Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bOmGUb4l2IZTrvsw4EDt75MPWgc.roa
File: bOmGUb4l2IZTrvsw4EDt75MPWgc.roa (raw, json)
Hash identifier: DIxbz83deuxtUtQseWOSbYVJgvw6vt7rVNAXPksfj4E=
Subject key identifier: 6C:E9:86:51:BE:25:D8:86:53:AE:FB:30:E0:40:ED:EF:93:0F:5A:07
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E979E16B03EC789789FF012AC738A7749
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bOmGUb4l2IZTrvsw4EDt75MPWgc.roa
Signing time: Fri 05 Jun 2026 11:49:40 +0000
ROA not before: Fri 05 Jun 2026 11:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197574
IP address blocks: 217.60.32.0/24 maxlen: 24
217.60.33.0/24 maxlen: 24
217.60.34.0/24 maxlen: 24
217.60.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:9e:16:b0:3e:c7:89:78:9f:f0:12:ac:73:8a:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 5 11:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ce98651be25d88653aefb30e040edef930f5a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:e7:22:e8:52:78:e4:a6:96:01:c2:85:5c:
68:18:54:5c:7e:42:3e:52:a4:35:54:ed:6f:c0:ab:
56:e0:36:86:d1:12:f9:ae:0b:62:34:f2:3e:27:ba:
61:df:26:95:c1:8e:f5:86:9a:de:14:ec:7a:55:b5:
53:09:9f:66:37:e3:e5:fb:e0:c1:bf:09:09:ff:8b:
af:73:1e:f0:16:ce:b3:e9:e3:eb:2a:db:5b:59:31:
0e:5a:69:c7:25:8a:fb:f3:ac:55:c7:5a:5e:ff:7c:
95:ae:48:65:88:3c:68:7e:2b:6b:57:9c:49:08:e3:
bd:76:05:73:0f:78:e3:38:d7:4f:c8:c8:eb:8d:75:
a3:3f:e8:70:1d:34:a2:ca:c7:1f:a7:a0:65:45:94:
18:86:c6:a5:d3:0c:fe:4a:ea:26:8a:60:76:9d:f4:
4c:fa:7b:cb:79:e5:3e:7a:ac:85:53:45:48:76:4b:
f4:23:e6:b9:87:d4:4c:42:61:81:bd:73:ce:35:7f:
a8:ba:c5:f5:bd:3a:09:4c:47:d7:11:50:eb:e5:df:
e1:4f:25:b5:e9:79:04:b4:bc:c0:c2:2c:b1:c1:bc:
31:db:1e:db:13:0d:1d:32:d9:1e:eb:b7:97:30:44:
84:6c:2c:1a:29:f8:87:0a:e4:f6:ff:34:a4:51:1b:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:86:51:BE:25:D8:86:53:AE:FB:30:E0:40:ED:EF:93:0F:5A:07
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bOmGUb4l2IZTrvsw4EDt75MPWgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.32.0/22
Signature Algorithm: sha256WithRSAEncryption
85:1c:84:37:e0:91:f1:70:d6:4e:c1:eb:e5:bd:f5:33:1a:6f:
f9:99:8f:82:93:b9:94:ff:66:b3:f7:71:e7:d0:01:a4:14:8d:
28:fc:9b:37:d5:7d:0d:33:af:d7:05:8e:6f:1b:fc:25:f0:88:
49:a1:d9:7e:9c:52:d5:9a:4e:3d:e9:ab:de:47:ef:1c:81:a2:
41:6f:78:09:e0:28:27:39:0c:e9:3e:00:ce:a1:6e:df:79:26:
92:d5:ec:6e:01:7d:53:85:ca:bf:eb:66:a5:f7:86:d2:0e:d3:
93:ef:6e:d7:3a:43:55:a8:bb:ba:fc:15:16:30:16:fe:25:44:
ea:a3:e1:5e:b1:b3:93:f2:00:44:d3:f1:0f:ea:33:8a:32:cc:
6c:e9:9c:2c:91:98:dc:76:da:1b:37:68:bd:4b:21:46:a4:ae:
3a:6c:83:3b:c6:7d:42:26:7e:c0:16:58:49:af:c3:fc:06:3c:
b3:c4:68:ea:4c:6c:ab:0e:39:fa:fb:d6:7c:0d:6f:6c:45:01:
4f:b7:f5:f3:c5:58:8f:d8:8e:ec:7f:7f:3d:02:27:b3:f3:7e:
8c:f1:da:52:0a:cb:1d:7c:0e:ca:cd:a7:bf:9e:a5:7a:84:45:
f0:52:cc:38:bc:33:c4:fd:70:46:dd:18:4a:ea:c1:17:7b:ae:
b1:bd:2f:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6XnhawPseJeJ/wEqxzindJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjA1MTE0OTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2U5ODY1MWJlMjVkODg2NTNhZWZiMzBlMDQwZWRlZjkzMGY1YTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZrnIuhSeOSmlgHChVxoGFRcfkI+
UqQ1VO1vwKtW4DaG0RL5rgtiNPI+J7ph3yaVwY71hpreFOx6VbVTCZ9mN+Pl++DB
vwkJ/4uvcx7wFs6z6ePrKttbWTEOWmnHJYr786xVx1pe/3yVrkhliDxofitrV5xJ
COO9dgVzD3jjONdPyMjrjXWjP+hwHTSiyscfp6BlRZQYhsal0wz+SuomimB2nfRM
+nvLeeU+eqyFU0VIdkv0I+a5h9RMQmGBvXPONX+ousX1vToJTEfXEVDr5d/hTyW1
6XkEtLzAwiyxwbwx2x7bEw0dMtke67eXMESEbCwaKfiHCuT2/zSkURulnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzphlG+JdiGU677MOBA7e+TD1oHMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYk9tR1ViNGwySVpUcnZzdzRFRHQ3NU1QV2djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2TwgMA0G
CSqGSIb3DQEBCwUAA4IBAQCFHIQ34JHxcNZOwevlvfUzGm/5mY+Ck7mU/2az93Hn
0AGkFI0o/Js31X0NM6/XBY5vG/wl8IhJodl+nFLVmk496aveR+8cgaJBb3gJ4Cgn
OQzpPgDOoW7feSaS1exuAX1Thcq/62al94bSDtOT727XOkNVqLu6/BUWMBb+JUTq
o+FesbOT8gBE0/EP6jOKMsxs6ZwskZjcdtobN2i9SyFGpK46bIM7xn1CJn7AFlhJ
r8P8BjyzxGjqTGyrDjn6+9Z8DW9sRQFPt/XzxViP2I7sf389Aiez836M8dpSCssd
fA7Kzae/nqV6hEXwUsw4vDPE/XBG3RhK6sEXe66xvS80
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:19 2026 by rpki-client