Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9TEom2qJCbi-WYi6qmqT3hSFwhw.roa
File: 9TEom2qJCbi-WYi6qmqT3hSFwhw.roa (raw, json)
Hash identifier: CH3B6IY6Y6wuvlMYVvPTvyxektEMQVmFRpYyNTrssk4=
Subject key identifier: F5:31:28:9B:6A:89:09:B8:BE:59:88:BA:AA:6A:93:DE:14:85:C2:1C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019EABDB88C398D073687545A79B0C83256F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9TEom2qJCbi-WYi6qmqT3hSFwhw.roa
Signing time: Tue 09 Jun 2026 10:09:11 +0000
ROA not before: Tue 09 Jun 2026 10:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 62.60.163.0/24 maxlen: 24
62.60.184.0/23 maxlen: 24
62.60.188.0/24 maxlen: 24
62.60.193.0/24 maxlen: 24
62.60.195.0/24 maxlen: 24
62.60.221.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
62.60.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:db:88:c3:98:d0:73:68:75:45:a7:9b:0c:83:25:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 9 10:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f531289b6a8909b8be5988baaa6a93de1485c21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:eb:e6:c5:e1:18:51:d8:71:e2:cf:ac:84:
90:3d:b0:97:4a:57:d5:e2:fd:aa:e6:de:ac:aa:02:
71:01:9d:e8:5e:3d:3c:8e:b8:84:1e:e3:70:ed:4f:
b3:42:f2:98:c6:65:8b:39:46:91:8e:3f:a8:2e:b6:
ab:65:cf:3b:72:a6:60:36:51:4a:cd:65:10:25:af:
52:92:70:c4:11:ce:3f:1c:54:d1:62:4d:b5:eb:9b:
05:ad:1b:00:a2:ee:94:4c:8f:8c:f7:23:51:76:06:
c1:63:7e:64:cd:65:b3:41:e4:4c:e6:08:9a:5f:e5:
dd:0e:ae:c9:c8:98:04:9f:cf:99:a0:da:cb:3b:31:
9e:5e:ad:12:9a:b8:55:af:47:56:e4:cb:f6:26:ab:
d5:aa:68:af:5b:31:06:ad:52:22:c6:05:6f:98:ec:
c7:ad:be:6c:ed:6e:01:b9:29:92:53:dd:56:ba:00:
53:09:b4:6d:ae:08:e3:00:6b:2a:0b:b7:a6:96:23:
54:e4:f6:37:eb:24:14:91:7e:55:8c:fa:08:4d:87:
b9:49:12:67:b9:c2:32:9a:c6:d5:4e:d5:da:c9:3f:
71:17:79:59:fa:8d:e1:52:f7:e8:0a:47:25:01:cf:
04:d7:52:d8:53:78:97:1f:f8:ed:ef:fe:f3:83:40:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:31:28:9B:6A:89:09:B8:BE:59:88:BA:AA:6A:93:DE:14:85:C2:1C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9TEom2qJCbi-WYi6qmqT3hSFwhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.163.0/24
62.60.184.0/23
62.60.188.0/24
62.60.193.0/24
62.60.195.0/24
62.60.221.0-62.60.223.255
Signature Algorithm: sha256WithRSAEncryption
68:50:c9:3a:c8:d7:6f:cd:e2:68:2a:fa:79:63:ea:86:7b:36:
8c:cf:c5:a5:3e:11:c4:90:1c:6c:5e:7d:78:66:5a:40:bc:84:
28:ac:cd:c3:29:35:86:0e:5a:4b:01:54:95:c5:8a:9c:3a:1e:
31:89:6a:30:cd:50:ec:e9:06:28:62:14:c1:38:b9:2c:34:20:
7a:80:51:84:19:e4:a2:7c:bb:05:99:92:06:5a:6c:eb:fe:7f:
8b:72:87:b4:e8:66:5a:bd:0b:ef:fe:50:15:05:10:85:5b:f7:
80:8e:67:95:50:ab:dc:31:9b:f7:91:54:a2:06:eb:b6:1b:b2:
e9:ef:8e:3a:3d:25:be:85:0e:a6:b9:84:6e:d1:35:35:a2:64:
27:f8:4b:c8:17:d8:31:75:d1:96:83:86:c9:76:b4:bb:d3:54:
3d:6d:90:e1:6a:37:47:48:bc:80:7f:83:20:3f:43:b5:24:e2:
39:d2:70:07:1d:ff:f8:1f:14:97:8c:7e:fc:fe:c9:2b:19:70:
0b:fe:07:fd:94:31:7d:75:ef:01:20:6d:6b:e3:50:de:2f:ae:
65:a5:e5:15:d1:2c:f2:a6:a9:26:b8:cb:c7:11:dc:a3:b3:c3:
d4:43:d6:b7:4d:68:06:9e:8f:3c:7c:eb:d7:c8:f0:db:00:72:
98:e1:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:07 2026 by rpki-client