Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OrauXoQ6pyRLMs83OPfw1NwN_7Y.roa
File: OrauXoQ6pyRLMs83OPfw1NwN_7Y.roa (raw, json)
Hash identifier: zf87kZNw+pVsLeFjFmHvcw5Q19pRgFuPlFJDPx+Fok0=
Subject key identifier: 3A:B6:AE:5E:84:3A:A7:24:4B:32:CF:37:38:F7:F0:D4:DC:0D:FF:B6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0AB25FD788DCF5B47F0716A13BA3C3F73
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OrauXoQ6pyRLMs83OPfw1NwN_7Y.roa
Signing time: Wed 16 Sep 2026 16:56:28 +0000
ROA not before: Wed 16 Sep 2026 16:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208220
IP address blocks: 217.60.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:25:fd:78:8d:cf:5b:47:f0:71:6a:13:ba:3c:3f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 16 16:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ab6ae5e843aa7244b32cf3738f7f0d4dc0dffb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:73:a4:52:c1:c7:38:9e:aa:ef:95:cb:10:
09:58:8b:7e:2f:01:e9:f2:58:2d:b7:90:35:44:1c:
a6:a0:2a:b3:4a:cd:8c:93:3a:8a:01:06:c4:e8:a4:
89:6d:56:0f:11:d3:05:39:a9:74:b7:f5:2e:74:f3:
b3:78:e5:01:2d:80:1e:79:c0:37:c3:20:85:28:1f:
6d:53:0a:af:b0:6d:4c:1c:dc:e3:d1:2d:52:fa:f6:
10:1c:37:c6:a8:a3:f8:14:df:7d:b6:f6:78:00:99:
5b:c6:91:db:b3:b2:45:b1:49:e8:d0:ec:3f:87:57:
b9:c7:8b:eb:8f:10:da:b8:38:46:e1:39:94:6c:fe:
2c:8f:f5:54:3b:8e:60:46:aa:f7:21:ee:f2:a4:f4:
b7:16:d4:17:e1:96:19:96:68:57:af:eb:1d:31:da:
bc:bf:04:91:f9:a7:3b:82:56:05:88:0f:8d:1a:b6:
bd:22:9f:7f:56:86:2d:3b:b6:11:60:1f:66:f6:f4:
e9:02:7a:20:67:cc:31:24:6c:56:a5:ff:66:9f:cd:
e4:7a:56:7e:b3:04:89:24:34:24:a9:de:74:b4:1a:
81:6e:f4:d5:b7:50:9b:db:63:bc:b8:61:4e:62:ae:
2d:6b:38:9f:72:fa:49:fd:6e:3e:85:ad:af:29:e1:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B6:AE:5E:84:3A:A7:24:4B:32:CF:37:38:F7:F0:D4:DC:0D:FF:B6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OrauXoQ6pyRLMs83OPfw1NwN_7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.101.0/24
Signature Algorithm: sha256WithRSAEncryption
93:df:70:fb:1a:8a:ac:d1:bc:cb:2f:bc:c0:a3:38:5a:7c:f4:
a1:25:00:92:ed:24:39:ea:ce:a4:61:01:76:5a:7d:5b:cc:28:
88:65:34:28:e0:9e:4e:d4:c6:49:31:86:02:b9:3f:63:88:13:
cf:e6:df:ef:d0:da:17:0d:85:b5:82:d4:f2:53:ec:77:41:b0:
32:4a:13:15:a0:3d:e9:3c:60:2c:5b:f6:9a:96:d0:13:ed:56:
ed:b6:bf:7d:94:4e:23:8e:50:ee:68:7f:31:1f:5b:87:ab:2a:
4e:a8:0e:f6:9a:37:cf:67:16:e3:82:f4:72:20:c0:e7:99:f4:
f6:58:b2:c5:5b:e2:18:45:23:ac:06:42:8e:d4:1d:86:1c:d0:
02:3a:9d:82:55:b4:07:ec:f8:40:c8:32:9e:3c:10:f6:88:63:
12:b8:b8:5d:e1:97:df:e6:85:52:a9:48:d3:e6:aa:7e:e0:83:
e8:23:b4:d3:7f:c5:33:92:46:dd:f7:1a:cf:97:0d:c9:fa:1d:
0c:d4:61:1a:ca:e7:f9:bc:d1:d7:70:76:09:8d:ef:bc:0c:25:
4c:a8:95:43:8a:d7:fb:1e:98:6e:1b:b8:0f:63:ba:0a:9d:4c:
ef:44:a9:af:a4:99:6f:66:1d:e9:a0:17:60:c8:83:34:33:76:
da:e3:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:01:23 2026 by rpki-client