Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1Q77l0HGycgt3CPrnR2_Ik3EIVY.roa
File: 1Q77l0HGycgt3CPrnR2_Ik3EIVY.roa (raw, json)
Hash identifier: msTZN3M4/kscRelxDg98HfK4Jw6ox/fvI3zuXcI1aDM=
Subject key identifier: D5:0E:FB:97:41:C6:C9:C8:2D:DC:23:EB:9D:1D:BF:22:4D:C4:21:56
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0B467130ECF58C36838219AD2C879BCC2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1Q77l0HGycgt3CPrnR2_Ik3EIVY.roa
Signing time: Fri 18 Sep 2026 12:04:08 +0000
ROA not before: Fri 18 Sep 2026 12:04:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 217.60.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:67:13:0e:cf:58:c3:68:38:21:9a:d2:c8:79:bc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 18 12:04:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d50efb9741c6c9c82ddc23eb9d1dbf224dc42156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:3b:c7:47:01:78:2f:7f:31:ab:39:05:8e:
16:09:82:8e:4b:94:ba:d8:01:5b:e9:bf:81:c2:fc:
f3:02:92:2b:3b:37:f5:3a:49:b6:bd:23:7f:37:2c:
ec:a1:7b:f8:a9:84:eb:7d:e0:e5:f9:99:5d:ba:e2:
3f:46:2f:ac:27:6f:03:25:f7:d6:eb:df:92:fe:92:
2d:a8:98:38:51:86:49:5a:44:d6:81:3e:e5:2c:7d:
43:b0:31:e8:f7:7f:c6:c3:65:d3:5f:1d:b6:3b:2b:
dc:d1:d2:e7:8d:35:ba:e4:85:fb:69:7e:76:0e:0d:
81:3d:fb:a5:06:c7:15:3e:1a:a5:53:ae:e3:40:64:
32:10:6e:ad:89:6d:e8:12:8f:8d:b9:7a:e9:7e:96:
08:70:0a:ef:a3:97:36:56:a9:3d:d1:1b:23:db:48:
a3:14:8c:88:c6:00:8f:6d:9f:4e:aa:d2:f6:ed:8c:
8c:ea:02:b3:8e:e9:82:bf:30:d4:cc:71:f2:19:7f:
d6:7d:c2:89:8f:00:79:de:38:63:cb:c5:4c:d7:fc:
e4:29:60:44:00:b1:04:33:55:24:3f:3f:09:89:a4:
b0:07:82:29:89:0f:fd:b8:7d:03:c4:f9:ec:37:ff:
7d:80:ba:32:9d:cd:f3:2f:30:8d:a2:ee:eb:db:46:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0E:FB:97:41:C6:C9:C8:2D:DC:23:EB:9D:1D:BF:22:4D:C4:21:56
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1Q77l0HGycgt3CPrnR2_Ik3EIVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8d:13:22:78:22:15:cf:4a:e0:18:92:8f:ac:23:11:83:49:
dc:e8:05:01:79:8f:85:a0:92:d8:70:13:d6:9f:ae:66:ec:41:
36:3a:56:a2:f4:07:df:60:f5:fa:c1:bc:f2:06:16:ba:04:53:
a5:35:44:8a:ee:9b:3e:eb:5d:84:d9:42:37:46:9d:3f:9b:c7:
fa:6e:5d:bd:9b:05:86:8a:63:4e:62:d2:5b:4e:41:27:9c:13:
c4:9c:e2:93:e9:49:08:bb:74:4c:9f:69:99:6f:4b:dc:a9:ac:
a1:5c:cc:0b:4b:5a:5c:14:66:ff:f5:47:bb:a8:10:b5:e2:55:
9c:88:21:d9:08:54:52:68:df:fd:9b:c9:93:af:13:62:f6:c5:
0c:9a:97:1e:8b:56:8f:d6:b2:57:e9:b1:a6:46:49:9f:d1:53:
6b:ad:45:45:04:ea:72:60:33:b2:ef:5c:2c:c0:b7:79:07:58:
19:c8:54:7e:d9:74:a2:96:b8:87:da:af:cb:06:47:e3:65:2d:
ba:a2:91:06:53:67:2c:71:99:5c:7e:3c:6f:de:fc:ff:19:1b:
5a:9d:af:d4:6d:aa:ee:0f:de:6a:e6:a2:37:57:15:29:e1:81:
db:c3:05:57:5a:bf:21:17:e0:a7:d2:f6:e1:d6:24:29:25:11:
a0:89:50:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC0ZxMOz1jDaDghmtLIebzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTE4MTIwNDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTBlZmI5NzQxYzZjOWM4MmRkYzIzZWI5ZDFkYmYyMjRkYzQyMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lw7x0cBeC9/Mas5BY4WCYKOS5S6
2AFb6b+BwvzzApIrOzf1Okm2vSN/NyzsoXv4qYTrfeDl+ZlduuI/Ri+sJ28DJffW
69+S/pItqJg4UYZJWkTWgT7lLH1DsDHo93/Gw2XTXx22Oyvc0dLnjTW65IX7aX52
Dg2BPfulBscVPhqlU67jQGQyEG6tiW3oEo+NuXrpfpYIcArvo5c2Vqk90Rsj20ij
FIyIxgCPbZ9OqtL27YyM6gKzjumCvzDUzHHyGX/WfcKJjwB53jhjy8VM1/zkKWBE
ALEEM1UkPz8JiaSwB4IpiQ/9uH0DxPnsN/99gLoync3zLzCNou7r20YxJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUO+5dBxsnILdwj650dvyJNxCFWMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMVE3N2wwSEd5Y2d0M0NQcm5SMl9JazNFSVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2TwZMA0G
CSqGSIb3DQEBCwUAA4IBAQCmjRMieCIVz0rgGJKPrCMRg0nc6AUBeY+FoJLYcBPW
n65m7EE2Olai9AffYPX6wbzyBha6BFOlNUSK7ps+612E2UI3Rp0/m8f6bl29mwWG
imNOYtJbTkEnnBPEnOKT6UkIu3RMn2mZb0vcqayhXMwLS1pcFGb/9Ue7qBC14lWc
iCHZCFRSaN/9m8mTrxNi9sUMmpcei1aP1rJX6bGmRkmf0VNrrUVFBOpyYDOy71ws
wLd5B1gZyFR+2XSilriH2q/LBkfjZS26opEGU2cscZlcfjxv3vz/GRtana/Ubaru
D95q5qI3VxUp4YHbwwVXWr8hF+Cn0vbh1iQpJRGgiVCE
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:21:21 2026 by rpki-client