Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/If02caqD1XyiEa6Y-V6XBaWgqfs.roa
File: If02caqD1XyiEa6Y-V6XBaWgqfs.roa (raw, json)
Hash identifier: auO/Vv0cwidn4sJkuHB2Ij1K01UE5DrfZioRhXXOeEk=
Subject key identifier: 21:FD:36:71:AA:83:D5:7C:A2:11:AE:98:F9:5E:97:05:A5:A0:A9:FB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EADBEF4F6C0DED844711AFC9E9EDB03AD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/If02caqD1XyiEa6Y-V6XBaWgqfs.roa
Signing time: Tue 09 Jun 2026 18:57:13 +0000
ROA not before: Tue 09 Jun 2026 18:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 217.60.108.0/24 maxlen: 24
217.60.109.0/24 maxlen: 24
217.60.110.0/24 maxlen: 24
217.60.111.0/24 maxlen: 24
217.60.112.0/24 maxlen: 24
217.60.113.0/24 maxlen: 24
217.60.114.0/24 maxlen: 24
217.60.115.0/24 maxlen: 24
217.60.116.0/24 maxlen: 24
217.60.117.0/24 maxlen: 24
217.60.118.0/24 maxlen: 24
217.60.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:be:f4:f6:c0:de:d8:44:71:1a:fc:9e:9e:db:03:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 9 18:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21fd3671aa83d57ca211ae98f95e9705a5a0a9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f0:23:97:5f:95:36:11:16:a5:59:5c:6e:55:
48:41:83:a3:45:ed:60:43:3f:12:20:64:da:a9:43:
a4:b9:1f:f1:ef:49:47:c4:03:80:12:4a:3d:9f:79:
81:2a:82:8f:e5:fc:f9:a7:b5:73:d2:20:65:40:6d:
30:6c:ac:06:13:82:31:4b:58:51:b2:19:f7:ea:d4:
b3:33:ef:6a:19:07:4b:0a:5e:b5:85:ca:38:e9:20:
d2:7a:23:6d:2b:20:be:3d:b7:9f:94:62:66:22:12:
14:e4:d7:34:a3:5f:71:c6:4e:80:d8:69:bb:f4:3f:
ea:6c:18:76:c5:8a:b9:79:b8:5a:9a:42:a4:fe:bd:
6b:7d:2d:2a:7f:96:83:25:46:ec:45:fa:31:01:92:
38:a8:56:ea:f5:52:36:5e:d2:53:ff:67:97:b2:1f:
bf:2b:49:01:f2:02:b4:39:f0:02:1a:3b:d1:1e:b4:
96:b8:db:06:f5:42:79:57:21:a5:15:40:cd:52:10:
f9:8f:d2:a9:23:cf:8f:66:58:b4:d2:99:6c:26:13:
35:52:3c:b8:bb:30:4f:23:e6:83:e0:d0:11:ad:53:
8a:24:97:d7:3a:ba:f6:e9:36:aa:c0:5d:6b:ee:e5:
a7:87:1f:82:1b:f9:50:63:04:62:7c:5d:d6:e2:e4:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:36:71:AA:83:D5:7C:A2:11:AE:98:F9:5E:97:05:A5:A0:A9:FB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/If02caqD1XyiEa6Y-V6XBaWgqfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.108.0-217.60.119.255
Signature Algorithm: sha256WithRSAEncryption
57:52:f9:dc:62:0e:0e:17:de:f9:ad:0a:53:52:7a:7f:f7:be:
b1:52:09:44:e9:77:4c:31:12:32:70:48:a0:f7:0b:70:76:17:
f5:b5:ff:91:e1:19:d7:19:4c:13:4d:e5:4b:06:bb:61:ed:60:
cc:24:6a:4f:d6:0d:55:86:7b:b4:69:aa:51:ac:24:fd:fe:3a:
b2:1c:cd:96:83:6a:21:9c:c1:b3:7c:1b:5a:af:67:3a:e4:2e:
0b:7b:db:4f:bd:20:f6:3c:f2:5f:0f:2b:24:20:a6:4e:df:63:
e1:47:a5:7f:b3:77:4c:34:91:1a:b1:c1:92:88:f9:4b:9e:39:
e8:64:81:7c:89:d4:91:30:97:4e:8f:78:f1:13:48:57:de:5c:
37:96:38:d7:f3:a6:cf:95:a1:e6:fc:8b:af:5a:0b:1b:4d:ed:
c5:f1:de:55:18:c7:10:b1:81:af:cd:da:98:3e:b4:9d:cb:36:
94:36:cb:88:48:86:2a:a7:b0:cc:92:2c:49:96:3d:53:13:09:
ba:e7:80:dd:8a:56:58:98:63:0c:3a:55:12:5e:cc:a0:23:88:
04:cf:47:c1:69:4e:ab:31:eb:d3:0a:f6:87:ec:ef:5b:47:21:
10:41:81:d8:d9:f0:f4:0f:bc:8e:82:fb:4f:40:89:7d:20:8d:
65:fd:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:01 2026 by rpki-client