Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fY2PsE4amXHmG5TXGkYUlwSNP6o.roa
File: fY2PsE4amXHmG5TXGkYUlwSNP6o.roa (raw, json)
Hash identifier: 0FFKyIw2OFSuKCQbGM/AwQ3bFqityBPGM7xwwQgpT+A=
Subject key identifier: 7D:8D:8F:B0:4E:1A:99:71:E6:1B:94:D7:1A:46:14:97:04:8D:3F:AA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EB32DA23E5A2D924A38CD4BA8B556DB18
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fY2PsE4amXHmG5TXGkYUlwSNP6o.roa
Signing time: Wed 10 Jun 2026 20:16:12 +0000
ROA not before: Wed 10 Jun 2026 20:16:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 217.60.188.0/24 maxlen: 24
217.60.189.0/24 maxlen: 24
217.60.190.0/24 maxlen: 24
217.60.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b3:2d:a2:3e:5a:2d:92:4a:38:cd:4b:a8:b5:56:db:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 10 20:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d8d8fb04e1a9971e61b94d71a461497048d3faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:1b:69:b5:c1:83:a9:24:96:af:73:2f:f6:
78:71:be:d4:47:f2:c6:2a:25:50:fc:4e:80:58:7d:
bc:8f:d0:e4:06:88:27:ed:3f:e5:60:60:41:c3:95:
38:5e:68:0b:d1:f0:38:ae:7d:07:ea:a0:95:19:7d:
e3:91:88:1e:7c:64:92:d8:03:b8:6d:b9:76:10:b1:
d0:5d:78:73:c4:38:97:fd:8d:bc:61:c0:b2:af:77:
7e:8a:d8:58:90:20:62:a3:f0:d8:34:b1:1e:19:0a:
7b:33:6b:e7:6b:cb:b6:e1:d1:a7:e5:ee:42:ed:02:
1b:92:c9:1c:d6:af:16:f3:df:3c:3a:e5:ca:c1:49:
ec:b4:c6:36:22:d6:78:37:f8:1c:01:f8:5f:84:16:
af:9d:4c:61:56:14:09:2d:e2:4c:e0:2d:41:c3:c1:
c4:eb:8b:5f:a2:0b:db:8a:bd:68:26:44:0c:54:10:
62:a8:32:31:35:fa:da:54:c7:d1:33:f2:1b:28:54:
e1:54:2d:9d:4a:ba:4a:d3:80:7d:b0:78:77:71:20:
fc:07:40:ca:b3:da:f2:ce:a2:2f:3b:35:a9:4d:f5:
fe:fe:df:f0:3f:39:f5:41:e5:c7:01:b1:a1:3c:69:
72:88:ca:a3:b6:1a:58:7a:c0:50:b1:7d:9b:74:3f:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8D:8F:B0:4E:1A:99:71:E6:1B:94:D7:1A:46:14:97:04:8D:3F:AA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fY2PsE4amXHmG5TXGkYUlwSNP6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
af:69:d8:56:8f:9e:fa:8d:5c:16:76:c6:14:cc:32:9c:15:d7:
3b:96:aa:62:15:5d:38:83:08:67:52:4f:bb:2a:46:9f:a3:66:
69:26:b8:e6:96:4f:8e:b1:fb:79:9e:60:3d:40:cc:74:27:67:
1b:6e:ae:b1:cf:de:f5:77:c4:65:19:ae:8b:a1:f7:ed:26:4b:
95:7e:45:4b:22:4f:33:95:a9:3b:8a:5a:68:af:12:16:9a:d4:
2b:b9:73:ac:29:dc:4c:f2:6f:de:e2:c1:d0:ca:ec:d8:7c:61:
1c:6f:f6:80:3f:8e:dc:d1:6e:3e:1f:b2:35:9e:40:1d:f5:17:
9d:53:a7:3b:29:78:d2:3a:82:d6:c0:60:94:1e:25:00:ad:3e:
ec:dd:01:b4:4a:57:7c:14:59:0a:93:e9:ee:12:5e:2a:28:9e:
c3:70:e0:7b:3a:33:7e:17:f8:81:d9:92:94:38:0a:ad:08:70:
ae:74:56:60:19:f1:62:b1:87:31:c2:97:ba:f2:e5:18:96:9c:
c8:a9:37:76:d1:d9:30:bd:9d:94:f5:b5:ca:33:04:e9:36:17:
0c:c5:21:a1:ce:90:54:b8:c2:9f:38:bc:21:20:80:c9:cc:cd:
bd:16:9b:14:f3:68:e7:8c:49:12:99:01:0b:2c:50:66:f8:71:
49:7d:b0:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6zLaI+Wi2SSjjNS6i1VtsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjEwMjAxNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDhkOGZiMDRlMWE5OTcxZTYxYjk0ZDcxYTQ2MTQ5NzA0OGQzZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxobabXBg6kklq9zL/Z4cb7UR/LG
KiVQ/E6AWH28j9DkBogn7T/lYGBBw5U4XmgL0fA4rn0H6qCVGX3jkYgefGSS2AO4
bbl2ELHQXXhzxDiX/Y28YcCyr3d+ithYkCBio/DYNLEeGQp7M2vna8u24dGn5e5C
7QIbkskc1q8W8988OuXKwUnstMY2ItZ4N/gcAfhfhBavnUxhVhQJLeJM4C1Bw8HE
64tfogvbir1oJkQMVBBiqDIxNfraVMfRM/IbKFThVC2dSrpK04B9sHh3cSD8B0DK
s9ryzqIvOzWpTfX+/t/wPzn1QeXHAbGhPGlyiMqjthpYesBQsX2bdD/I4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2Nj7BOGplx5huU1xpGFJcEjT+qMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZlkyUHNFNGFtWEhtRzVUWEdrWVVsd1NOUDZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ty8MA0G
CSqGSIb3DQEBCwUAA4IBAQCvadhWj576jVwWdsYUzDKcFdc7lqpiFV04gwhnUk+7
Kkafo2ZpJrjmlk+Osft5nmA9QMx0J2cbbq6xz971d8RlGa6LofftJkuVfkVLIk8z
lak7ilporxIWmtQruXOsKdxM8m/e4sHQyuzYfGEcb/aAP47c0W4+H7I1nkAd9Red
U6c7KXjSOoLWwGCUHiUArT7s3QG0Sld8FFkKk+nuEl4qKJ7DcOB7OjN+F/iB2ZKU
OAqtCHCudFZgGfFisYcxwpe68uUYlpzIqTd20dkwvZ2U9bXKMwTpNhcMxSGhzpBU
uMKfOLwhIIDJzM29FpsU82jnjEkSmQELLFBm+HFJfbAo
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:11 2026 by rpki-client