Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t8jntMsznFAYSOutCIxdzJG7Hd0.roa
File: t8jntMsznFAYSOutCIxdzJG7Hd0.roa (raw, json)
Hash identifier: oEaptX4W+F2YTiS6CEFqBCLi8qfjdPzR1SskYvgpeoU=
Subject key identifier: B7:C8:E7:B4:CB:33:9C:50:18:48:EB:AD:08:8C:5D:CC:91:BB:1D:DD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0A59A01F93FE101BCEE8BAFB76CB914EF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t8jntMsznFAYSOutCIxdzJG7Hd0.roa
Signing time: Tue 15 Sep 2026 15:05:28 +0000
ROA not before: Tue 15 Sep 2026 15:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 217.60.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:9a:01:f9:3f:e1:01:bc:ee:8b:af:b7:6c:b9:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 15 15:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7c8e7b4cb339c501848ebad088c5dcc91bb1ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:b8:98:9e:ed:c8:3d:6c:0d:13:16:77:75:
48:bc:df:3c:af:0b:31:d9:f5:de:ca:d5:3b:86:5a:
d6:87:38:1c:f6:65:0e:2a:26:68:2a:a2:68:83:b9:
3d:ff:2d:fe:ff:f4:e4:53:f7:b4:98:be:2f:fc:b3:
22:69:89:5c:13:8d:66:98:50:36:f1:8e:33:55:b2:
3b:45:21:14:8b:a6:74:8f:63:77:1e:76:38:43:9f:
d4:06:1b:39:01:bd:8c:f7:50:cd:d2:ed:66:a0:0e:
e2:a8:97:44:14:31:71:5f:54:af:1e:ab:a2:83:3f:
7c:47:4b:4d:9c:94:7b:9a:51:54:b2:81:99:c8:6a:
62:12:8a:a0:01:3d:5d:70:66:aa:41:f0:c7:e8:4c:
d6:5c:72:72:41:9c:f8:23:c4:d3:d5:2c:83:dc:49:
b4:4d:69:32:0f:77:12:14:cb:71:7a:e9:ef:fd:52:
50:b3:24:d1:bb:9b:3f:ed:3c:f5:9e:3c:66:31:f0:
0f:21:2c:6c:22:e2:f5:29:12:a8:f5:1e:23:d3:ec:
ef:63:2d:cc:e6:1a:cc:63:53:9c:79:28:51:77:82:
95:20:10:37:be:05:6e:5a:34:10:0a:c7:3e:9e:0e:
29:db:94:42:d1:5f:04:3c:ac:ee:f4:17:c0:5f:52:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C8:E7:B4:CB:33:9C:50:18:48:EB:AD:08:8C:5D:CC:91:BB:1D:DD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t8jntMsznFAYSOutCIxdzJG7Hd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e7:41:97:86:8a:a8:06:ba:8d:b5:f9:bf:a1:ea:0c:7e:f3:
e3:a9:1e:f8:6e:17:5a:b9:bc:55:c3:5b:0d:6a:f7:6c:cf:a0:
63:63:2d:00:1e:5c:c9:49:1d:17:5f:90:d4:81:79:1f:44:92:
36:5c:2e:b2:0a:fa:66:86:46:0e:d5:9a:ec:fc:dd:db:f9:85:
b4:1b:b9:49:da:4e:2a:99:f2:a4:2a:ac:40:cf:7c:e5:c9:fa:
1b:07:b8:e4:6f:f7:16:8a:b3:7b:86:72:f6:d3:22:86:59:eb:
eb:c8:14:61:32:ec:62:4e:76:d2:7c:af:f7:f9:14:2d:73:fe:
d3:48:e7:93:1c:e7:87:8f:14:c2:e1:84:0a:92:4f:30:26:11:
64:38:54:d4:f5:7a:3b:6c:24:72:ee:88:c8:67:f7:23:ef:31:
e0:b4:5f:84:5f:6c:15:11:c0:77:03:3f:6b:2f:d8:d1:8d:6c:
10:71:ac:48:2f:1f:6a:4e:80:9e:0b:fb:e9:7c:04:d9:ab:99:
b7:e6:6d:a1:3b:74:e7:52:b7:eb:0d:5c:cc:33:e2:34:2f:8c:
d6:3f:31:2d:c1:f5:68:47:93:a1:cc:51:7f:8b:31:6e:82:10:
18:67:f6:1c:35:87:c9:dc:38:28:12:19:64:db:c7:2a:d2:f3:
98:2d:ef:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:04:25 2026 by rpki-client