Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KjXSe1s6Tntc-ot-JK5aJx56lLQ.roa
File: KjXSe1s6Tntc-ot-JK5aJx56lLQ.roa (raw, json)
Hash identifier: Ghx4pdvA8LQKQIPN75qw8CTdNBO0I7G3gZwGBImLjv0=
Subject key identifier: 2A:35:D2:7B:5B:3A:4E:7B:5C:FA:8B:7E:24:AE:5A:27:1E:7A:94:B4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F3C0D321A797087748B5CAD70FDC93747
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KjXSe1s6Tntc-ot-JK5aJx56lLQ.roa
Signing time: Tue 07 Jul 2026 10:08:45 +0000
ROA not before: Tue 07 Jul 2026 10:08:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200912
IP address blocks: 217.60.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:0d:32:1a:79:70:87:74:8b:5c:ad:70:fd:c9:37:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 7 10:08:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a35d27b5b3a4e7b5cfa8b7e24ae5a271e7a94b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:b0:46:34:a9:7e:23:77:48:12:58:eb:85:
78:e9:f8:4b:6a:60:24:fd:f9:11:f0:7a:ec:1b:f8:
e7:a5:49:32:e1:aa:ad:aa:a0:a9:57:8f:25:26:da:
61:36:e8:30:6f:86:e5:65:60:73:fb:b0:e8:11:9b:
6f:01:fc:b7:9a:5c:19:9d:c6:cc:9f:d8:cb:a8:60:
e2:d2:ad:e9:c0:f1:26:3c:90:20:84:08:e7:37:02:
a1:76:8e:27:5e:b5:3c:78:98:d2:e0:5b:cb:c5:88:
94:6a:9d:60:04:a1:53:43:9b:65:4a:e7:cc:26:77:
d8:7b:e1:96:65:58:b6:33:f4:0e:9f:46:88:61:81:
06:89:f2:29:96:20:6d:c7:1e:9f:e3:d5:f4:8c:ef:
33:07:73:83:0f:95:ba:da:1c:72:c4:39:35:eb:34:
30:c5:23:2e:54:c9:f6:44:be:e2:69:6f:70:8e:60:
9c:b3:3d:cc:81:c1:b2:95:63:20:d0:c0:5e:d6:ca:
5b:32:30:2a:f9:a9:5a:9d:64:3f:a5:9e:04:59:91:
af:ef:d3:4d:75:80:fd:7d:39:bd:70:91:02:cd:15:
a9:32:82:a4:a9:e6:24:4c:b6:88:8a:1e:58:d1:fc:
3f:7a:4e:17:d6:84:3f:23:0e:84:a6:41:68:24:cc:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:35:D2:7B:5B:3A:4E:7B:5C:FA:8B:7E:24:AE:5A:27:1E:7A:94:B4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KjXSe1s6Tntc-ot-JK5aJx56lLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f1:cd:b9:2d:85:b6:5e:41:b8:13:3c:a2:47:3c:4e:0a:03:
05:7c:08:f3:26:a5:8b:19:84:df:d7:1c:30:a8:f2:bf:be:a3:
92:cb:88:1b:e5:95:9f:b2:eb:d8:8f:64:42:66:92:ec:44:19:
70:f6:02:98:66:ee:31:ca:f6:81:b8:65:2e:e0:9f:ca:d6:d0:
a8:c7:f4:67:eb:8a:9e:8c:fd:25:a0:22:13:3d:dd:68:fc:34:
4f:47:bf:5c:c0:af:26:35:e1:59:1d:38:cd:5e:bc:97:8d:4e:
2b:cc:de:20:64:dc:9b:a5:17:17:e8:f3:19:9a:d3:4d:7e:df:
84:50:39:3b:71:b3:98:c5:cb:07:90:0c:a9:ae:5b:a9:d1:b1:
dd:86:ca:04:a4:48:aa:fd:c5:78:93:9b:c1:60:26:d1:de:a4:
84:85:87:14:e0:21:69:60:eb:6e:09:5a:8b:53:30:ee:4b:c6:
75:fb:5c:12:1c:ec:7d:36:e7:72:b0:c2:b7:bf:e1:d9:39:c5:
70:e8:5a:a1:ec:1d:cd:e3:d0:92:d7:3d:3a:b2:d5:de:7c:9f:
12:af:53:18:68:94:b7:7d:6d:20:db:dd:ce:9b:af:c4:25:bc:
8c:7e:0d:b5:5d:83:b2:b9:24:0f:17:b3:1a:e8:9f:df:7d:85:
0c:61:38:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:35:06 2026 by rpki-client