Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-AzKGhO1e1-VFJNTOfdyjclw52s.roa
File: 1-AzKGhO1e1-VFJNTOfdyjclw52s.roa (raw, json)
Hash identifier: jAf9VTsYtuY+Cq6A1aThYIqSUsKwIIxl7HpjFV0A63I=
Subject key identifier: F8:0C:CA:1A:13:B5:7B:5F:95:14:93:53:39:F7:72:8D:C9:70:E7:6B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01A105C2AD606121C4CE343615AF6140F88C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-AzKGhO1e1-VFJNTOfdyjclw52s.roa
Signing time: Sun 04 Oct 2026 07:13:26 +0000
ROA not before: Sun 04 Oct 2026 07:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213456
IP address blocks: 62.60.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:c2:ad:60:61:21:c4:ce:34:36:15:af:61:40:f8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 4 07:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f80cca1a13b57b5f9514935339f7728dc970e76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:e1:0b:4f:7e:ea:ad:20:a0:e4:a7:71:88:
b8:ae:6e:7f:49:10:ad:74:dc:8a:46:ea:28:32:dc:
6d:ef:9e:1c:a6:6b:14:f2:a9:a1:c4:06:b7:a0:7e:
57:bb:f3:92:ea:fc:48:fb:6f:aa:19:fc:8f:77:0d:
9f:ac:b5:5b:ac:b1:7b:bd:65:32:12:e8:3d:66:aa:
7d:8b:4b:dc:9b:3a:70:46:a1:51:90:0b:b6:79:ca:
2f:31:b1:03:11:78:0e:ae:f2:bb:49:47:c2:ce:d0:
d7:68:5d:c7:78:89:d7:32:c8:50:40:56:9d:98:f5:
80:00:23:78:80:00:e1:02:cf:55:d3:21:71:5b:e1:
d8:ea:b4:09:94:4b:76:96:85:c1:8e:06:77:4d:3b:
6d:12:7f:56:b9:e7:e3:55:45:d8:96:b1:40:b5:cf:
7d:86:d5:77:2b:d3:41:99:51:77:3d:10:18:79:64:
40:e5:fa:6d:23:d9:3e:6b:e6:ab:ae:35:00:7c:c6:
b4:f9:ae:57:34:30:90:5d:54:cb:6d:2e:17:fb:8c:
c1:49:bc:98:a0:21:bf:85:58:12:83:62:b4:be:f4:
47:fa:2c:a7:cb:1d:cf:ef:d6:15:bc:81:bd:6c:57:
1b:17:26:47:9e:3a:67:11:98:a2:80:a2:3f:96:1a:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0C:CA:1A:13:B5:7B:5F:95:14:93:53:39:F7:72:8D:C9:70:E7:6B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-AzKGhO1e1-VFJNTOfdyjclw52s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.131.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e3:9d:ce:8a:84:2a:d1:6b:d0:61:9b:d2:ce:35:b7:d8:b6:
03:7c:03:9b:1a:72:2a:1d:92:b6:bc:68:73:2d:92:52:c0:7c:
10:ba:15:db:6d:50:01:6b:9c:af:11:68:20:e1:d7:5e:0a:2b:
7e:27:d9:01:29:34:c5:4b:48:d3:08:18:30:f9:ca:1a:b2:5d:
22:a3:d1:9a:0a:8d:07:65:18:7f:ec:33:02:6b:38:c7:41:15:
c2:d2:7e:29:25:ee:e8:1b:89:1d:73:d4:9f:56:9a:06:88:83:
3b:12:2a:bd:fa:d7:1f:a9:09:d9:38:78:4e:08:bf:a9:80:fd:
f5:fc:a5:08:0e:46:bc:73:3c:6d:b5:bf:42:7a:74:d6:e2:d4:
d4:4b:8e:55:3e:dc:83:8d:46:83:ed:b0:e3:48:db:72:0b:5e:
ab:6c:6b:ca:95:53:a6:5e:b8:cb:dc:b6:34:30:9b:54:b3:df:
e4:13:07:b9:36:4e:d6:f3:c6:6d:03:87:ab:e5:16:bb:d8:37:
a0:4c:e7:df:6d:cb:7d:93:15:57:93:f1:0c:3b:9e:03:57:18:
03:9b:01:70:da:27:26:a7:f1:74:b9:58:cd:9d:db:9c:2f:d5:
51:41:67:3a:c8:3b:0f:51:d1:04:9f:69:75:8c:94:6f:14:c0:
63:78:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:49:33 2026 by rpki-client