Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p8JYwa5jCtMJadFDzf8x7Gx-uSo.roa
File: p8JYwa5jCtMJadFDzf8x7Gx-uSo.roa (raw, json)
Hash identifier: eZhbLr5RXInWm92oTJrOjHmbWIVsQE1kFs9n/Nd7iQw=
Subject key identifier: A7:C2:58:C1:AE:63:0A:D3:09:69:D1:43:CD:FF:31:EC:6C:7E:B9:2A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A006474415A75A98B4CC6EA57F4E56BFB8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p8JYwa5jCtMJadFDzf8x7Gx-uSo.roa
Signing time: Sat 15 Aug 2026 16:35:28 +0000
ROA not before: Sat 15 Aug 2026 16:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 217.60.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 06:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:06:47:44:15:a7:5a:98:b4:cc:6e:a5:7f:4e:56:bf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 15 16:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7c258c1ae630ad30969d143cdff31ec6c7eb92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:9e:c7:45:0a:ac:96:67:e6:60:ce:dd:87:
8e:8e:79:23:d4:e2:17:30:a0:35:4b:98:e9:01:19:
a1:08:7e:cd:87:9d:0c:40:22:45:54:6f:32:9e:b5:
39:f5:57:39:4f:70:04:33:f0:21:01:16:5f:3a:f5:
03:4f:4f:f7:85:6a:5b:6b:03:62:c7:d3:3c:c2:7f:
91:d1:5d:e1:0f:c1:26:9d:84:57:84:3e:70:22:5b:
bc:da:d3:1c:ea:0e:0a:7e:6f:bf:2e:68:a4:27:b5:
f8:c0:45:45:0a:0f:d8:58:d1:10:5f:f1:ea:3a:87:
48:67:05:de:ea:ed:23:91:5d:5f:62:d7:9d:4d:ff:
ee:c1:f1:4a:a1:40:f9:bb:81:0b:5a:3a:fa:5b:33:
63:fd:af:59:1b:c3:1a:c5:68:9c:6f:4c:2a:1c:cb:
c3:a3:9e:a0:64:35:d3:4e:00:f5:d0:07:d8:29:3e:
76:42:7c:74:96:b4:c9:0c:ce:46:73:fa:17:5b:64:
c5:65:f9:1c:36:dd:93:09:34:89:36:73:81:6f:1d:
57:84:aa:be:82:c0:c0:88:e6:bf:d3:9f:00:dd:b8:
6f:54:40:c5:e6:80:a4:ef:98:ec:ff:c3:12:af:9d:
05:0c:65:64:bd:f1:fa:ed:d1:ae:14:e5:df:8d:a9:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:58:C1:AE:63:0A:D3:09:69:D1:43:CD:FF:31:EC:6C:7E:B9:2A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p8JYwa5jCtMJadFDzf8x7Gx-uSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.27.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e2:4d:da:f2:58:d0:b3:70:b9:16:94:61:2d:75:9b:a5:18:
0f:50:51:16:a0:41:12:7e:34:24:46:e3:9a:f0:41:4a:ba:ae:
c0:9e:39:f6:a0:3f:16:d2:f3:10:4a:47:bc:a5:e6:ac:4a:f5:
8e:85:3d:bb:f9:d2:bc:1d:62:f6:2f:82:57:05:c9:59:98:21:
e5:1b:d1:d8:d3:5f:6c:50:12:a4:69:11:03:11:da:0e:0a:85:
4e:18:6d:27:26:dc:58:f0:20:f1:75:7e:14:7d:3c:54:cb:c2:
59:b3:3c:17:06:24:ff:fc:36:23:81:1c:ee:8a:41:f6:64:6f:
38:cc:14:75:5f:a1:99:e0:0f:4a:d2:44:1d:22:4e:ab:8a:50:
0c:a2:0c:1e:77:72:70:eb:06:bd:cb:48:f4:e5:14:6f:bd:77:
3d:19:b2:cc:d5:ac:1d:c3:f8:e2:20:39:10:fe:b8:fa:fc:5b:
fc:58:21:8d:e7:44:22:c0:61:bf:9e:41:11:98:a7:21:42:09:
4a:a0:d3:b6:59:cc:5a:d8:fe:37:06:e7:83:20:c7:f1:a7:9a:
f4:26:76:d7:69:87:3c:94:3f:48:d0:16:b1:2e:07:3f:af:f1:
41:0c:ea:a0:f9:22:04:d1:6b:29:ce:a0:56:5d:26:70:28:4a:
7d:3e:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:13:31 2026 by rpki-client