Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E_hhxJSyteJZt1t4zEVdI1gvbqY.roa
File: E_hhxJSyteJZt1t4zEVdI1gvbqY.roa (raw, json)
Hash identifier: 5I+wEMSo6tKdjiScTUoLLT0MT+wx5uJfb/FC+rfimqI=
Subject key identifier: 13:F8:61:C4:94:B2:B5:E2:59:B7:5B:78:CC:45:5D:23:58:2F:6E:A6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EADBD1EDFE685FDA47F68A3CFE27DB045
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E_hhxJSyteJZt1t4zEVdI1gvbqY.roa
Signing time: Tue 09 Jun 2026 18:55:13 +0000
ROA not before: Tue 09 Jun 2026 18:55:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60117
IP address blocks: 217.60.84.0/24 maxlen: 24
217.60.85.0/24 maxlen: 24
217.60.86.0/24 maxlen: 24
217.60.87.0/24 maxlen: 24
217.60.104.0/24 maxlen: 24
217.60.105.0/24 maxlen: 24
217.60.106.0/24 maxlen: 24
217.60.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:bd:1e:df:e6:85:fd:a4:7f:68:a3:cf:e2:7d:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 9 18:55:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13f861c494b2b5e259b75b78cc455d23582f6ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:ea:16:f9:ec:9c:04:3d:5a:a5:87:6b:97:
98:0b:5a:b0:e3:60:bc:42:ae:ae:6c:0e:65:bc:97:
78:d5:7f:27:e0:3c:4b:91:0f:6a:62:66:71:ba:f8:
2e:41:45:ec:db:11:90:0a:a6:c2:d1:eb:39:ef:1d:
72:e3:42:96:8f:73:bd:d2:59:7a:9c:24:70:59:b4:
6d:63:75:ec:50:b0:47:5c:52:38:7b:47:bd:d0:ab:
19:62:4a:e7:2b:ad:ed:fa:0f:f8:e0:cf:31:43:27:
22:7b:53:60:db:94:11:62:fa:ae:e5:25:1c:4e:ad:
00:b1:b2:d6:02:fe:e7:9b:a2:23:4e:73:5c:89:ce:
b2:85:d4:b7:a7:a5:83:ba:6f:6a:c1:2a:50:73:0a:
79:ae:3e:48:50:22:e2:e0:91:95:88:83:34:1b:09:
4b:e1:86:b6:fd:49:d7:09:ae:b3:df:47:d8:33:40:
ba:33:88:b7:92:51:ec:70:9e:ba:9f:bd:db:95:5d:
8a:7e:e3:07:fb:ee:05:02:3e:a6:32:76:20:86:de:
68:20:f4:3f:d7:9d:81:97:80:e9:46:73:cb:49:e4:
cb:ac:28:1e:dd:ab:03:de:45:0a:85:ff:63:1c:d3:
1b:b4:9b:e0:2e:3b:dd:7c:a2:00:d1:b6:17:a7:98:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:61:C4:94:B2:B5:E2:59:B7:5B:78:CC:45:5D:23:58:2F:6E:A6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E_hhxJSyteJZt1t4zEVdI1gvbqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.84.0/22
217.60.104.0/22
Signature Algorithm: sha256WithRSAEncryption
37:9a:23:62:81:c7:b6:75:4a:f8:2b:3a:c0:6e:05:93:a7:58:
53:93:db:17:be:cc:a4:f4:ca:77:c1:5f:77:1d:f3:9f:e6:e6:
17:f2:b1:34:e4:df:26:54:90:55:60:ef:b2:d5:df:cb:da:5d:
32:c3:63:97:b6:88:65:1e:3d:ed:ae:80:ae:69:95:71:70:e7:
75:2a:30:5b:22:77:06:8d:ba:07:7e:ea:03:d4:0a:c0:3f:e3:
51:c7:ba:7c:0c:ef:53:84:8f:71:59:77:b6:84:25:fe:d3:e3:
48:87:df:4b:4e:c1:e8:b4:24:a2:e2:fc:5a:a8:e9:88:9c:94:
52:d4:30:23:d1:38:21:9d:5f:5c:ef:05:c1:04:2d:db:e6:b3:
02:15:50:90:12:fc:7a:9d:6e:e5:e6:19:70:2a:32:09:0d:6d:
3f:b4:5b:8b:9a:23:36:ed:84:e4:09:00:a7:8f:8d:7f:3c:f2:
d2:88:f6:7c:72:e2:30:54:30:1e:ba:f5:d8:57:66:c2:48:1e:
1b:a7:b4:fe:a8:67:88:44:9b:39:cf:d4:61:ee:f4:fe:b0:39:
58:79:24:8f:67:60:07:e0:99:30:92:0a:52:0f:4f:a2:17:be:
76:2d:cb:80:48:5c:2c:58:ed:d4:3f:af:73:38:4e:67:b7:ce:
92:1a:f8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:36 2026 by rpki-client