Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xpqnuhSAbt3lklFMjQekxFv0hUs.roa
File: xpqnuhSAbt3lklFMjQekxFv0hUs.roa (raw, json)
Hash identifier: yuy0BVrfVxRk+XOysFwOKN/gkNAoG05nDLz/sm1Ja5s=
Subject key identifier: C6:9A:A7:BA:14:80:6E:DD:E5:92:51:4C:8D:07:A4:C4:5B:F4:85:4B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C48D43A78E5ABF27AF74EBBDD10C953A8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xpqnuhSAbt3lklFMjQekxFv0hUs.roa
Signing time: Tue 10 Feb 2026 18:33:13 +0000
ROA not before: Tue 10 Feb 2026 18:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201279
IP address blocks: 217.60.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:d4:3a:78:e5:ab:f2:7a:f7:4e:bb:dd:10:c9:53:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 10 18:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c69aa7ba14806edde592514c8d07a4c45bf4854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:81:1c:be:a6:4d:b4:78:a1:fb:27:c1:10:
72:bc:a9:09:00:f7:c2:ea:0f:b7:52:bb:33:71:84:
a1:d9:9e:7d:2b:2c:a5:88:1d:86:a0:98:a7:33:00:
f3:40:d4:ae:c5:21:40:b1:0c:9c:67:86:7d:0e:54:
ae:4a:7f:89:99:b3:73:b1:ab:fb:c5:9b:27:9b:62:
e7:a5:ae:05:d2:83:90:1c:ed:43:8d:7e:aa:b9:99:
7e:56:4c:ce:85:6c:05:0c:44:f1:c5:46:cf:db:67:
c0:30:4e:c9:7e:69:83:45:07:cc:a2:6f:78:ce:88:
6d:e2:c1:04:4a:93:31:59:11:82:27:2e:60:35:e0:
c3:fb:49:fc:b2:64:19:54:2d:b6:62:4e:d1:bf:0f:
ac:94:8f:56:c9:6f:4e:f0:0d:d7:e8:83:e8:83:85:
8b:e1:1b:18:db:a8:2f:c7:37:26:31:47:42:66:e5:
26:6b:64:70:4b:b2:a1:35:31:6d:f9:10:eb:bb:f1:
44:cc:51:16:72:f0:a7:4d:70:3e:d1:74:37:50:af:
1a:77:8d:c9:ec:2f:ac:d2:ff:0e:82:75:48:9a:1b:
5b:21:54:e9:22:99:56:bc:ba:9f:04:b9:99:bc:7f:
84:f2:fb:b5:ee:44:31:f6:7b:73:89:30:1f:82:c6:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9A:A7:BA:14:80:6E:DD:E5:92:51:4C:8D:07:A4:C4:5B:F4:85:4B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xpqnuhSAbt3lklFMjQekxFv0hUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.245.0/24
Signature Algorithm: sha256WithRSAEncryption
68:db:67:96:19:b3:72:b5:34:ac:aa:f8:ec:f4:23:9f:19:4c:
be:43:8b:7b:e3:f0:a8:bb:38:02:1c:71:47:d3:e6:39:d7:69:
e4:27:c1:c7:32:29:be:da:6d:36:17:32:80:af:ef:2c:0d:97:
4b:a4:17:fa:ef:89:c5:c6:84:0a:b3:51:1a:d6:0e:a6:5e:ff:
c8:9b:97:8c:6d:1a:bd:39:5a:b3:1c:dd:58:f3:92:83:68:db:
a9:d0:6f:bd:0a:75:d3:01:f2:fb:c9:c4:9d:7f:77:6a:17:16:
3f:93:2b:a0:ca:10:5f:72:89:fb:c9:a9:e1:84:54:17:17:dd:
07:aa:bc:77:d7:99:61:b7:0b:4a:6d:13:ca:57:08:bf:11:a4:
33:a5:38:e4:73:b7:6d:93:c5:c4:c7:f1:b6:32:4d:c7:87:5c:
ac:5a:e0:81:84:b1:0c:19:12:61:71:4f:4f:e6:3c:1c:f7:98:
4e:f8:f4:52:ed:84:27:28:82:4c:81:90:88:db:6f:13:da:5c:
66:67:3c:1d:b1:92:55:16:c2:25:a9:d3:4b:25:5b:fe:8b:14:
9d:8f:2e:ef:d6:84:2e:c0:b2:50:47:bb:78:e7:6b:87:f0:0e:
d0:11:52:19:9f:d4:e8:f5:4e:31:0f:89:9b:60:b7:d4:d2:2d:
6a:4c:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:47:42 2026 by rpki-client