Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qhtpkaxaHAT0QoTtXZAp-e2RPJk.roa
File: qhtpkaxaHAT0QoTtXZAp-e2RPJk.roa (raw, json)
Hash identifier: bo3HqT+9tTXgmzCDXzCzmUvztEBgQJrbm3F2zDOq7qc=
Subject key identifier: AA:1B:69:91:AC:5A:1C:04:F4:42:84:ED:5D:90:29:F9:ED:91:3C:99
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FC5E5747122464CF8150A676EC2FBA221
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qhtpkaxaHAT0QoTtXZAp-e2RPJk.roa
Signing time: Mon 03 Aug 2026 04:32:56 +0000
ROA not before: Mon 03 Aug 2026 04:32:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399468
IP address blocks: 217.60.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c5:e5:74:71:22:46:4c:f8:15:0a:67:6e:c2:fb:a2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 3 04:32:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa1b6991ac5a1c04f44284ed5d9029f9ed913c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:01:69:ef:cb:1c:be:c6:af:e1:77:f3:da:02:
ad:28:28:14:66:99:e9:e3:41:49:e8:d7:21:a7:83:
18:f4:92:0b:42:f9:c7:6f:46:17:01:cf:40:5b:51:
17:95:57:5b:6c:bd:bf:13:10:3b:2b:5b:80:10:49:
44:ce:4f:19:77:32:28:b9:64:09:53:50:5f:bf:69:
71:7f:f2:9e:98:18:f3:de:e6:46:75:a8:7f:57:06:
b3:85:58:ce:65:ca:f4:47:18:03:cf:a3:b5:8c:b6:
85:8c:65:cf:10:1f:2f:4c:96:e9:68:b2:06:e5:e2:
76:41:83:54:09:3e:25:e9:ef:80:fd:74:59:74:b1:
97:b7:20:d0:97:47:da:07:18:7e:10:50:6d:22:13:
66:84:cb:19:16:c2:d3:6e:f0:6a:d2:7f:19:f6:60:
14:6f:ed:09:36:7d:5b:d8:63:06:dd:79:a0:e3:62:
b1:56:39:8d:31:64:1f:16:eb:9c:ac:19:40:c8:21:
a5:72:20:0e:08:2a:3e:24:3e:a9:72:9c:df:83:68:
64:82:c6:43:f5:8f:64:86:4d:e1:1d:52:68:01:62:
3d:14:0c:8a:53:af:20:29:e7:74:fb:9d:87:3d:c6:
17:0c:07:1f:73:18:67:48:a3:37:22:59:a5:dc:1b:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:69:91:AC:5A:1C:04:F4:42:84:ED:5D:90:29:F9:ED:91:3C:99
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qhtpkaxaHAT0QoTtXZAp-e2RPJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.52.0/22
Signature Algorithm: sha256WithRSAEncryption
08:9c:1d:3f:95:a6:d3:97:a5:f3:df:4f:fd:ed:54:33:57:4f:
b5:07:a2:74:2b:ff:07:5b:7f:13:29:d6:2d:7b:6f:42:60:be:
5d:a1:1b:eb:da:a5:cf:33:f9:2a:8b:9d:05:fe:f1:64:34:1d:
15:e8:29:56:a1:3a:dc:c5:b1:d6:ec:7f:f1:9b:7d:94:cb:96:
8e:75:43:f9:34:f3:73:e0:8d:55:2a:38:a7:a8:1e:4a:6b:bc:
15:c5:f7:cd:3b:d5:5c:71:9b:17:a1:75:46:5a:ae:cd:f8:a6:
4d:88:9f:3f:f7:5d:97:e2:fb:2f:08:36:5b:25:d4:ce:4e:c7:
b2:7c:18:e6:11:5a:50:0a:9f:e7:f3:d6:c9:ac:0b:8f:d7:81:
77:f1:46:35:ca:dd:35:13:45:25:96:a8:65:a7:52:5d:53:c5:
8f:1d:67:48:26:9e:7a:ae:04:03:52:56:31:0a:d5:37:d0:7b:
d1:cc:38:ac:c6:79:f7:48:b5:75:ee:cd:f7:e0:78:25:a2:c8:
0d:82:67:16:81:77:1c:b2:a4:67:f0:5e:a6:74:d5:61:83:68:
c8:0e:6a:02:ea:fc:fe:ae:7e:a3:a1:63:a2:66:f8:af:4c:f8:
70:c1:33:0f:b3:0d:e8:5f:1c:bc:04:84:3e:fa:e7:4b:87:e5:
e8:e0:67:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/F5XRxIkZM+BUKZ27C+6IhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODAzMDQzMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTFiNjk5MWFjNWExYzA0ZjQ0Mjg0ZWQ1ZDkwMjlmOWVkOTEzYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/AFp78scvsav4Xfz2gKtKCgUZpnp
40FJ6Nchp4MY9JILQvnHb0YXAc9AW1EXlVdbbL2/ExA7K1uAEElEzk8ZdzIouWQJ
U1Bfv2lxf/KemBjz3uZGdah/VwazhVjOZcr0RxgDz6O1jLaFjGXPEB8vTJbpaLIG
5eJ2QYNUCT4l6e+A/XRZdLGXtyDQl0faBxh+EFBtIhNmhMsZFsLTbvBq0n8Z9mAU
b+0JNn1b2GMG3Xmg42KxVjmNMWQfFuucrBlAyCGlciAOCCo+JD6pcpzfg2hkgsZD
9Y9khk3hHVJoAWI9FAyKU68gKed0+52HPcYXDAcfcxhnSKM3Ilml3BtdBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKobaZGsWhwE9EKE7V2QKfntkTyZMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcWh0cGtheGFIQVQwUW9UdFhaQXAtZTJSUEprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Tw0MA0G
CSqGSIb3DQEBCwUAA4IBAQAInB0/labTl6Xz30/97VQzV0+1B6J0K/8HW38TKdYt
e29CYL5doRvr2qXPM/kqi50F/vFkNB0V6ClWoTrcxbHW7H/xm32Uy5aOdUP5NPNz
4I1VKjinqB5Ka7wVxffNO9VccZsXoXVGWq7N+KZNiJ8/912X4vsvCDZbJdTOTsey
fBjmEVpQCp/n89bJrAuP14F38UY1yt01E0Ullqhlp1JdU8WPHWdIJp56rgQDUlYx
CtU30HvRzDisxnn3SLV17s334HglosgNgmcWgXccsqRn8F6mdNVhg2jIDmoC6vz+
rn6joWOiZvivTPhwwTMPsw3oXxy8BIQ++udLh+Xo4Gf+
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:12:39 2026 by rpki-client