Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DYVOe28iybfrGzbow5u1pMZ19_U.roa
File: DYVOe28iybfrGzbow5u1pMZ19_U.roa (raw, json)
Hash identifier: NeflSjC792bMP8R7vmJE36WO0bE+/+4k/hUp5pviXUQ=
Subject key identifier: 0D:85:4E:7B:6F:22:C9:B7:EB:1B:36:E8:C3:9B:B5:A4:C6:75:F7:F5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A06CE76FF70E673B6C7B70BA736BEC3F58
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DYVOe28iybfrGzbow5u1pMZ19_U.roa
Signing time: Fri 04 Sep 2026 14:51:41 +0000
ROA not before: Fri 04 Sep 2026 14:51:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53356
IP address blocks: 217.60.152.0/22 maxlen: 24
217.60.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:e7:6f:f7:0e:67:3b:6c:7b:70:ba:73:6b:ec:3f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 4 14:51:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d854e7b6f22c9b7eb1b36e8c39bb5a4c675f7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2e:cd:f2:3e:79:2b:34:67:cf:09:5a:c4:1c:
b3:a7:29:7d:c6:af:4f:83:0c:a2:5c:f5:7e:b4:a3:
53:ca:16:bd:d6:05:be:89:9d:4c:1b:44:a4:3f:ab:
06:69:3d:b9:29:bf:93:ed:f1:08:c3:6e:4c:f3:78:
b1:37:b3:e0:3d:40:3c:13:f9:89:8d:aa:bf:3f:61:
42:a5:c0:56:46:bc:32:a4:f5:03:19:34:33:45:4e:
c0:81:e1:b8:68:3a:a0:1b:10:c7:bd:b0:89:46:0e:
9d:66:4f:6e:e7:e9:10:66:e7:57:30:ad:7d:31:34:
44:5f:fb:c8:b2:2f:aa:91:ff:42:0b:79:7f:7a:44:
21:c4:67:9b:f2:13:b6:fa:6e:5a:b9:63:05:a2:e5:
00:5f:26:06:84:f5:42:7f:19:7f:97:48:77:42:d0:
8c:f5:4c:8f:bf:9d:86:ca:03:a9:f8:6d:2d:cb:36:
06:5e:a3:ff:13:0c:8b:25:45:f9:43:56:0a:31:0b:
2d:10:66:4c:34:d2:d6:f7:03:4c:f2:b6:d6:f9:d1:
6c:d8:74:22:2a:07:2b:f7:66:bc:54:91:b8:09:bb:
0c:6c:52:40:7d:8d:51:20:7e:cc:3c:ed:af:ee:1b:
95:8d:1d:ec:2f:0f:45:98:f0:c1:36:fd:f4:48:68:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:4E:7B:6F:22:C9:B7:EB:1B:36:E8:C3:9B:B5:A4:C6:75:F7:F5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DYVOe28iybfrGzbow5u1pMZ19_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.152.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:5e:da:c1:84:7c:d5:83:c5:0f:da:9d:4f:19:58:c6:88:98:
e3:9c:87:f8:58:79:0b:f8:42:c3:df:cc:81:99:2b:82:7d:69:
f3:0e:c2:a3:aa:b3:69:69:f7:c0:9b:15:5e:40:1b:6d:df:76:
c4:30:0d:88:85:92:a7:f5:9a:cb:6f:75:94:90:cd:f0:da:d0:
5c:b8:91:e7:c8:75:3e:2f:3a:02:79:82:9a:b8:f0:0b:76:3e:
b5:91:de:2e:8a:f1:ae:3f:45:33:ca:8c:f6:c4:96:31:05:dc:
6f:22:9f:d6:00:52:82:43:c4:4d:a6:5e:c0:98:d9:1a:cf:19:
82:f0:3c:03:b1:4f:71:4a:bd:62:2b:9e:03:ce:41:40:72:a7:
56:33:b7:27:4e:08:eb:94:26:08:f9:a9:04:c0:63:01:5c:d3:
5a:00:23:58:19:56:f6:b4:f0:69:0c:fc:09:2e:82:ca:50:04:
e2:e5:4d:5e:fc:0c:8d:af:4d:42:c5:05:05:7a:0c:de:04:9a:
89:e5:d8:bd:34:5b:63:56:4a:66:14:5a:d3:70:60:df:9a:73:
e8:49:e0:6a:49:c9:ff:d4:c9:41:5c:05:5c:59:8b:7d:ef:3d:
78:85:5b:2d:7c:4c:58:cc:8a:a5:4b:a1:36:cc:8f:b2:82:59:
fc:5a:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:44 2026 by rpki-client