Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L1sn0L35FImZ6CL4UrHS3IP9JU8.roa
File: L1sn0L35FImZ6CL4UrHS3IP9JU8.roa (raw, json)
Hash identifier: ww+tOHvvdOupcjTb9I5/d+kUwC32LvDxpKysVx//RTk=
Subject key identifier: 2F:5B:27:D0:BD:F9:14:89:99:E8:22:F8:52:B1:D2:DC:83:FD:25:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0635DBA8169AFEE0328D5F4E695130E7E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L1sn0L35FImZ6CL4UrHS3IP9JU8.roa
Signing time: Wed 02 Sep 2026 18:24:42 +0000
ROA not before: Wed 02 Sep 2026 18:24:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214456
IP address blocks: 217.60.174.0/24 maxlen: 24
217.60.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:5d:ba:81:69:af:ee:03:28:d5:f4:e6:95:13:0e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 18:24:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f5b27d0bdf9148999e822f852b1d2dc83fd254f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:6d:01:4a:06:27:cd:4a:a6:a5:cb:ca:ed:
f0:86:1e:15:16:b7:23:af:e3:6e:58:66:e9:a8:9c:
3c:a4:76:3c:ad:06:e6:6c:b0:1e:a5:52:5d:f4:e9:
7b:fe:7b:2f:e5:c9:71:25:87:0d:e1:0e:fd:62:8a:
17:86:72:0d:e8:97:83:30:21:17:b7:91:64:83:8e:
2e:ce:0c:f6:53:42:65:5e:66:d8:ec:e4:2d:9d:1c:
b7:c4:2c:45:8f:d0:bd:10:97:ee:ff:b5:a5:67:f8:
69:31:83:d7:1a:75:bd:c8:af:02:81:b8:6f:f7:d3:
43:3b:e0:1b:23:4d:1e:10:b1:41:75:e4:94:c2:02:
53:69:55:0d:20:c8:14:b7:84:2a:e3:8d:4f:13:ec:
e6:d4:ea:e6:b2:99:e2:32:c2:58:e2:1f:2e:40:22:
25:68:68:92:2b:fc:da:c5:72:74:e5:30:40:bf:c1:
de:b4:a9:b1:a2:5d:16:e9:a8:6d:e1:64:ad:4e:a5:
ff:61:aa:1e:c7:4d:5e:37:47:72:d3:85:2c:65:c6:
d7:e3:b7:21:20:8c:8f:dc:90:c0:11:f7:8c:0a:9a:
a4:77:92:57:69:ba:73:3b:14:c5:75:ba:21:3f:f9:
11:5b:89:f9:da:ab:27:72:c1:14:b1:a1:6e:f5:05:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5B:27:D0:BD:F9:14:89:99:E8:22:F8:52:B1:D2:DC:83:FD:25:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L1sn0L35FImZ6CL4UrHS3IP9JU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.174.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:a8:ce:26:3f:a5:35:9b:ff:f4:ca:65:0c:55:ed:c5:a1:d0:
99:85:b5:d9:c6:24:e6:32:e6:fc:4b:18:3d:c4:7a:e5:7e:e8:
a7:d1:12:5f:91:fd:ef:54:1f:a0:ee:63:6e:0b:a4:d4:96:22:
a1:f0:1c:ff:28:4b:92:e4:47:b2:e9:0d:3a:53:6d:c8:fa:57:
c4:ec:c0:7b:25:94:b9:53:75:dc:f9:e8:3c:27:cf:e5:c2:67:
12:71:ce:1e:c8:8f:6a:71:59:f5:d8:b1:d9:6e:0c:02:c7:13:
9e:bb:94:71:8c:0b:2d:5b:db:05:ed:92:81:92:da:09:96:99:
e8:30:b5:8c:90:18:ac:eb:2b:9e:79:da:fc:82:15:6c:19:45:
7f:d5:e1:35:09:b7:47:7d:30:54:ba:a0:ec:6f:6d:bb:2e:1a:
10:82:a4:c0:ec:b3:7f:a7:98:f9:0e:b8:64:ae:ad:13:5a:9c:
b8:15:b5:1f:ee:b2:f2:a9:40:c3:f3:56:6d:f0:9d:c3:aa:ef:
a4:ba:1b:35:11:b9:8c:74:02:17:af:f5:93:4b:7e:51:12:4a:
e6:fe:da:91:8b:7c:ad:eb:74:2e:f0:2d:b1:ee:31:53:5a:51:
51:0d:79:4f:b9:21:c8:89:59:20:54:97:3f:16:6a:6b:cf:74:
82:0a:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:40 2026 by rpki-client