Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9KFtPIxCDPRcvIDLmKzIsRLE_Ts.roa
File: 9KFtPIxCDPRcvIDLmKzIsRLE_Ts.roa (raw, json)
Hash identifier: aJCOlasaooB7jIShW2T6Z6REm+k3ivOJLMBDLuWVQBA=
Subject key identifier: F4:A1:6D:3C:8C:42:0C:F4:5C:BC:80:CB:98:AC:C8:B1:12:C4:FD:3B
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A1A563D7633AFC5BC2718BFDAD9938527A
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9KFtPIxCDPRcvIDLmKzIsRLE_Ts.roa
Signing time: Wed 04 Nov 2026 07:09:06 +0000
ROA not before: Wed 04 Nov 2026 07:09:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 88.223.212.0/23 maxlen: 23
213.164.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:63:d7:63:3a:fc:5b:c2:71:8b:fd:ad:99:38:52:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Nov 4 07:09:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4a16d3c8c420cf45cbc80cb98acc8b112c4fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:46:1e:37:a9:af:04:00:9d:e2:cd:56:89:
2d:b6:a5:af:b6:77:b2:d3:7b:0a:e1:9a:b4:35:80:
7d:ba:04:fa:af:8f:ac:34:5f:b5:12:89:d0:01:a9:
ee:ee:cf:87:60:ee:90:4a:72:43:59:38:07:2b:81:
dd:c0:ef:8b:67:6a:33:ad:0c:cb:29:9a:44:3b:1c:
3e:29:30:f5:51:d9:da:06:3c:51:0f:c1:33:c3:b0:
f5:6e:03:98:ff:26:e9:de:db:8a:be:d8:64:ca:39:
84:92:f5:de:89:18:fd:a0:4e:ee:0d:3f:98:44:6c:
5b:7c:e8:93:a7:e1:a9:fd:cc:48:e4:f4:6c:b6:41:
ae:ed:71:a1:d1:4a:9e:4b:69:38:79:b3:24:1f:8b:
ec:b4:86:a9:66:67:2f:4c:cd:53:c0:ec:a9:c9:08:
01:51:1c:7a:5c:32:95:ec:24:e6:0e:08:6f:b3:56:
2d:4f:2a:07:b1:bc:30:7a:7a:84:f5:dc:68:09:28:
b6:ec:57:75:97:3b:b9:e1:6c:f7:f1:02:f5:73:06:
5a:fd:30:dd:a2:30:0e:62:35:9b:69:47:55:cb:21:
af:38:17:12:28:cc:b2:6e:28:6d:dd:1f:f5:d9:9e:
7f:e7:23:03:31:65:a1:d3:ed:bc:93:4f:60:c8:cc:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A1:6D:3C:8C:42:0C:F4:5C:BC:80:CB:98:AC:C8:B1:12:C4:FD:3B
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9KFtPIxCDPRcvIDLmKzIsRLE_Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.223.212.0/23
213.164.107.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f5:ce:4e:44:f9:e4:78:9c:bf:91:57:4c:d4:f0:ab:09:bd:
0b:3c:69:bc:29:f2:a3:eb:e2:08:52:11:fb:df:ff:54:e4:57:
42:e3:0c:d0:4d:b8:44:8c:7a:01:16:9a:e4:93:72:f4:fe:12:
fe:60:b2:29:5e:95:e6:cf:cc:9f:51:8c:7a:48:a0:a4:7c:5b:
63:ec:91:38:a8:78:99:1c:56:3d:bf:a2:db:73:b6:d3:6e:7e:
05:6c:64:04:1a:14:df:e1:9c:e8:52:1b:0f:14:98:b3:0a:1a:
1f:a6:d6:ae:fd:9f:54:f4:cf:e0:bb:71:ca:8b:26:cf:c8:1b:
1a:ea:23:14:9c:21:8b:8e:94:a1:2f:66:d7:f7:43:85:64:07:
f9:0f:c2:81:1a:39:44:db:0b:97:25:aa:fd:6d:d6:ae:bb:da:
e1:e8:c2:5a:ad:8f:e7:7e:3d:cf:3e:f2:63:6d:33:9e:43:15:
6f:56:95:80:b9:7e:bf:aa:4f:40:ef:89:54:c9:62:24:62:04:
0c:ce:d3:c5:73:a1:97:bc:6b:d9:4d:79:42:df:5d:9f:a4:ee:
f9:a1:0f:c0:ef:43:37:61:e6:29:a7:89:51:ca:d7:83:f2:5e:
d2:48:70:d4:96:16:04:d5:0e:5f:9a:81:01:99:89:d8:97:9f:
16:67:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:41:07 2026 by rpki-client