Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P1OY0svoJW_c5mId7H0d-nkII3k.roa
File: P1OY0svoJW_c5mId7H0d-nkII3k.roa (raw, json)
Hash identifier: gusWpPhAjF6YU8QZQcQMbBm6nF/0BoIf13/SY9wEeTQ=
Subject key identifier: 3F:53:98:D2:CB:E8:25:6F:DC:E6:62:1D:EC:7D:1D:FA:79:08:23:79
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0EDA4E18B35567C036B9D8487F97D7987
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P1OY0svoJW_c5mId7H0d-nkII3k.roa
Signing time: Tue 29 Sep 2026 14:50:00 +0000
ROA not before: Tue 29 Sep 2026 14:50:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 217.60.92.0/24 maxlen: 24
217.60.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:a4:e1:8b:35:56:7c:03:6b:9d:84:87:f9:7d:79:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 29 14:50:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f5398d2cbe8256fdce6621dec7d1dfa79082379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:ab:1d:98:c9:40:8d:08:22:76:13:8b:4c:
8f:79:78:3d:23:8c:45:17:94:91:f1:da:e2:2e:41:
0f:46:2a:e7:7c:75:b9:82:51:82:d4:74:88:e4:0a:
f3:83:45:c2:6d:61:c0:23:71:87:73:dc:a3:99:79:
8b:96:51:82:0d:b8:cb:32:2b:79:e3:94:38:9a:3f:
48:0d:3b:d9:63:af:7a:f8:51:07:24:23:e4:a1:2b:
e2:f5:5c:e3:89:2d:f5:4a:87:0a:31:13:22:dd:a9:
7b:e9:ae:38:11:ca:81:f4:31:77:54:68:e3:e4:2d:
be:29:8b:e3:07:de:31:4d:fa:28:38:c3:a7:c7:5c:
f2:2a:ab:96:53:52:24:6d:2c:87:c4:62:d5:88:d0:
0a:8e:c3:d4:60:93:29:96:c8:ec:53:c7:d1:6b:16:
db:e4:d1:4f:64:43:c7:64:22:7f:a9:a2:4a:7d:5b:
aa:97:ed:09:8e:6e:a9:8c:01:f1:d0:b9:b5:40:12:
1a:ce:f2:79:00:f5:fd:30:72:40:8b:96:e8:ad:7d:
21:66:15:92:9f:12:6c:da:19:21:d4:5a:f1:27:d4:
bb:fd:99:bf:8d:81:14:ad:4b:76:f6:72:25:e5:55:
2f:12:98:5a:c9:2f:6f:d8:a1:90:84:48:d4:c3:b7:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:53:98:D2:CB:E8:25:6F:DC:E6:62:1D:EC:7D:1D:FA:79:08:23:79
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P1OY0svoJW_c5mId7H0d-nkII3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.92.0/23
Signature Algorithm: sha256WithRSAEncryption
11:af:00:98:9c:4a:29:ab:d1:4a:ee:dc:a0:73:8e:d3:f1:9e:
4d:4f:95:e6:f2:35:bc:fc:d0:cc:66:3a:f5:5b:80:86:62:cd:
4d:5f:4c:78:01:da:02:8b:cb:0c:c9:9d:fe:21:da:5d:cd:6c:
db:ab:61:11:0d:5c:13:55:2e:5f:3f:41:3a:90:47:51:2c:ef:
f7:7e:be:4c:45:ee:e6:90:79:6c:6a:c1:0c:35:55:b0:a0:50:
d4:b5:01:54:7d:cd:6a:0a:22:1c:e0:95:ec:28:73:e3:9e:f3:
e2:d4:21:d4:52:ed:0b:dc:be:f1:af:df:9d:82:48:f9:b5:33:
2a:66:ad:0e:04:15:69:ac:aa:e2:76:3c:46:73:cc:23:5c:56:
a4:b2:bf:2d:04:2a:20:1c:9c:be:91:74:97:e6:99:af:69:d1:
20:de:dc:ec:c5:44:53:f7:09:32:2e:d9:05:09:e9:b5:ac:85:
71:ec:e0:31:dc:c2:90:35:e9:4e:6f:92:15:68:be:19:f9:83:
51:6a:4f:25:d8:68:c7:ef:eb:cb:28:f1:28:79:1d:2a:dc:28:
d2:84:52:46:8e:f6:1c:1c:88:a5:96:82:4a:20:22:67:f8:ba:
a6:d9:1d:5b:0c:85:ee:dd:08:e9:49:fe:28:d6:06:5f:d4:ee:
14:db:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:11 2026 by rpki-client