Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/SK8oD9dX1pex-XWcg_LOZDDixjk.roa
File: SK8oD9dX1pex-XWcg_LOZDDixjk.roa (raw, json)
Hash identifier: Tr8N/vICSjt7whYDjmOpQ2Z/wmcXO7qKFL1jtEkqVOg=
Subject key identifier: 48:AF:28:0F:D7:57:D6:97:B1:F9:75:9C:83:F2:CE:64:30:E2:C6:39
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01A0D260256B7342927FB0D08E9B8F0CCE17
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/SK8oD9dX1pex-XWcg_LOZDDixjk.roa
Signing time: Thu 24 Sep 2026 07:45:11 +0000
ROA not before: Thu 24 Sep 2026 07:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219142
IP address blocks: 62.60.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:60:25:6b:73:42:92:7f:b0:d0:8e:9b:8f:0c:ce:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 24 07:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48af280fd757d697b1f9759c83f2ce6430e2c639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:6f:fa:61:09:83:25:e6:3f:3b:63:f0:6c:
45:30:c9:db:7f:ae:15:85:e7:be:a7:28:82:18:09:
d7:94:21:a7:d8:46:ba:47:68:2f:ae:f0:1c:a5:3c:
2b:ea:58:f6:b4:36:2a:a2:c0:e1:15:05:e2:d1:68:
a6:d4:53:34:b8:00:ea:01:19:9e:d1:16:01:50:64:
56:15:13:7b:4a:e5:56:23:aa:0f:5e:49:c8:f1:1a:
5c:ff:44:bc:f3:97:95:4f:0d:4b:b0:b3:1c:e3:99:
9f:7e:51:94:97:6a:cf:01:d0:45:fd:80:d2:a4:dd:
da:e2:8a:c7:62:cb:2e:12:03:35:79:ef:8f:1a:c4:
2b:b5:38:6b:dc:d1:f0:f2:15:29:71:66:92:b1:d9:
4f:45:e9:a6:f6:c7:a5:56:68:94:6f:3c:6a:83:71:
ad:8c:cd:fd:28:41:16:a9:55:61:fc:06:fa:41:8c:
72:e8:c5:a5:87:cc:56:cc:c6:07:68:a6:81:c4:e3:
b5:1d:c4:f7:c9:2c:a7:f2:b4:9c:89:de:5e:53:e7:
05:3b:7d:c7:83:d1:4c:2c:19:8a:b5:99:40:f3:62:
3d:ad:f2:e4:7f:5a:1f:82:9b:b6:a0:69:a1:79:c4:
9c:aa:5d:bc:c9:cd:ba:34:d8:db:8e:c3:d1:b3:d6:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AF:28:0F:D7:57:D6:97:B1:F9:75:9C:83:F2:CE:64:30:E2:C6:39
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/SK8oD9dX1pex-XWcg_LOZDDixjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:42:ce:15:26:35:02:4f:e2:7f:4c:58:a7:4e:c6:fc:db:28:
91:2d:dc:cd:42:2f:e2:a1:bf:af:01:81:f3:10:0a:dd:cb:b9:
49:f3:93:16:00:c6:9e:fc:d2:96:0c:b8:7f:34:4a:bf:f6:fb:
e9:dc:0e:84:1a:a0:86:4b:b8:af:94:b7:62:96:fc:2c:e2:cc:
b0:46:32:c2:38:bc:e4:97:95:77:9c:55:5f:19:7e:75:64:c2:
19:e3:4d:58:4e:9c:c2:95:66:e5:50:5f:14:c5:9f:a6:de:7c:
be:9e:e2:b6:cc:7b:d5:03:32:ea:13:fe:3f:01:c0:ba:38:04:
66:54:02:68:77:cc:3a:9e:c2:0d:0f:b2:49:cf:cb:f4:61:a0:
91:09:3d:87:d6:3c:ad:52:21:be:36:97:4c:99:55:56:52:fd:
ce:6e:5f:5f:2a:6d:8c:36:50:f9:bf:0e:86:37:81:c6:e5:bb:
e9:85:60:2a:6a:64:b8:38:61:2f:48:79:74:58:59:40:50:bc:
67:1a:0a:8e:d1:d4:c3:6f:7a:55:7b:e1:82:01:eb:16:83:e8:
5a:ef:ab:3e:03:80:9e:a7:60:dc:6d:12:3f:bb:1c:13:ef:65:
30:65:1d:81:18:c3:7c:c1:a5:b2:2a:5b:6b:19:e8:03:d4:46:
f1:33:77:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDSYCVrc0KSf7DQjpuPDM4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjYwOTI0MDc0NTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGFmMjgwZmQ3NTdkNjk3YjFmOTc1OWM4M2YyY2U2NDMwZTJjNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsdv+mEJgyXmPztj8GxFMMnbf64V
hee+pyiCGAnXlCGn2Ea6R2gvrvAcpTwr6lj2tDYqosDhFQXi0Wim1FM0uADqARme
0RYBUGRWFRN7SuVWI6oPXknI8Rpc/0S885eVTw1LsLMc45mfflGUl2rPAdBF/YDS
pN3a4orHYssuEgM1ee+PGsQrtThr3NHw8hUpcWaSsdlPRemm9selVmiUbzxqg3Gt
jM39KEEWqVVh/Ab6QYxy6MWlh8xWzMYHaKaBxOO1HcT3ySyn8rScid5eU+cFO33H
g9FMLBmKtZlA82I9rfLkf1ofgpu2oGmhecScql28yc26NNjbjsPRs9aXRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEivKA/XV9aXsfl1nIPyzmQw4sY5MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvU0s4b0Q5ZFgxcGV4LVhXY2dfTE9aRERpeGprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjzbMA0G
CSqGSIb3DQEBCwUAA4IBAQBtQs4VJjUCT+J/TFinTsb82yiRLdzNQi/iob+vAYHz
EArdy7lJ85MWAMae/NKWDLh/NEq/9vvp3A6EGqCGS7ivlLdilvws4sywRjLCOLzk
l5V3nFVfGX51ZMIZ401YTpzClWblUF8UxZ+m3ny+nuK2zHvVAzLqE/4/AcC6OARm
VAJod8w6nsIND7JJz8v0YaCRCT2H1jytUiG+NpdMmVVWUv3Obl9fKm2MNlD5vw6G
N4HG5bvphWAqamS4OGEvSHl0WFlAULxnGgqO0dTDb3pVe+GCAesWg+ha76s+A4Ce
p2DcbRI/uxwT72UwZR2BGMN8waWyKltrGegD1EbxM3dv
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:33:50 2026 by rpki-client