Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GcozSzHaFUcA-YzYLQ6MwjI-qbg.roa
File: GcozSzHaFUcA-YzYLQ6MwjI-qbg.roa (raw, json)
Hash identifier: uankjXKprK8Knz3Ux8wfePzivR6HmGLVuvqRWD64Mjk=
Subject key identifier: 19:CA:33:4B:31:DA:15:47:00:F9:8C:D8:2D:0E:8C:C2:32:3E:A9:B8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019ECBE35E764CF75A40141E3667B385FF87
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GcozSzHaFUcA-YzYLQ6MwjI-qbg.roa
Signing time: Mon 15 Jun 2026 15:25:36 +0000
ROA not before: Mon 15 Jun 2026 15:25:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 217.60.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:e3:5e:76:4c:f7:5a:40:14:1e:36:67:b3:85:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 15 15:25:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19ca334b31da154700f98cd82d0e8cc2323ea9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:2a:f1:6d:be:06:ec:12:3a:a6:9e:2e:e0:
ce:0b:07:74:15:47:68:6e:11:ff:04:19:06:77:5c:
12:8c:29:15:a1:12:21:1f:29:b8:90:d4:95:2a:e3:
6e:a9:c4:05:aa:15:bf:52:2d:54:bc:ea:53:34:c8:
46:8c:da:45:c8:42:38:be:7b:56:5a:d8:a9:cd:d5:
e1:cf:b4:8a:9c:ea:c6:ef:de:96:bd:ca:7b:d9:79:
c5:4f:ce:56:9e:f9:8c:ab:06:e1:8a:22:f6:fb:89:
47:6d:66:4d:8b:91:1e:73:8d:f4:a2:d1:66:19:dd:
4e:1c:b8:e4:d4:61:20:bb:50:90:00:f0:38:21:2b:
5c:bb:3c:ac:a0:a9:5c:13:bf:45:da:01:05:84:92:
b2:22:92:22:9c:23:62:87:10:7e:ec:79:56:ac:ef:
17:e6:e7:ef:73:4e:a0:98:e9:60:df:72:36:8a:91:
18:57:d8:49:9e:20:3a:07:d4:73:09:33:5e:bf:0c:
64:50:e6:ee:44:de:b9:a3:2e:ea:9d:03:34:e4:6f:
7f:0a:5c:8c:b2:23:87:13:fb:62:94:b1:de:97:65:
2f:9c:52:42:28:db:16:96:1d:49:84:a7:ef:08:ee:
21:54:30:9e:8c:55:4b:37:81:7b:58:3b:8a:17:c0:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CA:33:4B:31:DA:15:47:00:F9:8C:D8:2D:0E:8C:C2:32:3E:A9:B8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GcozSzHaFUcA-YzYLQ6MwjI-qbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.71.0/24
Signature Algorithm: sha256WithRSAEncryption
31:97:d3:a2:65:8a:37:6a:10:dc:3e:3b:6a:99:e0:60:90:e0:
b1:73:8e:02:f6:c6:59:3b:c5:ee:d6:bb:e0:bf:3e:c0:e3:80:
b4:76:12:81:39:ff:97:9a:36:1d:79:66:db:3b:79:28:1c:5b:
e1:79:b5:c0:c1:7c:55:0b:30:56:3f:34:8a:51:bb:01:ca:e6:
01:7f:05:ca:47:0e:d5:66:3b:97:1c:54:94:c0:97:c8:f1:89:
6c:cb:3b:a4:9d:21:27:31:ea:fc:60:2e:33:ac:62:1e:2e:3f:
e6:db:d4:6d:88:27:65:f6:a5:12:fc:32:bd:c6:64:ac:5f:0a:
2c:44:a4:ef:c9:47:78:8c:5b:da:22:59:3a:9a:82:89:da:a8:
db:de:b4:d9:92:99:f2:3e:45:1a:d7:02:f5:60:70:f7:a9:63:
d4:fb:b6:df:66:24:5d:dd:6c:63:13:3e:aa:10:0e:f9:ae:91:
f2:bf:f8:f8:26:bb:81:6d:37:e2:b4:8c:05:d6:6f:fd:d8:6f:
21:34:49:0b:ae:27:a0:76:95:da:82:36:b9:88:9a:0c:72:01:
ad:8e:f4:d8:c8:4f:5f:2c:a8:c2:88:1a:21:92:dc:3c:95:e7:
40:e9:7c:13:a2:bf:d8:9a:fd:81:e2:7c:a1:a1:14:5c:da:7e:
a2:d1:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:05:52 2026 by rpki-client