Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Fok1sJSzqFAOs0PgWQR8nTPxRAg.roa
File: Fok1sJSzqFAOs0PgWQR8nTPxRAg.roa (raw, json)
Hash identifier: /2v7b+Z1LpSiystE58hXYj8P8zZCBHlC7D6hQtbgbE8=
Subject key identifier: 16:89:35:B0:94:B3:A8:50:0E:B3:43:E0:59:04:7C:9D:33:F1:44:08
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01A10096477D71CB804AD6FEAE22129E8149
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Fok1sJSzqFAOs0PgWQR8nTPxRAg.roa
Signing time: Sat 03 Oct 2026 07:06:50 +0000
ROA not before: Sat 03 Oct 2026 07:06:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215633
IP address blocks: 62.60.135.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.144.0/24 maxlen: 24
62.60.146.0/24 maxlen: 24
213.176.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:96:47:7d:71:cb:80:4a:d6:fe:ae:22:12:9e:81:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 3 07:06:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=168935b094b3a8500eb343e059047c9d33f14408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:c8:90:d8:01:b1:77:9c:e9:9d:6e:a5:e1:
f9:ca:e8:06:38:5b:55:47:06:8a:a7:48:88:b4:db:
9e:7e:67:d2:ab:93:50:0d:e5:de:64:d9:c3:06:b2:
8e:4f:93:2f:c5:11:bf:8b:51:90:f5:90:bf:30:da:
08:38:ce:5b:c7:5a:a9:8a:47:81:bc:7d:24:13:11:
70:da:66:b9:23:fb:cf:a3:b5:42:1d:e3:e4:6c:a8:
e4:39:00:c8:2b:74:8e:1f:70:93:b9:f5:f5:8d:5c:
ba:56:3e:12:d3:aa:77:e8:67:20:41:3f:90:c8:74:
c4:5e:55:a4:ca:78:a8:f4:53:ec:c8:93:0f:61:67:
7d:df:59:5d:d6:59:e0:94:56:97:9a:22:32:e1:30:
3b:6a:bb:fe:ac:21:68:b5:da:de:06:c6:b9:aa:f8:
0e:55:dd:7e:e5:13:f6:eb:95:39:16:d5:8c:5f:be:
81:79:a8:5f:86:c7:d8:3a:34:e2:49:e1:bb:a3:c2:
fa:06:a2:58:87:cd:8e:4b:8c:d2:a6:37:02:9b:22:
37:4d:5b:53:45:01:73:74:8e:3a:f7:05:9f:fa:1f:
77:7b:b4:04:c3:19:9d:a5:4e:94:4d:6e:ec:3e:38:
1a:2e:54:f5:dd:12:19:df:fd:8c:38:db:d9:d8:b1:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:89:35:B0:94:B3:A8:50:0E:B3:43:E0:59:04:7C:9D:33:F1:44:08
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Fok1sJSzqFAOs0PgWQR8nTPxRAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.135.0/24
62.60.141.0/24
62.60.144.0/24
62.60.146.0/24
213.176.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b9:3b:99:43:ce:cd:5a:fb:be:4d:f3:ba:52:8e:11:d9:b8:
be:a3:e0:9e:b3:96:06:3c:c7:58:51:a1:46:ec:e8:44:75:6f:
32:ca:29:61:be:c4:bc:0a:74:a4:57:39:1e:34:da:4e:7c:b0:
9a:ac:86:07:2b:ad:fe:68:bd:8d:c0:24:58:0f:56:c9:b1:aa:
10:9a:c7:71:6c:ec:d8:75:a3:a5:76:84:1f:09:a3:c4:42:69:
49:89:05:15:97:6e:7a:ca:a1:dc:48:19:29:dd:cd:29:ba:da:
68:fd:73:e4:98:fb:e9:d7:bd:84:f2:8b:2d:38:32:1e:ef:19:
3e:00:de:d2:1e:b6:b4:02:3c:5a:db:49:d8:56:8b:d0:1e:2e:
59:cf:2e:fb:90:7a:e7:86:c6:e0:ce:b2:88:18:49:fa:de:d0:
34:b4:31:d2:fe:e4:41:42:93:a0:0a:34:a2:c5:de:8f:5f:c4:
0a:bd:a5:4d:78:82:15:7b:c7:f6:2b:ad:36:02:44:d5:5c:97:
3b:d6:2a:e3:a7:2e:c3:0b:5c:aa:ef:80:1b:89:25:b4:95:dd:
ca:83:1c:80:d5:b7:a3:69:bc:fd:fb:72:e5:29:8d:ac:e0:82:
b7:fd:b6:e5:47:8d:77:ba:1c:a0:da:ef:7c:2d:92:6b:3c:8e:
26:c2:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:39 2026 by rpki-client