Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wRDKDvO3ZID2srNJpkYDNzwlxKk.roa
File: wRDKDvO3ZID2srNJpkYDNzwlxKk.roa (raw, json)
Hash identifier: E7YxKDtPhP/o0W2IllZL2LFX2xLFSgjJRtYrY5Tx2Kg=
Subject key identifier: C1:10:CA:0E:F3:B7:64:80:F6:B2:B3:49:A6:46:03:37:3C:25:C4:A9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019ED04A6BDB7C5D0213A91A3B1067CA17E2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wRDKDvO3ZID2srNJpkYDNzwlxKk.roa
Signing time: Tue 16 Jun 2026 11:56:38 +0000
ROA not before: Tue 16 Jun 2026 11:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219434
IP address blocks: 217.60.188.0/24 maxlen: 24
217.60.189.0/24 maxlen: 24
217.60.190.0/24 maxlen: 24
217.60.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:4a:6b:db:7c:5d:02:13:a9:1a:3b:10:67:ca:17:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 16 11:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c110ca0ef3b76480f6b2b349a64603373c25c4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:b4:13:d5:60:14:7a:37:59:ab:8b:a3:20:
60:93:de:a0:48:e8:16:9b:d4:19:fb:a2:f3:af:c0:
66:d4:d0:fe:c9:18:99:5f:1b:fd:ce:06:06:76:e4:
d0:47:4d:09:80:f2:1d:11:74:f7:bb:4d:bc:53:da:
36:a2:9c:75:8d:09:1d:18:a5:b6:43:e2:16:0b:4a:
9e:2a:61:6f:11:cc:5b:a5:ef:72:da:91:ef:63:ec:
dc:f0:0c:8c:37:97:03:60:71:2b:7d:77:b2:c9:b1:
40:64:23:c3:e9:5d:ed:b1:fd:18:49:cb:6c:01:c2:
18:a4:71:48:ae:45:83:01:e0:d9:d7:61:8e:2b:1e:
c3:82:4a:0c:9d:2d:79:12:02:f4:3f:1d:7a:a5:5b:
42:69:19:95:e5:60:49:9a:4c:f2:06:cf:a4:cc:6c:
55:ca:96:53:4d:46:02:7f:3f:53:4d:b6:7f:e2:96:
40:ec:9d:45:39:19:10:69:82:30:0c:23:83:dc:4f:
db:26:be:7e:4e:25:18:78:84:bb:41:f8:52:da:e9:
94:52:b6:0c:36:17:94:db:a8:1e:c6:ea:ec:4c:a0:
e0:c4:4a:4e:18:4e:ea:22:20:22:a1:45:26:2e:7a:
a2:c8:81:c3:0a:46:d2:81:1a:9e:df:d9:09:72:02:
3d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:10:CA:0E:F3:B7:64:80:F6:B2:B3:49:A6:46:03:37:3C:25:C4:A9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wRDKDvO3ZID2srNJpkYDNzwlxKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
76:fd:31:1a:dd:41:65:b7:1d:d4:1c:d8:35:ed:00:39:9a:38:
38:bb:38:a8:53:3e:32:31:5c:9b:b5:29:55:80:18:98:08:d6:
ca:6d:0b:c3:cf:40:ff:35:d8:eb:5b:ca:6d:df:1e:cb:a1:dd:
0f:69:2c:29:cc:82:56:83:f6:09:65:36:04:b0:70:b8:70:71:
be:9a:06:3a:48:03:09:48:53:35:b4:cc:7a:de:c3:0e:43:c9:
18:c3:fd:72:60:9b:be:4e:29:c3:dc:67:2a:b0:95:5d:e3:a4:
01:5a:4c:e0:36:c3:87:77:97:97:04:27:a3:c5:ab:f4:ef:a2:
dc:c2:da:4c:e2:cf:cc:fd:5e:58:89:4c:c8:29:5e:ae:d6:78:
7e:3d:43:aa:f1:fe:b7:a6:8b:e0:5e:5c:4b:c8:e2:b0:97:4a:
b3:af:24:a7:48:45:33:08:81:75:82:38:9d:14:bb:74:d0:6d:
ba:fd:62:50:78:99:b1:a1:ca:ab:2b:e5:a0:89:eb:5d:9b:88:
ac:2a:c9:f2:d7:f2:a5:9b:e0:1b:f5:d2:b4:15:36:9b:44:e1:
11:b8:8e:4c:85:9f:3f:7e:da:c9:1a:43:c5:fe:f7:bb:82:7e:
5a:79:57:d8:7a:aa:0b:0a:c1:e2:14:d0:b1:b0:80:ec:e5:5a:
e9:f0:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:02:10 2026 by rpki-client