Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9KRCRNmWFKi72k32s-X8wXyIB28.roa
File: 9KRCRNmWFKi72k32s-X8wXyIB28.roa (raw, json)
Hash identifier: C36TOkWUDoiLUOQx0K94+0C9uM9kHDh+1YM8zxrS6Ro=
Subject key identifier: F4:A4:42:44:D9:96:14:A8:BB:DA:4D:F6:B3:E5:FC:C1:7C:88:07:6F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C53E6B47C3EAFB7818C86DA09084872B6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9KRCRNmWFKi72k32s-X8wXyIB28.roa
Signing time: Thu 12 Feb 2026 22:09:14 +0000
ROA not before: Thu 12 Feb 2026 22:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 217.60.200.0/22 maxlen: 24
217.60.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:e6:b4:7c:3e:af:b7:81:8c:86:da:09:08:48:72:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 12 22:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4a44244d99614a8bbda4df6b3e5fcc17c88076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:15:cc:f4:50:1c:29:6a:fe:0e:a9:a9:4e:
ef:e2:6c:87:c2:0e:bc:47:a6:e1:7a:08:e8:61:dd:
76:16:99:3d:10:5c:40:cc:14:31:06:9d:75:9a:4a:
36:cc:6b:2a:aa:7a:b1:aa:68:52:14:2f:c7:aa:01:
75:d3:e9:0c:31:c2:6e:e7:a9:8d:65:1e:bb:c1:48:
d0:cf:fd:47:41:59:32:e4:7c:c2:a4:86:c3:c6:29:
9a:cc:2e:e3:3c:9b:89:df:1a:ab:52:7d:f5:ea:99:
d1:ea:15:06:83:82:ab:f3:4e:e8:bf:16:56:8b:79:
6f:5f:4a:cf:da:e1:f5:55:e7:b3:c7:c5:d2:a4:69:
5d:51:6a:e4:e2:01:d5:7e:d5:a0:96:e6:d0:9b:86:
b9:7d:9c:f2:4c:29:3e:55:fc:55:df:a7:65:b6:b9:
69:9e:2f:e9:c1:e8:6f:e4:06:e7:64:86:ef:d6:71:
c7:71:0e:a9:18:58:29:4a:5e:a7:7c:b3:24:b1:ea:
8e:66:8f:f7:2f:2d:27:67:72:9b:3d:4f:0e:a5:5a:
ee:61:34:6f:db:4c:7b:09:89:a2:fc:1a:d8:ed:40:
8b:14:eb:38:c4:88:61:52:2c:ac:de:30:3b:9c:0a:
97:e4:45:54:6d:0e:4d:7e:fb:d2:3e:46:da:dd:98:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A4:42:44:D9:96:14:A8:BB:DA:4D:F6:B3:E5:FC:C1:7C:88:07:6F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9KRCRNmWFKi72k32s-X8wXyIB28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.200.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:18:f4:9f:2a:1d:5e:38:48:01:96:e7:e0:eb:c5:cc:54:7e:
38:ee:fa:33:1c:a3:aa:6b:2c:7c:c8:b5:80:28:10:ab:a1:35:
6e:61:f6:db:91:31:87:79:51:21:16:c5:8d:4f:f4:b1:11:b1:
f6:f2:74:39:da:1f:14:ed:2a:a2:ec:d5:01:e8:bc:16:05:39:
53:37:21:a8:da:0c:77:71:61:81:f5:03:67:05:d9:29:ec:6f:
44:db:bc:04:8a:8f:45:c8:8d:89:a7:55:ce:e0:3a:24:b0:81:
23:03:a9:9f:f5:47:b1:85:7d:a6:d9:52:d2:1c:68:aa:d4:52:
54:9f:02:65:75:23:90:a4:fc:d3:d6:c0:bd:c8:7c:45:05:98:
7f:c1:41:3d:ed:e7:2f:d5:53:7c:0b:36:88:6f:19:e9:d6:31:
ee:b7:c4:67:c8:a5:b6:7e:cc:31:34:af:e6:5c:3e:9f:be:f4:
59:23:ad:78:de:84:2d:68:52:30:19:c8:e8:61:3c:c8:0e:e1:
a6:e7:81:97:10:03:6a:44:1f:e9:4c:5e:91:98:a1:72:a7:70:
1f:6b:0b:ca:04:5b:7a:a0:0c:47:2c:63:29:bc:b1:4c:43:ad:
39:4f:d5:e4:c8:0e:ec:12:e1:1b:61:6a:eb:8d:0f:f0:2e:37:
f9:c6:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:57:28 2026 by rpki-client