Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EtJeXlWKVnkPt1tM0_2pIb7mcBE.roa
File: EtJeXlWKVnkPt1tM0_2pIb7mcBE.roa (raw, json)
Hash identifier: BAg7vBL4MgbnAymrXKthZTN2qBcPT9Cl4ORfnBfjhFw=
Subject key identifier: 12:D2:5E:5E:55:8A:56:79:0F:B7:5B:4C:D3:FD:A9:21:BE:E6:70:11
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01A171D41188DBB5D14CCC8F6891DCAD7B08
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EtJeXlWKVnkPt1tM0_2pIb7mcBE.roa
Signing time: Sun 25 Oct 2026 06:51:25 +0000
ROA not before: Sun 25 Oct 2026 06:51:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59441
IP address blocks: 62.60.128.0/21 maxlen: 24
62.60.164.0/22 maxlen: 24
62.60.185.0/24 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.209.0/24 maxlen: 24
62.60.210.0/23 maxlen: 24
62.60.210.0/24 maxlen: 24
62.60.211.0/24 maxlen: 24
62.60.212.0/22 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.28.0/22 maxlen: 24
213.176.121.0/24 maxlen: 24
213.176.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:d4:11:88:db:b5:d1:4c:cc:8f:68:91:dc:ad:7b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 25 06:51:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12d25e5e558a56790fb75b4cd3fda921bee67011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:9f:e7:05:8c:7e:6e:d2:62:81:98:d2:e1:
8e:3a:5b:4a:a5:78:3d:38:e4:8f:ad:97:e7:57:67:
e7:cd:00:af:70:b5:1e:ca:1d:7d:5c:d3:f9:f5:72:
0c:f2:ee:80:54:2b:4b:05:bf:46:8a:14:a2:38:37:
68:09:00:db:91:27:d9:67:c4:5a:35:13:97:84:16:
ed:52:c0:bd:4b:4c:6f:2f:29:5b:d3:aa:9b:88:07:
13:4b:1a:7c:fc:e3:43:e6:9a:03:ee:a9:dc:bb:24:
1e:0f:22:67:1c:d5:e0:86:e8:e8:15:ca:cb:e3:d6:
4f:d0:e2:f1:e3:9e:c9:38:09:55:d9:ad:e5:ae:c2:
ec:62:59:30:27:8d:25:1e:ca:1d:52:aa:dd:4e:18:
42:0e:8e:53:37:39:bc:04:69:c6:87:e5:a9:1e:77:
84:10:ff:c8:06:bf:00:11:4b:9a:2c:94:65:09:a3:
56:78:8c:60:4d:27:75:08:80:c1:e2:cb:fd:a6:da:
1b:0d:3e:91:85:6b:49:e0:b1:4f:de:b2:77:a8:db:
ca:c7:2c:31:1b:8b:a6:b0:a8:ce:a6:e2:1b:c0:47:
99:c4:78:ca:50:d5:dc:18:5d:1c:07:0b:0d:82:6f:
22:e4:bb:0f:d6:03:f3:5d:56:4d:5b:d3:4f:70:c8:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:5E:5E:55:8A:56:79:0F:B7:5B:4C:D3:FD:A9:21:BE:E6:70:11
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EtJeXlWKVnkPt1tM0_2pIb7mcBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/21
62.60.164.0/22
62.60.185.0/24
62.60.200.0/21
62.60.209.0-62.60.215.255
213.176.20.0/22
213.176.28.0/22
213.176.121.0/24
213.176.126.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:df:0b:5d:16:b7:61:f2:8c:f2:15:1b:62:9a:13:9a:a0:00:
0e:f7:41:bb:f7:9c:e3:b2:fe:de:59:c5:3f:9c:5f:2f:41:ae:
66:54:96:45:6d:b0:ad:66:ad:6a:2b:24:1a:8f:b5:6d:dd:83:
eb:09:ab:75:4f:28:98:03:b3:03:34:22:85:25:80:7f:2f:88:
4f:7a:81:91:eb:f6:32:89:9b:78:22:a5:63:4f:b4:73:00:5a:
3e:5c:86:b0:35:43:a5:6d:bf:f9:d7:f3:e3:06:07:cd:68:c6:
61:4c:25:78:e5:d8:2c:e5:2b:b1:0d:ab:d1:42:cf:08:fd:7b:
26:bc:36:77:67:3f:47:80:21:80:5c:78:d9:a9:c8:a3:41:c6:
ce:32:ec:b3:0d:0c:1a:35:25:94:f6:5b:a3:b7:70:a0:f3:65:
8d:fa:1f:8e:ee:1e:b5:54:90:37:cf:fd:ee:12:44:38:5b:22:
f4:68:57:eb:14:27:c8:4b:ff:ff:ae:90:c3:8c:6d:c7:30:35:
35:6a:24:c2:10:41:eb:a9:ea:8c:73:71:aa:20:b3:2e:2d:44:
ae:2d:73:08:06:5b:64:13:aa:c6:e1:d2:60:bc:af:73:4f:21:
ff:63:a0:3f:cc:e0:72:e0:32:d8:bc:6e:6f:b9:e3:52:78:e1:
e0:90:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:44 2026 by rpki-client