkzLrQb6KaRZXBV77pOfyQYWbl6r6rlBMduNK5j/wnxMYvadwWSkvCwErZxUs
LCD4UH2Zc1OyuH1oxcnneabjs4Kvqq7UCnZt91+tVo/BpNeg49zN88AjqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNSLmtG7bHvyTBqaZljFq0lAtbUiMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMUl1YTBidHNlX0pNR3BwbVdNV3JTVUMxdFNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2TzsAwQA
2Tz3MA0GCSqGSIb3DQEBCwUAA4IBAQCWRhL4ML7xFB2ja5POuQWR9Sl/8kIWy+iS
zqa3Isyyma8WXdlTLkl9GpSA+CgRKD+RKSi9jcaUuU0GAwUOebdQPtqF5varmsn+
SH8AFJXHddWj3BAHAoB91Xea4suoPgoTvz/DusXT1frx4gJt2Zw982M7q9vCTBTY
El+CgCQMnyuL88jxVWmH6P5cxdfFsqKwgA9FTJJmctBAROwuKwyXYT4OLz1bu6ge
myrQ2lT5GV61w0jDCiZ5AYwPtXle9WG5ixkF5pQD2aCCdClH3kq5CbxAh0JGICUS
0DCIDRDSxcVqADN5ie1IfX4PYKtM9vI9e3DgzOXS7Vsr1QLwvkr6
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:10:57 2026 by rpki-client