Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lsz9mDE9WvG4GfNCoOj7DN6hUiw.roa
File: lsz9mDE9WvG4GfNCoOj7DN6hUiw.roa (raw, json)
Hash identifier: Gt15MDxeEIhvPrFZJgGttLx2Ao8bpz32QYlDgmqWTtY=
Subject key identifier: 96:CC:FD:98:31:3D:5A:F1:B8:19:F3:42:A0:E8:FB:0C:DE:A1:52:2C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C6273FB3ED44530717E90D1B7140177C7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lsz9mDE9WvG4GfNCoOj7DN6hUiw.roa
Signing time: Sun 15 Feb 2026 17:58:14 +0000
ROA not before: Sun 15 Feb 2026 17:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 217.60.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:62:73:fb:3e:d4:45:30:71:7e:90:d1:b7:14:01:77:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 15 17:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96ccfd98313d5af1b819f342a0e8fb0cdea1522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:d7:f3:92:16:c6:7a:10:4f:75:ae:a8:63:
d7:47:6d:4d:d9:46:be:31:58:71:84:69:16:9e:fb:
af:22:ce:d1:5e:2e:78:fc:88:ac:6c:8d:19:fd:0b:
88:28:30:9a:1a:ec:21:84:90:7b:12:30:64:40:44:
14:d9:01:fc:2a:51:c9:86:d5:5c:f9:20:de:09:1a:
57:b9:c6:9d:74:c3:db:7d:21:e5:f5:91:36:5d:8b:
e4:63:73:e4:c0:11:15:f8:21:72:b5:e0:c2:8d:d1:
c4:1e:6a:66:e5:a0:a4:99:61:52:f2:e9:1a:f4:da:
db:44:f1:dd:3e:cf:f7:71:9e:e8:9f:2d:64:c9:ed:
89:19:13:37:6f:71:a3:9c:7d:42:be:89:93:ec:db:
a1:a5:93:4c:5d:8b:49:18:e7:db:36:6f:85:b2:66:
90:87:3f:a1:55:1a:01:47:58:f7:d0:73:f7:d0:9a:
d2:8c:72:b4:f3:f7:d1:4c:f7:ad:e7:92:f3:e0:7e:
d3:cb:17:fb:dd:72:71:c9:f6:be:11:dc:82:7a:0e:
86:9a:6d:cd:d3:3c:35:45:22:d4:68:f3:29:78:d8:
24:d5:55:bb:09:15:1a:23:36:51:55:92:c4:cf:85:
50:dc:83:06:ed:ce:b8:8e:19:27:23:86:5a:27:65:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CC:FD:98:31:3D:5A:F1:B8:19:F3:42:A0:E8:FB:0C:DE:A1:52:2C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lsz9mDE9WvG4GfNCoOj7DN6hUiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f7:83:bc:7c:6b:8a:00:3a:7b:c1:2a:3d:bb:95:2b:cd:7c:
63:37:c8:b6:ff:c0:0c:68:9f:be:73:fc:37:01:93:06:fd:84:
9d:04:73:28:3a:28:74:af:a0:83:3b:76:fb:c3:b5:c1:07:94:
dc:e5:20:55:03:e4:d3:83:7b:00:0e:4e:68:ac:63:ee:76:4e:
bf:06:ad:5d:30:1b:5b:4b:1c:11:48:8c:1a:a1:9a:c9:40:dc:
58:ea:17:be:76:d0:ed:02:49:92:be:f5:88:c9:6e:3b:43:62:
01:8b:94:77:fd:b4:a7:a0:8b:72:f7:96:02:4c:b3:07:e0:4c:
9e:47:d2:e1:d1:b4:bd:76:68:c5:82:5a:d3:b0:d0:3f:ff:6d:
2c:fb:6b:cf:96:5f:b2:8f:ce:e6:83:d7:97:a6:97:9b:d9:db:
21:8c:65:61:4f:06:ea:79:e5:51:6b:59:77:b5:43:a0:1f:27:
f1:05:67:b4:67:7a:bb:34:68:42:2c:13:9a:a2:9e:a6:58:d7:
18:6f:77:99:87:dc:47:6f:94:8f:0d:12:eb:8a:fd:57:08:f0:
62:f5:a0:05:c3:14:da:17:87:83:ef:9d:35:7e:f0:d2:e6:8a:
7e:10:9f:17:7b:47:01:1d:b6:14:09:ab:d0:15:c8:2c:5d:fe:
87:87:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:39:58 2026 by rpki-client