Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/L09HxGwZEKRuE9ChuiXyYA0ZYp8.roa
File: L09HxGwZEKRuE9ChuiXyYA0ZYp8.roa (raw, json)
Hash identifier: 0pksYcToJE09Qmt8pnp8sb7H2luRHMi+ixYM7CJT8Jo=
Subject key identifier: 2F:4F:47:C4:6C:19:10:A4:6E:13:D0:A1:BA:25:F2:60:0D:19:62:9F
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019E8BCA06FF4593D2D70C188AD2ED81B945
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/L09HxGwZEKRuE9ChuiXyYA0ZYp8.roa
Signing time: Wed 03 Jun 2026 04:42:13 +0000
ROA not before: Wed 03 Jun 2026 04:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 62.60.163.0/24 maxlen: 24
62.60.184.0/23 maxlen: 24
62.60.193.0/24 maxlen: 24
62.60.195.0/24 maxlen: 24
62.60.221.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
62.60.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8b:ca:06:ff:45:93:d2:d7:0c:18:8a:d2:ed:81:b9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 3 04:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f4f47c46c1910a46e13d0a1ba25f2600d19629f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:b2:73:00:80:c9:7b:21:6c:ef:cd:5e:3b:
22:cb:c6:7a:62:aa:45:de:2e:00:16:a4:9e:89:51:
d9:d3:f3:b0:05:86:b9:53:32:b8:0a:f1:f7:9a:5b:
f0:81:cf:05:86:74:71:78:68:7f:de:27:9c:80:5d:
fb:0d:df:0e:ba:6b:d5:c7:52:d6:a5:5a:cf:6e:6a:
67:00:4f:71:ac:ee:b3:84:b9:9a:5b:68:9b:d6:75:
d6:b6:33:a1:bf:d2:29:57:f3:70:0b:44:64:09:12:
e6:4a:32:1c:49:92:a3:b5:06:7b:c8:3a:c7:6d:9d:
56:6f:23:48:dd:dd:6a:74:34:82:8a:30:d1:fb:e5:
a9:1f:c1:41:dd:7b:8f:27:3f:1e:66:20:c7:82:7e:
66:9f:ba:90:31:46:c4:d5:12:20:34:0d:dc:b6:35:
f8:df:ed:2c:cf:4f:30:23:29:de:74:b4:2f:ea:a8:
53:39:57:5c:2c:56:f3:02:9f:27:d1:ee:5d:6b:41:
f0:82:2c:93:0a:2e:0f:3b:1e:7e:bc:4c:c7:65:47:
a5:83:d0:49:13:16:c8:b2:50:fb:5d:e7:ce:c2:1c:
98:5c:5f:29:04:31:48:a4:4b:4b:b3:c9:40:95:d5:
d2:be:3a:d6:10:72:e7:a6:67:db:3e:cd:2f:ec:b6:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:47:C4:6C:19:10:A4:6E:13:D0:A1:BA:25:F2:60:0D:19:62:9F
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/L09HxGwZEKRuE9ChuiXyYA0ZYp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.163.0/24
62.60.184.0/23
62.60.193.0/24
62.60.195.0/24
62.60.221.0-62.60.223.255
Signature Algorithm: sha256WithRSAEncryption
28:76:75:00:bb:09:92:47:cd:97:db:b5:39:1f:0c:65:ea:c3:
02:c7:49:34:51:d0:2d:cb:eb:d7:aa:fb:5f:a2:2a:0b:78:0c:
bf:38:1c:b5:2c:ec:4a:ee:61:f7:aa:23:71:1b:38:8b:c0:92:
aa:a4:d6:71:5c:15:1f:05:fc:05:0e:3e:90:9d:61:50:33:27:
37:88:84:d9:c1:98:95:57:a7:61:bf:09:02:40:5c:0a:47:48:
36:47:f5:c2:6b:98:8f:17:94:88:85:1e:ce:9b:2b:3f:d8:f7:
ed:98:15:68:c4:5b:62:e1:fd:ae:36:31:aa:48:85:20:55:59:
3d:75:da:86:d6:cc:05:8d:89:7f:55:c9:65:01:f5:7a:47:ff:
23:38:2a:80:d9:d9:6e:a9:f9:67:13:09:e1:e1:b7:fb:ac:0a:
eb:e3:8d:5b:72:39:ad:78:d3:b9:a4:c0:33:6c:88:bb:1d:8f:
4c:24:15:f4:5b:c8:50:17:cc:7d:11:af:80:49:e9:25:ad:b6:
ee:73:fc:86:f7:d4:6c:c3:72:40:97:c7:46:ba:e5:1b:06:2f:
eb:85:25:28:41:79:f3:ba:47:2b:a2:4f:cc:21:a5:ee:4e:6a:
9c:d0:f0:d1:e1:c0:4a:e5:c7:93:b7:3e:23:37:3c:1a:2c:4a:
32:69:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:46 2026 by rpki-client