Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YMmrb2KcbGwyN9_GXgoImJ27t3s.roa
File: YMmrb2KcbGwyN9_GXgoImJ27t3s.roa (raw, json)
Hash identifier: eYvPFWyp1sfHnXZXyED7nv6RLF1sqNbTy1n8HApKc84=
Subject key identifier: 60:C9:AB:6F:62:9C:6C:6C:32:37:DF:C6:5E:0A:08:98:9D:BB:B7:7B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A16396C53476459E371415D8F049838A18
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YMmrb2KcbGwyN9_GXgoImJ27t3s.roa
Signing time: Thu 22 Oct 2026 12:29:47 +0000
ROA not before: Thu 22 Oct 2026 12:29:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 217.60.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:96:c5:34:76:45:9e:37:14:15:d8:f0:49:83:8a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 22 12:29:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60c9ab6f629c6c6c3237dfc65e0a08989dbbb77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:f5:24:72:c0:84:c5:45:3c:fd:00:13:05:
c2:e1:7b:61:16:21:6e:f9:9d:cf:61:26:01:4c:6a:
32:8b:26:72:ec:53:3d:4d:11:51:61:83:b1:73:5a:
76:ff:29:a0:a5:f2:f1:e8:03:81:e1:50:4a:d9:b5:
09:e6:60:be:b1:97:2e:8d:91:c3:04:1f:e6:97:3b:
75:42:d3:73:64:29:e9:01:1a:14:01:bd:1c:3a:0d:
b6:96:2a:5f:31:ab:d2:87:1a:df:2a:9d:6b:0e:42:
7c:3c:2a:25:6b:f2:4c:dc:9b:89:bd:70:b2:6d:d6:
1a:69:2c:5c:71:d6:f1:ba:98:cc:ed:53:8b:c9:6b:
f0:6b:58:fc:6e:b4:20:a8:70:0d:f7:db:f3:d7:76:
fc:bc:b4:62:d4:b2:df:67:57:ef:98:19:81:80:b9:
e2:d8:4c:b3:37:8b:eb:78:c8:e0:98:d2:4f:ea:fc:
b9:62:07:81:d4:b4:f0:c4:90:44:de:21:5f:f6:c5:
b2:d7:24:e7:20:1b:70:62:55:dd:64:ba:fe:3a:6e:
d6:2b:94:ad:f8:b2:f5:cc:50:87:63:49:c2:91:c9:
e7:b7:e7:db:bd:5c:c4:35:5c:41:f7:59:1e:88:15:
8e:6f:f0:d7:fa:83:ad:40:0e:f9:4b:58:1e:05:5c:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C9:AB:6F:62:9C:6C:6C:32:37:DF:C6:5E:0A:08:98:9D:BB:B7:7B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YMmrb2KcbGwyN9_GXgoImJ27t3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.15.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9f:f7:29:4e:90:ca:9a:a9:cf:b7:5d:2d:d2:70:0f:a4:a9:
64:d4:10:78:e1:9e:59:ae:a9:51:ff:e9:0a:e6:33:09:f6:33:
aa:67:36:b1:7e:5f:6c:0b:c1:2a:99:52:f8:94:e7:37:f4:64:
dd:1d:20:59:7c:93:59:98:bf:1e:ab:fa:94:94:13:4f:33:7b:
6d:22:21:94:c1:30:88:ac:c1:32:0f:73:db:e5:59:bd:a8:91:
12:94:82:03:99:23:a8:6f:86:4d:ed:1d:cc:08:66:cb:54:b1:
d6:c2:cf:6d:3d:1e:8f:8c:38:11:6a:77:10:13:5c:2a:8e:a6:
95:21:27:3a:5c:6d:d0:de:27:9c:e4:76:ab:75:bc:13:99:71:
53:5a:42:2e:dc:a3:98:f2:83:d4:07:80:41:e9:6e:5b:87:93:
a5:7f:76:f7:97:11:43:47:0c:e9:05:12:a6:28:a2:71:d6:b6:
a4:a6:68:c5:46:d1:66:71:67:d5:50:85:dd:46:2a:f4:28:c9:
92:32:31:27:21:df:57:a8:5f:9a:23:db:4f:90:cc:8e:3d:48:
9f:0e:cc:66:ea:61:ab:ef:83:bd:b9:1a:23:5c:a1:c1:01:fd:
eb:7d:7b:23:79:4a:61:9e:7c:15:d5:c6:3b:6c:ec:74:50:fd:
1d:8b:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 19:36:36 2026 by rpki-client