Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/i_Xm1397X-jAOLpGs6qho2vW37E.roa
File: i_Xm1397X-jAOLpGs6qho2vW37E.roa (raw, json)
Hash identifier: q7qihAUwSOVusXS3esPN5K8fN8urlFyMTMcP99WhlZg=
Subject key identifier: 8B:F5:E6:D7:7F:7B:5F:E8:C0:38:BA:46:B3:AA:A1:A3:6B:D6:DF:B1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01A14E4088E1833C472F7FDF65F05E1B6AD1
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/i_Xm1397X-jAOLpGs6qho2vW37E.roa
Signing time: Sun 18 Oct 2026 09:03:34 +0000
ROA not before: Sun 18 Oct 2026 09:03:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215930
IP address blocks: 62.60.130.0/24 maxlen: 24
62.60.134.0/24 maxlen: 24
62.60.208.0/24 maxlen: 24
213.176.1.0/24 maxlen: 24
213.176.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:40:88:e1:83:3c:47:2f:7f:df:65:f0:5e:1b:6a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 18 09:03:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bf5e6d77f7b5fe8c038ba46b3aaa1a36bd6dfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:75:85:4b:c3:dd:c2:b8:cb:f1:f1:6a:a7:
87:6a:64:78:31:f8:35:48:50:fa:14:fa:6a:c5:54:
1c:41:fe:47:db:00:9d:0a:ab:b7:44:af:40:32:4e:
1f:fb:f5:18:0d:5f:39:0b:a2:4b:83:6d:92:ba:a9:
bf:e6:ba:45:f8:06:ad:fa:a5:fc:1b:a0:9b:ba:8a:
8a:a6:95:3b:6d:ec:91:cc:09:b3:56:39:d2:48:46:
80:a2:57:25:4d:18:2d:91:31:e7:65:43:dd:d9:d7:
8a:ee:03:99:fd:d2:5e:79:40:0b:d4:05:4a:3f:a9:
d8:5d:89:9d:26:62:fe:8e:62:2a:f6:38:45:99:f7:
8f:56:6b:a1:d6:74:cf:ad:a3:05:4c:5d:ee:34:60:
b4:68:fe:40:8d:2e:62:95:06:20:24:36:f7:15:c4:
10:5e:5d:e5:60:a9:fe:a2:b7:d5:48:1d:09:27:c1:
b8:1d:a9:83:9f:12:0c:f4:31:f2:77:0f:e6:c1:a5:
04:bf:3d:8d:28:68:7e:2e:54:cc:18:00:39:f7:7c:
cb:a7:d9:2e:15:1e:16:4f:c1:10:ac:af:70:72:6e:
19:5c:97:ce:b9:1a:f5:df:74:a8:a5:60:6e:0a:f8:
cc:2d:7f:3f:ee:9b:8b:d6:a0:4e:7f:15:50:02:1e:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F5:E6:D7:7F:7B:5F:E8:C0:38:BA:46:B3:AA:A1:A3:6B:D6:DF:B1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/i_Xm1397X-jAOLpGs6qho2vW37E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.130.0/24
62.60.134.0/24
62.60.208.0/24
213.176.1.0/24
213.176.24.0/22
Signature Algorithm: sha256WithRSAEncryption
41:fd:b4:8c:95:d5:a8:57:d2:05:39:42:58:7b:74:14:06:f3:
4c:ae:83:73:49:ac:0e:c5:03:ff:0e:58:d5:4b:e8:fe:91:c2:
41:8e:50:d0:a7:dc:17:dd:9c:e5:d5:22:0a:9c:a9:aa:bc:bf:
e0:7d:c7:d6:f4:87:bb:29:06:73:b8:b2:25:51:c8:a3:e0:12:
d1:97:71:de:cd:4f:c0:0d:75:ba:34:00:43:66:02:fb:e2:d2:
f2:fb:32:14:1c:a9:59:7b:bc:dc:ef:63:2a:c2:92:0a:d9:35:
72:54:7b:2c:d0:c7:f5:06:76:bc:20:9d:06:51:fa:b0:d4:f5:
42:ea:ab:59:93:05:03:49:f6:bd:69:a7:2c:00:de:f5:64:ed:
63:8f:d8:b6:d1:36:10:d1:07:d0:34:66:b0:a3:47:ee:9e:83:
e4:48:8d:37:9c:0d:f0:0d:eb:bc:35:ec:63:21:2c:cc:6f:33:
5d:50:30:d4:b0:8f:bd:2d:40:1d:83:82:ed:be:ca:e8:4f:d6:
0f:28:2a:f8:28:92:d4:3a:c0:0f:a3:3e:a7:85:05:83:a0:83:
f9:b7:79:57:cc:ba:b3:dd:b9:6e:54:36:20:b7:9e:35:2b:8b:
42:d5:de:57:90:39:15:4e:a9:76:cc:89:43:65:eb:ce:73:19:
61:77:fc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:38:48 2026 by rpki-client