Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2UkeEz-ZB6aUfvUandVljegZExI.roa
File: 2UkeEz-ZB6aUfvUandVljegZExI.roa (raw, json)
Hash identifier: QA0Fmt8MCqTdMU9RdYXYAygIdKZD1hlw8suW6q1b/1M=
Subject key identifier: D9:49:1E:13:3F:99:07:A6:94:7E:F5:1A:9D:D5:65:8D:E8:19:13:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A12E68B1BB112B001C97CD733AD2629E4D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2UkeEz-ZB6aUfvUandVljegZExI.roa
Signing time: Mon 12 Oct 2026 04:39:35 +0000
ROA not before: Mon 12 Oct 2026 04:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 217.60.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:68:b1:bb:11:2b:00:1c:97:cd:73:3a:d2:62:9e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 12 04:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9491e133f9907a6947ef51a9dd5658de8191312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:81:e7:14:24:15:55:2c:95:22:03:5c:05:
15:55:03:75:b8:61:67:4e:04:ad:1c:90:2d:ac:05:
c6:5a:1a:d0:ae:ef:80:62:ac:43:bb:18:a4:7e:0d:
81:3b:a2:a8:38:a5:71:ad:bc:7f:a0:97:c1:94:31:
e6:e6:ce:5a:1b:64:ed:96:c8:c4:e7:c5:8e:2e:35:
81:8b:58:fa:c2:c6:9a:e0:87:17:25:ae:a4:83:a6:
4a:4a:24:e2:8a:37:17:df:75:3c:1e:05:c8:45:d5:
55:87:37:0f:56:88:a5:93:84:23:93:81:e8:e4:2c:
50:4d:54:46:76:66:4b:4c:53:a2:3a:31:fa:0b:f0:
66:d9:8c:e6:45:1b:3a:4e:bd:af:eb:91:b2:33:32:
f8:1c:f8:4e:17:75:65:4f:f1:16:72:d2:2f:05:55:
36:b0:73:cb:e4:df:41:d8:76:76:d9:5d:51:c8:56:
c6:dd:b4:c1:12:1c:d8:cd:6c:fa:bc:8c:8f:9f:ae:
8c:87:14:e7:55:81:03:4b:9e:4f:00:bf:cd:3f:ed:
6f:68:20:96:82:06:1b:69:4f:4c:b2:03:14:13:df:
8d:64:cc:4b:49:9f:f8:1e:a7:87:ba:d1:00:42:8d:
f9:39:f0:10:07:ea:ce:e0:51:81:4c:90:c6:01:8a:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:49:1E:13:3F:99:07:A6:94:7E:F5:1A:9D:D5:65:8D:E8:19:13:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2UkeEz-ZB6aUfvUandVljegZExI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.93.0/24
Signature Algorithm: sha256WithRSAEncryption
57:86:af:e1:f7:32:00:4d:0c:bd:de:98:62:43:ac:1f:7e:c3:
6c:41:c9:1e:c3:bb:34:3d:42:c0:25:41:e4:64:bb:e8:41:ee:
60:39:a9:1d:a2:42:04:69:21:4a:e8:d8:6b:c4:b9:31:72:4e:
a4:ad:ac:43:f1:2a:91:0e:5d:ea:aa:64:f4:8a:ac:a3:fe:b7:
78:ad:ce:3b:aa:6d:fc:22:15:ff:3f:79:30:a1:b4:b8:c2:0f:
af:ae:b4:69:50:8a:40:6c:1a:50:b0:58:5c:60:ec:53:ff:e8:
f6:87:e9:54:c8:4c:0b:0c:73:ad:72:5f:50:17:97:23:4d:55:
17:d0:17:98:c2:64:0a:a6:98:fb:24:20:63:3d:df:3c:4c:3b:
c3:e3:95:22:e6:2e:f2:41:74:4d:0e:64:d8:78:90:16:9a:30:
81:63:10:72:39:f7:68:b0:ee:6c:3c:1d:16:8e:6f:42:9d:da:
dc:bf:84:93:76:35:ac:7a:9b:65:0e:1c:50:36:f2:37:29:f8:
f2:f8:fb:56:44:e9:e6:50:fe:fc:1b:aa:3f:93:30:c8:21:fd:
64:e1:7e:3f:b5:69:02:ec:a9:92:f0:93:48:a8:43:23:7d:04:
28:0e:b2:6e:a1:07:97:75:6e:c4:8f:df:4b:23:e5:38:c2:ae:
18:55:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:28 2026 by rpki-client