Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0v8bvHB9GpEeRCbRL0v3EXngvic.roa
File: 0v8bvHB9GpEeRCbRL0v3EXngvic.roa (raw, json)
Hash identifier: 54JgtsinMuOu4jxTCPYRGJL5pPo6v1kxEznDXoh3rhg=
Subject key identifier: D2:FF:1B:BC:70:7D:1A:91:1E:44:26:D1:2F:4B:F7:11:79:E0:BE:27
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FC87FF65388144B47A86DC537CE06DC20
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0v8bvHB9GpEeRCbRL0v3EXngvic.roa
Signing time: Mon 03 Aug 2026 16:40:57 +0000
ROA not before: Mon 03 Aug 2026 16:40:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 217.60.120.0/24 maxlen: 24
217.60.121.0/24 maxlen: 24
217.60.162.0/24 maxlen: 24
217.60.163.0/24 maxlen: 24
217.60.164.0/24 maxlen: 24
217.60.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:7f:f6:53:88:14:4b:47:a8:6d:c5:37:ce:06:dc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 3 16:40:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2ff1bbc707d1a911e4426d12f4bf71179e0be27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:40:c4:09:94:01:74:63:7d:f6:9b:62:e8:
56:04:d8:53:b6:19:e7:e5:5d:f7:a7:cc:ba:11:a2:
7e:d0:f6:95:8c:81:54:bb:8e:78:90:89:90:01:4d:
58:09:16:c9:8b:21:ec:b1:bd:7f:51:c4:3a:81:e5:
b2:97:9d:7a:c9:fc:6d:fb:95:ef:41:8b:fb:d0:7d:
ac:ef:46:16:5a:99:2c:a7:36:f0:da:2a:4a:51:c7:
69:7a:de:90:00:6f:34:7d:00:ba:a3:4b:bd:e5:64:
06:f6:2a:8a:19:9e:08:17:4d:d2:a0:3c:3a:19:b5:
5e:1d:f1:97:bd:f4:19:e6:5f:2b:fa:4c:6c:5b:0b:
7d:e0:c2:bb:e4:a3:4b:36:e5:84:fb:d4:fa:a1:05:
08:09:78:1d:68:5a:a2:88:21:65:d0:51:81:8f:ee:
99:40:42:07:70:3f:b0:32:a3:31:64:27:92:06:66:
b5:fb:d3:5d:41:5c:68:e8:b4:92:27:2c:91:1f:f9:
d8:bc:21:68:4b:71:75:65:ea:ab:c2:44:8d:26:83:
cf:14:88:0e:07:b6:52:31:83:89:e3:01:fe:98:bf:
ce:d1:1f:83:97:bb:6f:0a:ff:7f:4e:47:22:57:00:
66:93:1d:59:d0:9f:8c:6e:5b:67:24:38:83:09:de:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FF:1B:BC:70:7D:1A:91:1E:44:26:D1:2F:4B:F7:11:79:E0:BE:27
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0v8bvHB9GpEeRCbRL0v3EXngvic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.120.0/23
217.60.162.0-217.60.165.255
Signature Algorithm: sha256WithRSAEncryption
27:03:ac:43:b9:f0:d4:b9:81:28:29:a8:28:e7:ea:f7:d8:1a:
bc:01:68:f5:0a:9e:5f:b4:d3:b9:32:c1:67:c9:d9:2a:9d:95:
1a:eb:26:77:fe:14:b1:24:a1:e0:6a:bc:95:46:a2:98:00:cb:
1c:29:66:44:06:e1:f7:1c:b4:30:9d:8e:8e:66:79:64:ac:85:
f5:b9:4c:eb:e6:a7:cd:26:1a:22:b4:63:51:af:94:7b:c2:fb:
26:ba:41:45:54:7c:91:d9:71:08:06:5a:68:b5:5a:70:39:a6:
65:e1:2c:03:a9:51:ad:ef:21:31:c9:51:16:81:90:5a:96:9b:
f1:10:e5:63:32:e2:c4:29:22:9b:b8:8d:0a:30:0e:18:06:e0:
80:1c:16:33:91:85:42:3c:f4:70:cf:15:22:0c:2f:58:fe:1f:
4e:89:3f:62:99:4f:db:d3:8a:20:77:de:cc:97:c8:9d:bb:a3:
4c:05:8b:f5:20:1b:72:5c:4f:b0:5d:63:f7:0d:c9:fe:0e:07:
96:35:0a:1b:64:ba:18:0c:f5:d8:40:2b:bc:d2:58:95:41:5f:
52:a3:16:54:45:92:74:a9:15:19:c3:af:23:85:7e:2d:c6:5e:
bf:a1:c2:d3:1e:3a:6c:a0:90:50:34:7e:82:4e:12:7c:5d:ee:
c7:a1:00:e0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ/If/ZTiBRLR6htxTfOBtwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODAzMTY0MDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmZmMWJiYzcwN2QxYTkxMWU0NDI2ZDEyZjRiZjcxMTc5ZTBiZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xxAxAmUAXRjffabYuhWBNhTthnn
5V33p8y6EaJ+0PaVjIFUu454kImQAU1YCRbJiyHssb1/UcQ6geWyl516yfxt+5Xv
QYv70H2s70YWWpkspzbw2ipKUcdpet6QAG80fQC6o0u95WQG9iqKGZ4IF03SoDw6
GbVeHfGXvfQZ5l8r+kxsWwt94MK75KNLNuWE+9T6oQUICXgdaFqiiCFl0FGBj+6Z
QEIHcD+wMqMxZCeSBma1+9NdQVxo6LSSJyyRH/nYvCFoS3F1ZeqrwkSNJoPPFIgO
B7ZSMYOJ4wH+mL/O0R+Dl7tvCv9/TkciVwBmkx1Z0J+MbltnJDiDCd6MpwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNL/G7xwfRqRHkQm0S9L9xF54L4nMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMHY4YnZIQjlHcEVlUkNiUkwwdjNFWG5ndmljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQB2Tx4MAwD
BAHZPKIDBAHZPKQwDQYJKoZIhvcNAQELBQADggEBACcDrEO58NS5gSgpqCjn6vfY
GrwBaPUKnl+007kywWfJ2SqdlRrrJnf+FLEkoeBqvJVGopgAyxwpZkQG4fcctDCd
jo5meWSshfW5TOvmp80mGiK0Y1GvlHvC+ya6QUVUfJHZcQgGWmi1WnA5pmXhLAOp
Ua3vITHJURaBkFqWm/EQ5WMy4sQpIpu4jQowDhgG4IAcFjORhUI89HDPFSIML1j+
H06JP2KZT9vTiiB33syXyJ27o0wFi/UgG3JcT7BdY/cNyf4OB5Y1ChtkuhgM9dhA
K7zSWJVBX1KjFlRFknSpFRnDryOFfi3GXr+hwtMeOmygkFA0foJOEnxd7sehAOA=
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:30 2026 by rpki-client