Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RwQxQL92TNUGn2WyBiaB-pwEYdM.roa
File: RwQxQL92TNUGn2WyBiaB-pwEYdM.roa (raw, json)
Hash identifier: 10sEW7HifWeq4olC+tBqGLuYff9IyEi8YkErP/S+PUs=
Subject key identifier: 47:04:31:40:BF:76:4C:D5:06:9F:65:B2:06:26:81:FA:9C:04:61:D3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01A1C3F8C807F797918DB593C93D098D6D44
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RwQxQL92TNUGn2WyBiaB-pwEYdM.roa
Signing time: Tue 10 Nov 2026 05:40:23 +0000
ROA not before: Tue 10 Nov 2026 05:40:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219142
IP address blocks: 62.60.160.0/24 maxlen: 24
62.60.161.0/24 maxlen: 24
62.60.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:f8:c8:07:f7:97:91:8d:b5:93:c9:3d:09:8d:6d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 10 05:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47043140bf764cd5069f65b2062681fa9c0461d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:c3:b5:4c:07:53:27:38:c5:d8:8f:fa:b9:
d8:e5:cd:4f:b4:69:96:67:b0:ef:00:52:e5:57:28:
b1:a0:68:45:2d:bc:d8:41:78:9a:7b:bf:0e:43:fc:
39:74:55:97:a6:1a:11:b3:ad:6b:60:71:b1:2c:9c:
85:8b:51:29:b8:b7:32:8d:fa:ea:c4:08:16:c9:08:
42:ac:b6:64:63:15:61:e7:4e:e2:6f:34:2a:1d:3b:
4d:93:4c:10:bc:bd:b9:91:01:29:e9:d4:5d:65:f7:
7c:ee:e9:df:9c:01:83:95:ba:03:04:c0:9f:60:be:
b5:ac:52:6e:7d:23:0e:34:03:1f:0f:92:2d:d4:80:
3e:ea:51:d0:bc:9d:a6:b5:1f:bb:41:71:33:57:91:
04:52:79:6c:2b:5d:8d:a1:8d:00:20:20:f7:0b:22:
2d:99:66:52:f2:fd:e0:6a:ac:ab:72:05:f3:2c:87:
0e:9d:af:9f:bb:4f:e5:d9:d2:c1:a1:f7:10:32:35:
63:64:56:de:c9:a0:30:ed:8e:73:eb:0e:b9:ee:ca:
f9:ec:6d:b2:b4:8c:9f:43:69:14:c4:85:50:5e:f2:
e1:1c:80:ec:ed:b8:e0:18:30:9a:3b:a1:34:32:6a:
3e:d5:e9:97:8e:b8:78:bc:d2:3d:49:dd:5d:8c:2e:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:31:40:BF:76:4C:D5:06:9F:65:B2:06:26:81:FA:9C:04:61:D3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RwQxQL92TNUGn2WyBiaB-pwEYdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.160.0/23
62.60.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ff:d7:40:45:05:2f:a1:37:4c:5b:f5:94:ad:55:3c:35:54:
3e:61:43:db:f1:98:08:57:6e:b6:22:c8:99:3c:2b:3a:ab:b2:
c4:94:e9:86:58:7c:72:a8:86:2c:76:a8:67:cd:6c:36:48:43:
e5:83:5b:67:ca:4a:a8:c2:91:3c:87:ff:6e:5f:50:d1:22:cb:
21:75:02:34:27:94:6a:6a:c8:72:33:12:0a:f5:87:8e:20:f1:
74:af:f1:18:59:2b:c1:e0:f4:1a:d0:b7:74:9c:f5:94:76:28:
8d:64:03:a0:43:cf:c9:dd:12:07:83:b1:af:e8:9e:14:31:95:
5a:22:eb:5b:23:0c:2f:53:98:92:7c:8a:61:57:f2:70:f6:d4:
1f:34:d4:4e:3e:31:59:35:0d:1f:94:33:d6:61:cc:de:c2:f5:
1b:d4:2c:64:93:2d:00:e9:ae:5f:6a:8a:4b:33:9a:d0:a2:74:
86:0f:1f:d1:d4:98:1f:df:e4:0a:a3:c6:58:87:c5:3d:b8:36:
78:fd:ea:1a:5a:a7:17:df:1c:5c:14:b0:d2:f2:be:7b:59:10:
13:2f:1b:12:82:3c:e4:0a:cf:21:36:1e:4d:6b:04:f6:0c:6f:
a0:fa:0e:ca:d9:6e:10:b1:4d:4c:2d:29:33:46:1b:38:ca:5b:
30:d8:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:03:09 2026 by rpki-client