Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ug6Kv0UeTuPGGoiRCQDWj7-qd9I.roa
File: Ug6Kv0UeTuPGGoiRCQDWj7-qd9I.roa (raw, json)
Hash identifier: rcfqltzMInDOjileOwXb+OmBKxOfVQHc2owfWoPoUoQ=
Subject key identifier: 52:0E:8A:BF:45:1E:4E:E3:C6:1A:88:91:09:00:D6:8F:BF:AA:77:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A14B17379DE3BEB4A3D8C89A592D9784D7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ug6Kv0UeTuPGGoiRCQDWj7-qd9I.roa
Signing time: Sat 17 Oct 2026 18:19:34 +0000
ROA not before: Sat 17 Oct 2026 18:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209809
IP address blocks: 217.60.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:17:37:9d:e3:be:b4:a3:d8:c8:9a:59:2d:97:84:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 18:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=520e8abf451e4ee3c61a88910900d68fbfaa77d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4f:6d:84:b4:b4:ed:4e:94:fd:9c:eb:4c:3a:
ce:82:c8:4c:bc:08:8e:34:35:ff:bd:59:62:21:c8:
99:26:47:c2:aa:84:17:2c:fd:15:81:55:72:3d:62:
76:dc:3c:55:f8:98:d6:8f:ad:62:96:55:64:b8:d7:
d0:13:19:b2:50:b0:9e:a6:2e:ef:2c:9b:f5:c0:a6:
0f:e7:f6:a8:95:ad:05:9c:11:13:1a:f9:46:16:df:
c4:4a:84:5b:12:67:7b:6e:bd:6f:39:0f:52:2a:3a:
10:b5:24:05:b8:61:f4:16:c3:f7:d4:bf:ad:ee:1b:
51:fe:6b:c4:25:17:8f:32:2a:2f:9e:31:17:ff:20:
4a:a5:52:73:1c:63:f3:74:6f:3d:87:e9:18:98:0b:
e6:a7:bf:0e:7d:8e:55:38:07:63:c1:fe:e8:50:e8:
49:22:ef:61:5e:6e:8f:06:19:60:cf:86:05:9f:fc:
20:36:bb:28:35:d6:e4:b9:6a:1d:c8:39:df:fb:1f:
d6:51:fc:0d:81:0b:74:d1:f4:4b:05:da:f9:2a:52:
ce:b7:7a:c5:c4:07:0d:57:e2:1e:3b:eb:f5:23:4f:
c5:7b:e7:95:6f:76:b7:71:54:18:60:de:f2:35:c8:
68:48:e2:1d:d5:36:67:59:33:4e:b1:c7:a6:3f:2b:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0E:8A:BF:45:1E:4E:E3:C6:1A:88:91:09:00:D6:8F:BF:AA:77:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ug6Kv0UeTuPGGoiRCQDWj7-qd9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.199.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:f3:f8:9d:94:eb:0e:c4:2a:9c:e2:e1:af:1b:bd:da:33:d5:
ec:b8:e7:a1:d7:4c:df:a8:e9:af:0b:3e:9a:99:5f:65:86:13:
52:28:f8:21:32:6b:0a:13:d8:a8:e8:00:28:48:9b:a7:77:26:
c7:19:29:50:5f:37:09:a1:08:24:e1:9d:12:1a:fd:1e:8c:61:
80:44:c9:b5:78:04:96:54:13:bf:30:da:50:13:8c:c0:c0:f0:
99:0a:fa:b0:23:88:1d:88:fb:e7:af:ce:b1:7d:6f:84:e0:35:
6e:01:a0:7e:67:f1:77:75:eb:a4:79:5f:da:23:ed:8e:4f:6d:
c6:c3:93:3b:6a:73:d4:b5:5b:54:b5:bf:9c:92:9e:9d:e2:0c:
d6:81:ee:83:30:1b:e1:66:3a:1e:4a:2d:c6:18:c5:51:1a:4d:
35:c4:bc:3d:35:79:02:f4:8e:c4:ce:65:f3:37:39:33:e6:38:
c9:24:33:08:0c:91:1f:2d:91:9b:72:a6:14:d2:3c:7e:c6:ee:
e9:5d:86:d2:e2:88:54:56:0a:68:ae:17:84:49:fd:59:fb:6d:
59:84:ff:66:40:c9:d6:b8:2e:c6:fc:67:6c:b8:b8:5e:5c:3f:
e2:1e:4d:17:2a:3e:82:89:29:09:e6:e6:3e:98:4f:f3:fb:b4:
92:9f:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:34:49 2026 by rpki-client