Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/E9tOaZygMM3UqYNRjQlxlBzy9ds.roa
File: E9tOaZygMM3UqYNRjQlxlBzy9ds.roa (raw, json)
Hash identifier: H7SKepSbmStRE/aXND+8eUwJuEZ5g7k9Z/vw0uV6osU=
Subject key identifier: 13:DB:4E:69:9C:A0:30:CD:D4:A9:83:51:8D:09:71:94:1C:F2:F5:DB
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019E8BCA06768827334F6918A01A9BE0F411
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/E9tOaZygMM3UqYNRjQlxlBzy9ds.roa
Signing time: Wed 03 Jun 2026 04:42:13 +0000
ROA not before: Wed 03 Jun 2026 04:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59441
IP address blocks: 62.60.128.0/21 maxlen: 24
62.60.164.0/22 maxlen: 24
62.60.185.0/24 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.209.0/24 maxlen: 24
62.60.210.0/23 maxlen: 24
62.60.210.0/24 maxlen: 24
62.60.211.0/24 maxlen: 24
62.60.212.0/22 maxlen: 24
213.176.28.0/22 maxlen: 24
213.176.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8b:ca:06:76:88:27:33:4f:69:18:a0:1a:9b:e0:f4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 3 04:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13db4e699ca030cdd4a983518d0971941cf2f5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:04:03:69:14:90:5c:f4:15:68:03:be:0d:f7:
e9:fd:a3:1d:5e:d9:0a:6d:2c:99:62:4f:14:71:e7:
3b:e5:88:3c:09:6d:3e:18:70:0c:ef:81:d9:47:76:
89:c3:8f:c5:f1:be:be:20:59:2e:fb:d5:45:bb:87:
55:83:dd:61:ab:d0:ab:36:55:60:b5:d7:64:3b:e7:
21:e2:4b:10:97:8b:ae:83:83:2c:64:04:6e:26:90:
ed:6b:6d:94:47:27:fe:e9:63:bf:81:b7:23:74:c6:
fe:7d:7c:55:e1:1e:4a:45:91:d4:93:0c:bc:8a:8e:
43:fd:5f:66:fe:e2:bd:a7:68:78:2e:7d:bf:2c:c2:
de:f0:38:ee:18:9a:36:39:49:60:fe:40:ce:db:ed:
51:9f:13:c7:dd:21:e5:fd:fd:0d:41:71:47:e8:0e:
d5:8b:9c:0f:55:7a:82:6b:43:09:56:a3:d4:b3:0e:
ee:0c:48:8d:ee:03:40:e7:43:f4:51:c2:e4:cc:38:
a1:70:5b:73:8d:1b:33:99:34:1d:32:30:f5:98:3c:
f1:c9:59:06:d7:a1:f2:1b:22:78:d1:5b:01:60:ef:
e1:03:3c:a0:2f:d4:5e:bb:81:66:e4:93:07:ab:1b:
e5:c2:2f:67:30:50:b0:ac:20:34:28:9e:bd:bc:7a:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DB:4E:69:9C:A0:30:CD:D4:A9:83:51:8D:09:71:94:1C:F2:F5:DB
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/E9tOaZygMM3UqYNRjQlxlBzy9ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/21
62.60.164.0/22
62.60.185.0/24
62.60.200.0/21
62.60.209.0-62.60.215.255
213.176.28.0/22
213.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3e:b3:f4:05:a2:d6:80:f6:f3:7c:61:f6:dd:50:62:4a:f9:
56:a2:ca:5e:47:e9:0b:75:32:5b:8d:99:10:6d:2b:bb:33:57:
09:72:b4:57:2e:40:06:30:6f:91:c1:ca:bd:d7:65:d2:50:8c:
92:7f:53:eb:cb:56:b1:55:7a:44:c3:a4:ee:60:85:5e:0a:f6:
04:89:c7:ce:bb:92:42:01:4d:be:78:29:b7:8c:f6:a0:ae:df:
b6:52:24:69:a5:52:2b:ce:d5:27:7f:86:6a:44:3f:b2:fb:f7:
bf:5c:5c:39:75:ad:a4:98:9c:53:59:43:e5:34:f7:6a:68:d5:
21:df:b4:3b:e0:9e:57:d0:f9:b0:12:f3:dd:f6:65:22:f3:53:
0a:e9:ee:b8:96:ef:b2:3e:4e:82:3b:be:ca:c5:42:dd:40:50:
e7:00:e6:1c:96:87:8c:5a:e3:32:30:42:dd:e9:39:1e:f4:50:
0b:9f:6d:a2:a5:4d:a8:f0:fa:a2:5b:37:97:8e:8d:a4:4c:81:
51:9f:0e:73:99:c8:52:9c:50:27:02:e4:4d:2f:45:a1:8f:9d:
87:a1:38:c7:e4:74:9f:f4:ad:dd:5a:fc:7d:59:2e:13:10:cf:
86:00:5c:19:d7:dd:58:f5:7b:f3:0c:c3:29:11:e4:c4:4f:86:
f5:79:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:44 2026 by rpki-client