Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kW-r8QIEYmaxCVGniGM_-GcqcR8.roa
File: kW-r8QIEYmaxCVGniGM_-GcqcR8.roa (raw, json)
Hash identifier: 1yJS120qcY92Wdy/2Q7V4YtAL73+3bhSuulyPTJkyZ8=
Subject key identifier: 91:6F:AB:F1:02:04:62:66:B1:09:51:A7:88:63:3F:F8:67:2A:71:1F
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019F7EF63D75E6C8528824E01AD2DC74C4CF
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kW-r8QIEYmaxCVGniGM_-GcqcR8.roa
Signing time: Mon 20 Jul 2026 09:58:14 +0000
ROA not before: Mon 20 Jul 2026 09:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215930
IP address blocks: 62.60.130.0/24 maxlen: 24
62.60.208.0/24 maxlen: 24
213.176.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:f6:3d:75:e6:c8:52:88:24:e0:1a:d2:dc:74:c4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 20 09:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=916fabf102046266b10951a788633ff8672a711f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:95:d8:5b:8a:90:0e:54:17:9c:fd:b2:0a:
a0:f1:14:98:a4:cc:88:ef:38:1e:ee:8a:53:3c:b1:
e2:f9:0d:e9:07:58:46:92:87:6e:96:d6:0b:ef:7c:
1c:e2:82:f3:5e:bf:bd:53:00:8c:4a:75:16:3c:b6:
76:2e:df:1c:ab:31:de:fa:ff:4e:bb:4c:0c:94:81:
89:16:5c:cd:3e:bf:22:e7:41:cf:45:2a:eb:07:e9:
c8:0c:6c:50:56:05:11:13:ac:06:bd:cd:ae:08:85:
25:29:19:58:00:80:8a:d8:f1:c1:8e:ea:c1:41:9f:
1f:c6:85:e0:67:f5:e9:0c:83:c5:c5:e8:8a:12:5c:
e2:ea:1b:69:64:44:aa:22:ef:29:a5:82:5c:1f:11:
57:b1:5b:8b:fa:3a:bc:9c:4a:75:fc:67:8f:20:11:
98:dd:77:80:e8:87:05:cc:4a:f1:97:31:95:e1:b0:
2c:75:81:01:99:33:53:dc:49:90:63:91:d4:6a:51:
e5:0e:f2:fa:73:eb:9b:12:85:92:45:41:c2:84:47:
e1:f3:df:0c:25:84:ae:e1:8b:96:00:87:d1:a3:3d:
97:89:0c:9b:e2:7b:22:aa:e8:c6:4a:f0:21:36:e4:
08:d8:a6:d4:fc:16:8a:10:7e:b1:bb:85:d1:4c:9f:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:AB:F1:02:04:62:66:B1:09:51:A7:88:63:3F:F8:67:2A:71:1F
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kW-r8QIEYmaxCVGniGM_-GcqcR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.130.0/24
62.60.208.0/24
213.176.24.0/22
Signature Algorithm: sha256WithRSAEncryption
67:92:e5:0b:23:25:5e:0f:f4:04:1d:ed:2f:5c:b7:61:c8:8a:
29:1e:e4:e4:7d:3a:5f:1c:2b:ce:a9:e1:69:ad:43:80:82:15:
f8:6f:d7:cb:4c:14:de:15:00:b9:58:07:67:93:33:23:97:a9:
4e:bf:5d:c0:c5:00:d6:8d:4a:27:47:b4:ba:18:c8:d0:fc:8b:
21:9e:24:88:1b:bb:b1:ba:26:af:53:7c:60:da:40:37:dd:87:
9e:64:83:2c:86:ce:25:6b:ff:7b:39:b0:0a:cc:15:e9:00:89:
89:c9:23:1c:38:e7:aa:c3:09:a2:44:8d:a4:8c:dd:60:18:1e:
ff:2d:e0:ac:b6:7a:04:f9:92:4c:6c:10:27:97:b9:11:aa:39:
52:c8:f4:bb:ad:b3:5a:72:e6:78:d1:76:19:62:58:92:41:0f:
2e:21:db:bb:c6:ec:53:84:9b:ed:6a:08:28:a3:f4:c2:42:01:
a4:21:c1:53:01:eb:54:d0:28:49:d8:b1:c1:12:8c:4a:c7:1a:
36:35:c3:65:f1:49:be:b0:15:d0:2e:1a:41:e4:f8:c4:02:3e:
87:05:8d:7a:bf:de:f2:09:ac:45:42:0e:8b:1a:58:c3:18:57:
50:6c:cc:65:0b:e6:94:65:96:74:54:ac:f6:74:31:cd:dd:a8:
ee:b6:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:38 2026 by rpki-client