Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dnNJ8Xg2PhHkyr0BWrokQD0nir0.roa
File: dnNJ8Xg2PhHkyr0BWrokQD0nir0.roa (raw, json)
Hash identifier: 3UsQ6p+AwwG0Mc6mxa53PsthOFPtpwqPhHVJgBzbHwM=
Subject key identifier: 76:73:49:F1:78:36:3E:11:E4:CA:BD:01:5A:BA:24:40:3D:27:8A:BD
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01A14E3EB4021245318B6D365131B8EF806E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dnNJ8Xg2PhHkyr0BWrokQD0nir0.roa
Signing time: Sun 18 Oct 2026 09:01:34 +0000
ROA not before: Sun 18 Oct 2026 09:01:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209425
IP address blocks: 62.60.134.0/24 maxlen: 24
213.176.1.0/24 maxlen: 24
213.176.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:3e:b4:02:12:45:31:8b:6d:36:51:31:b8:ef:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 18 09:01:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=767349f178363e11e4cabd015aba24403d278abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:18:63:6a:a1:ec:3f:99:12:6b:9a:17:d6:
b3:89:27:5d:fa:c9:6f:36:c5:95:af:51:ea:0a:23:
b1:7d:83:1b:94:2b:71:52:b4:37:f4:b3:c9:02:f2:
1b:e1:7c:19:2a:30:f0:36:44:10:42:9e:ea:f2:99:
dc:30:7a:d9:ef:3f:df:c8:fc:4d:29:d2:e4:45:ae:
7c:14:ac:d7:9c:1c:be:a6:c5:10:52:e8:f8:25:00:
7b:82:af:fc:6b:03:45:70:66:99:c9:1d:9b:ad:22:
9d:e3:4d:b6:c5:d0:ba:0b:86:2c:cd:7f:b7:9a:25:
90:c8:38:eb:e7:96:44:89:3c:50:83:d6:60:f6:a9:
60:30:9b:1c:d4:7d:0c:ab:3a:6a:01:f4:3c:00:ba:
e7:09:a4:7e:c3:49:b1:34:02:14:8c:e8:b9:a4:f9:
24:6f:56:5b:bb:f2:ba:19:4d:12:f0:de:46:52:42:
63:73:30:d8:0d:e6:a0:e2:16:6b:6f:ff:49:26:3e:
53:4f:20:18:2a:0c:c4:c6:a1:29:b3:59:62:81:1a:
92:4b:18:51:d6:1c:09:7e:07:e8:4e:a8:14:d5:ef:
55:27:77:7d:5c:d7:4c:8d:79:3e:7d:b5:a3:53:84:
51:10:5d:47:4b:c6:18:e4:41:ce:e3:1f:ef:f9:c1:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:49:F1:78:36:3E:11:E4:CA:BD:01:5A:BA:24:40:3D:27:8A:BD
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dnNJ8Xg2PhHkyr0BWrokQD0nir0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.134.0/24
213.176.1.0/24
213.176.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:7c:7b:98:be:1e:f8:81:14:24:cf:00:8d:ac:fb:7e:e7:3a:
a3:a0:21:6e:7b:13:44:f5:b2:15:30:b3:2e:b3:37:f2:e2:41:
84:2d:a1:06:75:cb:42:65:98:68:23:db:26:91:2a:ed:25:f6:
4c:a0:ef:73:3e:0c:e9:2f:52:5a:29:67:22:af:d1:6d:eb:5f:
36:4f:66:18:c8:55:3e:46:98:20:0a:d6:11:4e:f0:c7:a8:0d:
70:28:42:fc:5d:62:09:d9:0b:9b:36:5a:78:b4:8a:77:f8:31:
2a:d1:2e:ae:a1:f3:92:81:53:50:b8:bb:81:50:6f:f3:94:a8:
42:57:01:dd:4a:51:7d:97:09:3c:a0:ae:c1:3f:1b:89:fc:f0:
8a:b4:04:2c:99:ae:a0:bb:99:73:93:ab:d4:d8:a8:2f:d4:43:
c4:b4:ee:ee:57:f5:58:f7:dc:63:18:96:8d:36:e5:52:e1:a2:
7f:72:97:d1:71:0f:be:1b:96:25:d4:f1:38:43:9c:09:f0:5e:
d1:e1:a7:dd:a5:68:3c:1b:53:5a:85:d5:41:e3:db:50:86:a1:
ab:ed:59:6f:31:e5:b3:96:a0:5c:0e:16:1a:e0:44:25:14:40:
45:61:30:fa:54:91:7e:b6:f6:bb:54:f8:8d:4b:5e:45:bc:bf:
7b:e3:52:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:42 2026 by rpki-client