Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3dgIhKvyczo_5NAJCzMBYA8Gp5c.roa
File: 3dgIhKvyczo_5NAJCzMBYA8Gp5c.roa (raw, json)
Hash identifier: DcTIK+PvJXupw5ttNg3CqdW8cTof4u3njEGGSkRKTVA=
Subject key identifier: DD:D8:08:84:AB:F2:73:3A:3F:E4:D0:09:0B:33:01:60:0F:06:A7:97
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A10CCA73647C17F3ACED6F075B98128C0D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3dgIhKvyczo_5NAJCzMBYA8Gp5c.roa
Signing time: Mon 05 Oct 2026 15:59:16 +0000
ROA not before: Mon 05 Oct 2026 15:59:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207208
IP address blocks: 217.60.92.0/24 maxlen: 24
217.60.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:ca:73:64:7c:17:f3:ac:ed:6f:07:5b:98:12:8c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 5 15:59:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddd80884abf2733a3fe4d0090b3301600f06a797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:5a:8c:c0:d6:c4:23:d8:3a:24:b5:a2:7d:
a3:36:aa:ec:21:9f:fc:02:82:42:0d:e6:fc:23:c2:
8e:c8:00:82:5e:ee:09:19:a9:28:17:cb:d3:f2:3b:
59:93:e4:43:5b:bc:0b:b2:09:d1:e3:c6:ff:c1:57:
14:82:a2:04:9b:e4:bc:4b:1c:e0:a7:25:95:b9:9b:
9e:f0:a0:ed:52:03:b3:c1:ac:b2:08:78:16:b1:60:
e6:5a:01:66:2e:96:93:2a:90:ca:68:47:17:95:03:
aa:88:ef:ea:97:b3:48:00:f7:db:9d:37:66:8a:31:
1b:9e:58:c5:4b:09:75:53:41:fc:74:73:67:68:da:
59:b6:fe:3f:09:89:07:0c:6b:e1:91:fb:2b:1a:23:
88:23:4b:17:3e:38:19:ec:fb:b1:1f:68:ef:74:86:
40:9b:c4:97:48:3a:cb:bd:47:92:99:fd:db:61:84:
ac:8a:a7:3b:29:c1:b5:07:d1:78:24:8a:84:01:8d:
3b:bd:01:c5:2a:54:2a:43:b4:5a:b3:6e:61:7b:e1:
3b:83:59:4a:fb:62:a7:f0:f5:e5:a1:a2:ec:d9:e7:
b8:e3:68:46:78:30:66:78:de:b3:1f:c8:0b:bd:62:
07:09:7a:73:09:49:2d:e4:e3:9e:84:e7:11:90:82:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D8:08:84:AB:F2:73:3A:3F:E4:D0:09:0B:33:01:60:0F:06:A7:97
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3dgIhKvyczo_5NAJCzMBYA8Gp5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.92.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:31:2a:cc:68:96:ad:58:99:f8:3f:8c:3e:fe:67:b7:9c:db:
2d:fb:8e:10:79:a9:8f:d2:6d:07:4a:66:db:3b:c9:b4:6f:ce:
f5:84:1d:91:46:13:14:e6:4f:f5:59:f6:5d:23:09:b8:87:63:
a0:df:86:cd:74:d4:d3:bf:ea:4e:cc:13:67:01:40:09:4a:ff:
5f:2d:d9:87:0e:3d:05:e1:e2:83:47:c8:e2:5a:03:4b:a2:03:
67:b5:91:13:19:36:6a:aa:2b:86:c6:0d:65:3d:bb:8e:ad:71:
54:f0:f0:42:b0:bb:6f:23:4f:bb:55:fc:d5:51:da:3a:87:17:
91:80:01:3e:74:88:e4:26:2a:fd:89:08:f5:bf:ef:39:aa:e3:
62:8b:86:25:03:ef:bd:50:e0:c5:9d:ac:f2:fa:ba:36:ed:36:
2d:e4:15:53:1d:9c:ae:8f:42:57:55:0b:48:32:cd:ea:11:3a:
19:3b:9b:19:51:a1:56:92:81:6c:2d:e9:c0:48:6f:e3:f4:ba:
39:b9:49:f2:b3:18:2f:03:26:94:9b:e6:5c:7f:ad:99:c6:9c:
25:fd:a5:2f:9e:74:45:48:f7:1c:cb:3d:8d:16:9d:40:7b:f4:
5e:91:a5:10:02:b2:21:58:b7:e1:f1:f0:c1:cb:e4:b5:f2:b1:
8b:1a:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:11 2026 by rpki-client