Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6FRuRy8JxbKwmeah-uq7h0vPan4.roa
File: 6FRuRy8JxbKwmeah-uq7h0vPan4.roa (raw, json)
Hash identifier: eq2PayZYThKJomvYftLViuTdf1zMHJCkWeOEAD26XwA=
Subject key identifier: E8:54:6E:47:2F:09:C5:B2:B0:99:E6:A1:FA:EA:BB:87:4B:CF:6A:7E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EADBE08F9A3DEAEB710DAB29BC0150FBC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6FRuRy8JxbKwmeah-uq7h0vPan4.roa
Signing time: Tue 09 Jun 2026 18:56:12 +0000
ROA not before: Tue 09 Jun 2026 18:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 217.60.108.0/24 maxlen: 24
217.60.109.0/24 maxlen: 24
217.60.110.0/24 maxlen: 24
217.60.111.0/24 maxlen: 24
217.60.112.0/24 maxlen: 24
217.60.113.0/24 maxlen: 24
217.60.114.0/24 maxlen: 24
217.60.115.0/24 maxlen: 24
217.60.116.0/24 maxlen: 24
217.60.117.0/24 maxlen: 24
217.60.118.0/24 maxlen: 24
217.60.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:be:08:f9:a3:de:ae:b7:10:da:b2:9b:c0:15:0f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 9 18:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8546e472f09c5b2b099e6a1faeabb874bcf6a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:10:ec:a5:dd:6a:c1:d9:66:b6:17:3f:71:
e7:fa:f7:85:d9:f9:2f:0d:6b:9c:56:e4:33:d0:57:
c0:db:de:fa:32:b4:5b:82:00:ea:d5:13:0b:18:85:
56:55:43:bd:8b:bb:9d:ff:e4:50:ca:ba:80:b6:3c:
af:29:8b:21:b8:89:07:15:32:56:2b:4e:05:4e:91:
bc:27:66:4d:95:91:1a:15:f9:e7:0e:5d:1e:a1:45:
70:3b:97:42:0a:ca:47:63:47:bb:ef:d0:b3:62:fc:
8c:06:92:b1:25:bd:96:0d:90:50:a6:ee:4d:32:fa:
64:b7:1c:81:a3:2f:84:fc:ea:a6:73:a6:bf:63:62:
bb:70:57:74:b4:43:0d:9a:ae:87:c5:54:f2:09:7b:
ec:72:be:bc:4f:a6:31:22:2f:22:2c:2f:b1:81:0b:
1f:f9:2c:92:74:e6:dc:78:64:03:b2:7a:98:a1:0b:
3e:70:25:e8:41:70:64:22:36:5e:01:24:d8:27:24:
ad:fc:62:66:4f:8c:c1:cc:1a:f4:70:f6:f0:0f:13:
90:3f:71:d5:91:42:9c:27:67:88:63:ad:a5:f8:ee:
67:82:47:7c:cf:6b:11:45:89:09:f5:00:0a:95:c3:
6f:4e:5c:b5:01:9d:2b:c2:86:f7:12:7b:df:87:f8:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:54:6E:47:2F:09:C5:B2:B0:99:E6:A1:FA:EA:BB:87:4B:CF:6A:7E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6FRuRy8JxbKwmeah-uq7h0vPan4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.108.0-217.60.119.255
Signature Algorithm: sha256WithRSAEncryption
25:f0:6b:21:96:31:0e:5d:a1:85:8d:77:0d:72:47:97:78:9f:
c2:c3:ff:46:ea:55:57:d2:99:6a:48:51:69:59:1e:91:27:e2:
73:da:34:1f:7b:12:06:6e:d0:ee:39:8c:fc:2a:d1:5d:73:10:
aa:dc:3e:1b:55:5b:92:2d:8e:9b:ef:88:50:ed:5a:09:1e:66:
c1:3e:dd:d2:de:68:9d:9d:f2:91:f7:e3:52:b9:93:e7:64:4e:
76:9d:07:dd:e3:56:0a:86:ec:86:83:02:f9:68:12:48:fe:27:
91:1a:0d:a0:d9:19:ff:82:04:6a:07:95:19:24:ff:df:e3:fe:
98:8a:72:90:bb:6a:4a:44:d5:09:4b:8c:f2:0d:98:d7:ba:f8:
49:e8:32:f1:6f:1c:8e:ac:9e:de:43:fa:ed:a0:db:2a:24:76:
eb:7a:7c:59:5c:66:16:d3:0e:39:3c:6f:c5:6c:96:27:c2:bf:
d3:38:49:52:83:c7:ff:37:da:b3:cc:68:ed:7e:b5:e2:10:18:
ce:b4:94:02:08:30:fd:94:9a:6d:9c:c2:8e:e9:8e:57:0c:5d:
6d:23:80:db:e6:d3:7d:44:26:bb:5f:c0:66:8c:d7:7f:0c:45:
da:33:b2:0a:96:01:d1:ef:6d:8b:df:c9:28:3f:dc:83:56:b0:
9d:94:aa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:23 2026 by rpki-client