Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PYmEi_RZXaT2FB5uvnBJwbG8QFg.roa
File: PYmEi_RZXaT2FB5uvnBJwbG8QFg.roa (raw, json)
Hash identifier: VkST2EoyGmQYKPwr1faQogvGyjHv4Uhutuc5OsHafsg=
Subject key identifier: 3D:89:84:8B:F4:59:5D:A4:F6:14:1E:6E:BE:70:49:C1:B1:BC:40:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07CFBA514D9680D5158919D49473FE20B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PYmEi_RZXaT2FB5uvnBJwbG8QFg.roa
Signing time: Mon 07 Sep 2026 17:47:41 +0000
ROA not before: Mon 07 Sep 2026 17:47:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401626
IP address blocks: 217.60.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:fb:a5:14:d9:68:0d:51:58:91:9d:49:47:3f:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 7 17:47:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d89848bf4595da4f6141e6ebe7049c1b1bc4058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:00:56:15:43:d0:16:5d:b4:f8:ec:cd:ba:
01:bd:b8:4b:6c:28:36:14:86:77:a6:a3:6f:4f:15:
2e:bc:89:3e:eb:cc:41:7b:6f:be:6c:60:ef:da:6c:
e1:b7:4b:b8:79:ee:e3:b7:2b:32:20:1d:ef:79:a5:
68:e7:e6:ab:32:62:4e:b3:33:72:89:f3:22:ee:c7:
6c:8d:1e:80:60:7f:e0:b1:90:40:89:88:d7:b4:02:
74:ce:22:1f:a6:bb:5b:b8:9d:a3:2a:a1:b3:ec:41:
97:0a:4a:aa:57:f2:67:e3:00:8b:e8:9a:80:cf:ee:
78:1b:ff:5f:eb:1f:ec:34:27:b2:2c:98:c8:31:dd:
68:4e:99:ac:2b:70:8d:19:0a:83:e1:5b:b5:68:c9:
ad:d4:88:a3:f5:60:12:35:d2:b1:7d:8d:c4:d7:73:
42:37:4f:a8:86:00:96:dd:c7:88:87:9e:03:48:f8:
34:b8:af:b5:bc:88:6b:07:13:36:0d:13:68:cc:95:
d9:32:0c:b5:45:b0:bd:5b:9a:9e:08:4d:ee:bc:6f:
f4:e1:5d:30:57:0c:93:f0:96:fe:ea:cf:f5:a1:40:
a2:fd:db:5f:b0:13:56:fe:d6:49:3d:f4:bd:dc:df:
f8:c4:f0:e1:3c:b9:78:31:54:3f:7c:e0:85:56:4e:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:89:84:8B:F4:59:5D:A4:F6:14:1E:6E:BE:70:49:C1:B1:BC:40:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PYmEi_RZXaT2FB5uvnBJwbG8QFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.76.0/24
Signature Algorithm: sha256WithRSAEncryption
86:78:db:98:25:87:c9:5c:3e:a7:6a:97:89:2e:2a:a8:9b:2d:
3c:b9:5b:a3:b8:74:f8:03:38:5a:72:8c:ab:6a:2a:0b:1f:28:
f7:c8:e5:19:81:2a:78:56:df:ae:43:e8:71:96:50:e2:33:91:
47:85:23:12:89:64:43:61:85:e8:dd:2e:53:83:7c:59:bc:0f:
30:4b:21:43:bc:ec:f5:89:a3:72:ed:64:bb:69:ae:1b:af:b5:
ae:5b:70:2d:ff:af:39:be:0b:7a:e2:94:f1:fb:3e:1b:78:21:
bc:6f:03:f3:93:f5:fc:2e:be:08:03:fc:5e:66:7a:1c:52:90:
f3:62:99:04:7e:70:4f:14:2e:54:1f:e7:4f:1d:07:c2:43:67:
f0:18:52:a3:26:2d:39:24:b7:64:9b:14:5e:82:69:46:a5:56:
90:95:65:77:d3:63:76:ef:e2:0d:ad:d1:86:61:e6:de:c3:55:
94:e0:59:85:ec:bd:e3:29:93:ac:df:22:b7:3b:7f:d6:53:aa:
d6:6c:b9:b0:7e:39:0b:f1:2d:09:71:6a:f2:7b:f4:e6:f0:30:
f6:d4:a5:25:7e:ba:4e:74:c7:a2:5a:ea:d9:81:07:c2:a9:3e:
1e:63:90:7b:51:17:c6:f2:0a:c1:80:12:2b:9f:14:9f:f2:24:
c4:9a:e3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:36 2026 by rpki-client