Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S5YGkySNPZgXTi12HCeqUzmmRF8.roa
File: S5YGkySNPZgXTi12HCeqUzmmRF8.roa (raw, json)
Hash identifier: 64SJwjq54ThQvk9Bd6gDJRH3+GpqLqx6DilpLR03WVk=
Subject key identifier: 4B:96:06:93:24:8D:3D:98:17:4E:2D:76:1C:27:AA:53:39:A6:44:5F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DB4A8B332026B8EA25DCA60E9059FB6A2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S5YGkySNPZgXTi12HCeqUzmmRF8.roa
Signing time: Wed 22 Apr 2026 10:07:27 +0000
ROA not before: Wed 22 Apr 2026 10:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204203
IP address blocks: 217.60.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:a8:b3:32:02:6b:8e:a2:5d:ca:60:e9:05:9f:b6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 22 10:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b960693248d3d98174e2d761c27aa5339a6445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:06:c2:78:90:24:0b:c2:cd:36:02:69:01:
f5:fa:a8:78:e8:aa:03:0f:64:65:e5:05:d5:2f:19:
c0:a5:d5:dc:bb:84:64:37:1a:40:17:e5:bd:99:ea:
a7:b1:f5:ef:96:c6:0f:4e:2b:58:f6:26:27:57:77:
3a:96:f9:af:06:9e:a6:ad:6a:59:d7:29:76:cb:6a:
5b:b0:0a:29:3b:f9:ac:b7:81:5a:4b:07:aa:c0:b0:
18:57:94:ab:60:13:cb:91:64:ad:7e:e0:98:68:aa:
6c:ce:40:73:92:89:33:b2:90:b2:04:f9:75:8d:94:
25:17:b8:3a:cd:64:4b:d5:42:6f:93:cf:25:f4:a8:
94:ca:a8:ee:11:65:2f:26:51:f4:31:16:13:0b:a0:
17:b2:2c:5b:be:67:45:10:f3:f6:37:56:d8:b4:9b:
2d:70:99:9a:36:89:59:c2:ba:95:9d:e2:23:c4:70:
ff:43:f5:18:e0:bf:19:42:33:d6:8a:00:44:17:2f:
ef:94:a6:94:e4:5d:0f:9c:d1:38:6c:36:18:15:be:
4c:d8:62:89:64:56:6e:fc:78:a6:9f:47:7b:a1:f4:
44:99:41:db:53:81:4b:51:b7:9f:71:65:7c:28:51:
e9:84:65:3c:cb:3c:50:e0:d2:4d:cc:03:af:67:d0:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:06:93:24:8D:3D:98:17:4E:2D:76:1C:27:AA:53:39:A6:44:5F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S5YGkySNPZgXTi12HCeqUzmmRF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:79:f2:66:79:93:5d:ac:df:b7:9b:ec:25:38:ff:e6:31:c6:
7c:8f:09:b7:94:d0:ce:08:02:d2:20:99:3e:ed:ee:ea:74:f1:
92:1f:08:92:3c:0c:d2:91:99:45:a0:08:ea:93:cd:e7:a3:84:
db:c6:b0:be:56:e3:3c:c3:df:de:42:42:e0:83:45:ea:9f:5c:
a9:4b:d9:32:95:f6:40:eb:28:bb:d2:36:d0:11:3f:65:05:27:
37:dd:a2:04:0b:92:b9:de:7e:44:d3:13:c4:b2:9e:df:0e:0e:
8c:ef:b3:55:11:fd:df:30:1c:18:de:64:e7:40:54:b8:39:8e:
0c:6f:bb:22:c2:72:bd:38:80:0a:f3:89:9b:64:0d:af:a2:9c:
d9:55:4f:61:96:db:28:4b:08:a6:68:ff:b2:c6:bd:b6:f9:2f:
29:aa:55:c7:a2:de:72:2c:57:bd:f5:f8:55:ff:fa:7f:9f:2f:
1f:4f:e0:4a:8c:0a:37:d3:cf:18:d3:84:49:2d:be:f3:1b:de:
d1:df:c3:ff:29:31:2c:d9:9f:69:17:a7:c7:b2:53:c7:4e:30:
c3:a2:6f:dd:d3:6f:02:00:1f:1f:ab:d2:4c:50:60:2c:68:7e:
15:84:62:83:91:11:6d:e1:ed:b4:50:7c:67:9c:30:93:ae:72:
56:09:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:44:37 2026 by rpki-client