Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gpum6bMHK2B7Tb0FuQ9LQziqako.roa
File: Gpum6bMHK2B7Tb0FuQ9LQziqako.roa (raw, json)
Hash identifier: hUzQTLtUF6rEd07gdavvgPuAR1SpUX4Ozlf0tg/rBs8=
Subject key identifier: 1A:9B:A6:E9:B3:07:2B:60:7B:4D:BD:05:B9:0F:4B:43:38:AA:6A:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E3FE3407A81F56E559F97331A320B7AF1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gpum6bMHK2B7Tb0FuQ9LQziqako.roa
Signing time: Tue 19 May 2026 10:58:38 +0000
ROA not before: Tue 19 May 2026 10:58:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 217.60.195.0/24 maxlen: 24
217.60.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:e3:40:7a:81:f5:6e:55:9f:97:33:1a:32:0b:7a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 19 10:58:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a9ba6e9b3072b607b4dbd05b90f4b4338aa6a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:f1:bf:c1:78:0a:5b:c1:76:b6:86:62:a5:
33:51:92:b4:5b:86:54:a7:d3:de:bc:11:d9:81:db:
ac:79:8d:88:f5:3f:6d:b4:a4:31:47:cf:5f:de:90:
9d:fe:4f:b5:79:91:23:3b:c8:c0:2b:7a:e3:f9:62:
f6:63:3a:bb:f6:9e:07:8a:7f:30:93:34:ad:54:cc:
eb:8b:cc:02:66:dc:5e:a7:f8:b8:9f:f9:23:03:e3:
b7:e0:ec:ed:d1:e3:72:bf:29:bd:91:bc:e1:69:cb:
2b:c7:02:78:98:45:ac:7b:79:fa:a9:73:d5:f7:5a:
28:e8:c1:6c:e1:75:de:db:61:55:e2:0b:6f:b1:99:
f8:98:ac:2a:98:53:5d:de:f0:73:5c:08:99:ae:76:
d0:04:b9:17:89:21:01:d6:f5:b9:0e:e4:b1:1e:e8:
5a:6c:7d:5d:93:5f:21:be:b9:e9:40:d8:d3:0a:c4:
fb:e2:a8:eb:5e:31:0e:19:fb:3f:03:6c:7d:75:93:
80:4f:6d:f1:85:4c:ef:67:f0:b9:d6:f9:ae:62:fe:
37:e6:34:b0:2d:71:b9:1d:50:95:eb:25:5b:29:d4:
15:a8:7c:23:cd:21:66:49:b7:93:10:70:a7:06:14:
53:cb:66:2c:a5:6c:3e:33:84:31:bf:7b:88:c4:3a:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:A6:E9:B3:07:2B:60:7B:4D:BD:05:B9:0F:4B:43:38:AA:6A:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gpum6bMHK2B7Tb0FuQ9LQziqako.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.195.0/24
217.60.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:71:19:31:94:55:23:91:3d:88:47:bf:6e:2e:cc:28:42:48:
13:db:4d:b2:07:3d:f3:c5:18:ac:7a:d7:89:83:25:95:1f:79:
26:07:95:3d:9f:90:aa:6e:eb:91:29:36:43:69:8b:59:56:e3:
bd:1b:ed:38:f9:2e:aa:b7:23:51:68:d2:6a:0f:6d:61:26:e0:
a7:69:75:19:75:47:d6:b9:60:90:ee:30:70:86:2a:31:61:7d:
8c:c2:98:f0:bd:d6:56:92:57:1a:36:d4:3f:d8:92:79:f9:fd:
e6:19:64:ca:b3:d7:ec:66:ea:2a:77:e6:25:06:3f:a4:a1:8d:
20:d7:08:18:06:1f:84:96:f8:7d:c9:1b:cf:18:ec:e1:f4:b8:
2b:5f:b2:0b:52:18:aa:cd:c7:5c:89:f9:44:ef:46:8b:90:54:
f8:d1:6a:30:ec:46:90:cf:30:21:c5:dd:f2:2f:1b:a7:4f:1a:
10:3b:27:12:77:89:c4:95:af:58:15:cf:f5:15:a6:56:dd:83:
16:7c:70:ce:fd:10:7e:0d:3c:60:dd:ed:7f:3d:44:65:b1:2e:
f6:04:0b:58:cd:10:93:f7:8c:84:62:64:f7:bc:13:63:ad:a6:
79:64:46:d7:ae:1d:40:ef:52:f3:7e:a1:7b:5a:fe:63:05:cf:
e3:19:ca:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:55:18 2026 by rpki-client