Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OUXpbUvVF0LfM_h99NKRVrTpQbA.roa
File: OUXpbUvVF0LfM_h99NKRVrTpQbA.roa (raw, json)
Hash identifier: 4+n7cJZdT1l/mo+WAz2dgVCBA4UOyFCPZjMK/L+QZts=
Subject key identifier: 39:45:E9:6D:4B:D5:17:42:DF:33:F8:7D:F4:D2:91:56:B4:E9:41:B0
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019F82FD201188B6D37F8A4DA030FC282D7B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OUXpbUvVF0LfM_h99NKRVrTpQbA.roa
Signing time: Tue 21 Jul 2026 04:44:14 +0000
ROA not before: Tue 21 Jul 2026 04:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59441
IP address blocks: 62.60.128.0/21 maxlen: 24
62.60.164.0/22 maxlen: 24
62.60.185.0/24 maxlen: 24
62.60.200.0/22 maxlen: 24
62.60.204.0/22 maxlen: 24
62.60.209.0/24 maxlen: 24
62.60.210.0/23 maxlen: 24
62.60.210.0/24 maxlen: 24
62.60.211.0/24 maxlen: 24
62.60.212.0/22 maxlen: 24
213.176.28.0/22 maxlen: 24
213.176.121.0/24 maxlen: 24
213.176.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:fd:20:11:88:b6:d3:7f:8a:4d:a0:30:fc:28:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 21 04:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3945e96d4bd51742df33f87df4d29156b4e941b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:27:f0:de:ca:9d:1b:50:53:02:3f:f8:ad:
ba:d3:b4:53:8e:57:a3:b4:97:80:ad:2d:ae:74:fc:
e2:9a:4c:e6:8b:57:8e:5a:a8:6b:d5:0c:1f:c5:00:
89:11:27:ce:3f:7d:16:b7:40:97:51:2e:ed:1e:5b:
8e:1e:79:1d:31:68:ea:9d:48:46:ec:e1:fd:29:92:
67:ca:56:52:d9:25:47:8d:17:49:19:08:7e:38:c6:
5e:73:a3:99:26:a2:8b:d7:ac:a5:71:1d:fa:f5:8d:
4a:15:12:30:6a:93:e4:3b:3b:53:ba:55:1f:16:4f:
a6:ee:0d:c2:b4:fd:da:bf:5b:7f:3f:61:4b:85:86:
56:f5:bb:6c:61:5d:96:25:cb:7d:88:1e:ff:3b:53:
8e:5f:41:ba:34:77:e3:a3:1d:29:aa:d5:0a:74:7b:
ae:a5:81:3b:30:4c:91:37:62:1a:c2:d2:81:60:be:
a0:33:db:ef:7d:8f:d8:7f:ea:82:56:f0:5e:d3:f3:
fd:c0:ca:7b:9c:f5:50:74:42:23:2e:57:ad:35:58:
4b:44:12:d5:fd:52:67:3f:f1:8c:e5:ea:ee:2e:e7:
b4:92:53:f2:4d:91:bb:70:ee:b9:19:65:da:fc:e0:
7b:cf:4d:6d:85:ab:49:77:42:04:ed:89:cc:bd:cb:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:45:E9:6D:4B:D5:17:42:DF:33:F8:7D:F4:D2:91:56:B4:E9:41:B0
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OUXpbUvVF0LfM_h99NKRVrTpQbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/21
62.60.164.0/22
62.60.185.0/24
62.60.200.0/21
62.60.209.0-62.60.215.255
213.176.28.0/22
213.176.121.0/24
213.176.126.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0c:56:d5:f6:51:1e:fe:16:95:90:cf:07:ae:56:a5:35:08:
e4:14:ae:b1:53:a6:b3:8c:6f:9b:39:1b:98:8a:3f:98:8a:31:
02:c9:aa:6f:f1:37:f4:c8:7f:55:a8:67:4f:81:39:ad:b2:89:
f0:6b:24:a4:4f:24:6c:39:65:91:15:c9:7b:ce:dd:0b:d8:d4:
b3:ba:00:1a:ea:ae:e7:da:16:0d:1b:58:ed:73:cc:98:d4:ab:
65:e4:4e:60:5d:9c:61:95:78:69:21:20:65:8e:ee:9d:7c:55:
9b:42:d7:27:5f:5f:8d:e5:7f:e3:c8:05:4f:37:9c:de:83:cb:
d6:28:68:27:ea:ac:12:45:23:d3:27:48:d8:02:12:c2:9c:01:
07:36:51:ac:25:24:b8:16:b4:c2:64:16:f4:14:ab:ce:6c:10:
fa:ad:ef:aa:14:ed:cd:5e:30:3e:bb:2e:44:c8:55:43:da:a2:
e5:5c:31:3d:50:3a:73:d3:cd:e5:3a:68:65:f1:38:34:ba:a7:
59:d8:d8:83:c8:c9:fe:4a:84:5f:21:02:64:a2:05:0b:db:ba:
bf:75:66:76:79:dc:f8:8f:76:a6:84:a8:01:39:d1:fb:0a:b8:
42:af:15:ad:11:94:37:a9:b3:28:39:c1:bc:41:0d:b0:dc:09:
a9:e5:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:36:52 2026 by rpki-client