Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8-prbebABp-w3fzr5vaP4-zBdik.roa
File: 8-prbebABp-w3fzr5vaP4-zBdik.roa (raw, json)
Hash identifier: C/rxmMamMPac3aHhzCJEVJ1OoyhMHrU4kFW8CotDBH8=
Subject key identifier: F3:EA:6B:6D:E6:C0:06:9F:B0:DD:FC:EB:E6:F6:8F:E3:EC:C1:76:29
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0A5A8A931E755A4E07E6B2FB63370EC2F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8-prbebABp-w3fzr5vaP4-zBdik.roa
Signing time: Tue 15 Sep 2026 15:21:29 +0000
ROA not before: Tue 15 Sep 2026 15:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213896
IP address blocks: 217.60.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:a8:a9:31:e7:55:a4:e0:7e:6b:2f:b6:33:70:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 15 15:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3ea6b6de6c0069fb0ddfcebe6f68fe3ecc17629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:f8:a3:88:2a:cb:25:2f:d0:cf:cc:78:e7:
30:cf:ed:97:37:18:bb:1c:ca:f5:2c:8b:2f:4e:03:
29:3c:86:6c:30:70:67:fb:1a:13:a4:f0:48:10:37:
d3:ba:3d:7d:f6:20:2a:ed:a4:66:2a:6d:37:88:6f:
5a:a3:84:98:6d:db:18:15:4f:d5:9a:32:5c:ab:dc:
42:89:b7:42:88:a4:6e:ef:5f:ce:f8:06:9c:10:75:
7d:ab:b1:0c:19:ef:66:b7:3e:02:8e:8a:00:3c:08:
e9:1d:4c:90:11:32:d5:07:c7:ef:34:97:9d:5f:7c:
d9:da:a6:2f:fe:36:5c:1f:61:77:b3:4c:02:3f:94:
fb:50:4a:6b:f1:b0:40:44:40:a1:6b:57:63:47:70:
cf:2d:af:57:ba:49:3e:aa:1c:ca:87:b1:bb:6c:45:
e1:79:6f:1f:2d:37:de:3b:cf:f2:e8:31:46:33:bf:
6f:16:ba:8e:a8:96:25:31:bf:00:31:de:c8:5a:16:
c0:0e:51:55:9e:6c:1a:8a:38:82:4b:3d:53:a0:00:
27:96:8f:2d:12:0e:a1:cc:e3:20:24:2c:5e:2b:89:
51:df:09:ee:d9:f7:ef:39:bd:2b:e4:27:f5:34:ed:
92:f1:6c:25:f9:30:5d:74:f5:b2:76:72:53:ef:8c:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EA:6B:6D:E6:C0:06:9F:B0:DD:FC:EB:E6:F6:8F:E3:EC:C1:76:29
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8-prbebABp-w3fzr5vaP4-zBdik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.12.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0c:ea:bd:0e:2e:ff:37:d1:43:cc:22:35:ab:8e:a8:36:be:
6f:05:7a:e3:36:90:c2:6b:a0:3a:3d:9f:37:bd:a8:70:3e:8f:
85:92:a5:c2:d8:63:4b:57:fa:49:d1:a6:74:19:a0:d4:e4:0d:
e4:a6:e3:2f:60:ef:fc:fb:17:35:51:10:27:d7:f4:ec:81:81:
ec:f7:3d:ca:5f:ac:8a:a5:aa:f6:e2:9e:bd:b6:0c:dd:e1:b2:
1a:35:8e:a6:1d:23:7d:39:9f:be:92:60:7d:e4:72:c3:e4:a5:
ef:36:a9:14:b4:96:42:6f:25:52:08:f0:48:31:0d:f5:d4:68:
16:1b:2f:96:89:b6:e8:0a:2f:57:59:09:10:57:64:17:75:11:
51:76:61:aa:1f:02:a1:c8:17:eb:de:bc:d0:78:58:6a:c5:75:
38:65:38:2a:cf:fe:bd:93:f1:31:74:87:36:f7:23:53:5d:88:
9c:5f:3f:a7:f6:eb:dd:cf:5e:3c:c1:b4:8b:4f:56:b2:ad:15:
67:04:36:a8:5e:18:80:a7:f0:42:68:f8:18:19:52:49:6f:6d:
9d:63:dc:4a:a5:f9:ba:15:51:9f:a3:d3:c0:9a:9b:6b:fc:c5:
b0:e0:93:e1:cd:a1:e5:15:ee:50:b1:d9:58:df:c9:9a:22:2c:
5b:71:a4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:43:19 2026 by rpki-client