Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/P4YSKS8c6CQstzUK8NO_qKzuTQU.roa
File: P4YSKS8c6CQstzUK8NO_qKzuTQU.roa (raw, json)
Hash identifier: NX+f4HFf+ZhlPyEWL+di3zE7DxnY4ZI9ugs4SadT1rg=
Subject key identifier: 3F:86:12:29:2F:1C:E8:24:2C:B7:35:0A:F0:D3:BF:A8:AC:EE:4D:05
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019F69A285D53E89EE28711C5278D0F7B0D9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/P4YSKS8c6CQstzUK8NO_qKzuTQU.roa
Signing time: Thu 16 Jul 2026 06:34:46 +0000
ROA not before: Thu 16 Jul 2026 06:34:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/23 maxlen: 24
62.60.154.0/23 maxlen: 24
62.60.168.0/22 maxlen: 24
62.60.224.0/24 maxlen: 24
62.60.225.0/24 maxlen: 24
213.176.3.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:a2:85:d5:3e:89:ee:28:71:1c:52:78:d0:f7:b0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 16 06:34:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f8612292f1ce8242cb7350af0d3bfa8acee4d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:01:76:23:86:01:0b:e2:3b:f7:92:e5:73:
b7:67:0a:d9:d2:1f:c4:8c:9b:a2:93:3f:65:02:79:
d0:4c:e9:7f:4c:71:c5:39:3a:0f:84:5f:27:01:42:
fc:e1:cb:90:8d:94:c1:dc:68:7d:d8:f5:b0:43:dc:
da:11:50:cc:58:69:f7:cd:5d:62:5d:c3:d3:d9:1c:
4d:e7:5d:7f:56:9f:e2:d8:fb:d6:17:2c:38:63:3f:
87:23:23:eb:ea:13:be:e8:e9:b7:46:36:d6:01:be:
36:4c:34:12:63:14:df:fc:f0:61:89:b0:10:73:80:
e3:a2:61:41:ed:0b:6c:e7:ef:54:6a:74:1b:4a:70:
4b:fb:72:de:3e:8c:b9:f7:b9:b1:1d:2a:98:32:c9:
15:83:05:20:a9:09:20:77:5c:0a:39:9b:1e:4a:2f:
7a:ef:5e:d6:8a:10:fd:fb:5a:a2:21:58:29:4a:02:
bc:03:4a:0e:e8:16:b1:5e:5d:eb:d9:1c:a6:5b:b7:
98:35:80:2f:5f:54:f9:70:10:7f:50:84:ff:81:eb:
40:ca:2a:00:8d:08:cf:e6:26:c2:cd:af:c5:b0:f8:
dc:80:de:48:28:22:bd:66:c3:05:0d:1a:67:17:17:
b4:0f:b9:0a:16:12:3e:b1:d0:41:dd:f8:f2:e7:f4:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:12:29:2F:1C:E8:24:2C:B7:35:0A:F0:D3:BF:A8:AC:EE:4D:05
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/P4YSKS8c6CQstzUK8NO_qKzuTQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.136.0/23
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.152.0/22
62.60.168.0/22
62.60.224.0/23
213.176.3.0-213.176.5.255
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
78:a2:17:ad:62:95:42:e2:3f:41:69:df:c1:a2:66:dc:dd:30:
e7:02:50:79:87:f0:54:eb:c9:79:72:62:2a:68:9a:99:cc:69:
83:a2:3a:a3:74:68:8f:e6:47:b7:c8:4f:17:e6:20:6c:67:90:
64:cf:24:3a:e6:06:45:8c:aa:f6:ac:86:96:f7:22:30:86:53:
06:64:01:fb:9d:2f:04:eb:e0:30:d4:5c:d2:6a:a6:95:a8:2f:
71:aa:b1:d6:75:65:31:9c:e7:91:26:c5:73:6c:4d:4e:6c:17:
d2:92:02:82:59:57:39:cd:35:da:7f:8f:55:6e:f9:bf:ab:31:
b0:77:8d:c6:7a:0e:c1:aa:4b:22:71:77:ce:8a:47:a3:67:bf:
d1:d7:28:9d:ae:52:b7:2c:f9:74:15:cc:4e:a7:cd:e9:30:06:
ea:a4:dc:3b:dc:f7:4f:f8:2e:03:ea:69:8f:4e:f8:2f:f1:bc:
5d:9e:90:4a:35:f0:d9:ed:d1:b6:dd:d3:f9:75:e9:ed:e2:51:
7a:c4:c8:8a:a1:f5:e3:b4:2e:61:eb:3b:2c:7a:67:7d:84:70:
35:7a:27:7f:25:cc:e4:5d:44:a3:64:d1:78:aa:7d:d7:10:c4:
a2:28:bd:9e:41:5d:65:18:fa:dc:96:53:9b:72:ec:c2:70:a2:
ee:c7:59:36
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAZ9pooXVPonuKHEcUnjQ97DZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjYwNzE2MDYzNDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjg2MTIyOTJmMWNlODI0MmNiNzM1MGFmMGQzYmZhOGFjZWU0ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5kBdiOGAQviO/eS5XO3ZwrZ0h/E
jJuikz9lAnnQTOl/THHFOToPhF8nAUL84cuQjZTB3Gh92PWwQ9zaEVDMWGn3zV1i
XcPT2RxN511/Vp/i2PvWFyw4Yz+HIyPr6hO+6Om3RjbWAb42TDQSYxTf/PBhibAQ
c4DjomFB7Qts5+9UanQbSnBL+3LePoy597mxHSqYMskVgwUgqQkgd1wKOZseSi96
717WihD9+1qiIVgpSgK8A0oO6BaxXl3r2RymW7eYNYAvX1T5cBB/UIT/getAyioA
jQjP5ibCza/FsPjcgN5IKCK9ZsMFDRpnFxe0D7kKFhI+sdBB3fjy5/SBHwIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFD+GEikvHOgkLLc1CvDTv6is7k0FMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvUDRZU0tTOGM2Q1FzdHpVSzhOT19xS3p1VFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQBPjyIMAwD
BAA+PIsDBAA+PIwDBAA+PI4DBAA+PJEDBAI+PJgDBAI+PKgDBAE+POAwDAMEANWw
AwMEAdWwBAMEANWwYDAMAwQB1bB6AwQB1bB8MA0EAgACMAcDBQAgAQeQMA0GCSqG
SIb3DQEBCwUAA4IBAQB4ohetYpVC4j9Bad/Bombc3TDnAlB5h/BU68l5cmIqaJqZ
zGmDojqjdGiP5ke3yE8X5iBsZ5BkzyQ65gZFjKr2rIaW9yIwhlMGZAH7nS8E6+Aw
1FzSaqaVqC9xqrHWdWUxnOeRJsVzbE1ObBfSkgKCWVc5zTXaf49Vbvm/qzGwd43G
eg7BqksicXfOikejZ7/R1yidrlK3LPl0FcxOp83pMAbqpNw73PdP+C4D6mmPTvgv
8bxdnpBKNfDZ7dG23dP5dent4lF6xMiKofXjtC5h6zssemd9hHA1eid/JczkXUSj
ZNF4qn3XEMSiKL2eQV1lGPrcllObcuzCcKLux1k2
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:36 2026 by rpki-client