Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bAJIJgCeGzd9kkw3Ibk8EkhfJw0.roa
File: bAJIJgCeGzd9kkw3Ibk8EkhfJw0.roa (raw, json)
Hash identifier: cJSBQuHnLl7hocS8tYfQ+owa6LXMjeuZ2H6/zeSR5y4=
Subject key identifier: 6C:02:48:26:00:9E:1B:37:7D:92:4C:37:21:B9:3C:12:48:5F:27:0D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019E160526A20C1062CFF0033FF237354FE1
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bAJIJgCeGzd9kkw3Ibk8EkhfJw0.roa
Signing time: Mon 11 May 2026 07:51:36 +0000
ROA not before: Mon 11 May 2026 07:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35372
IP address blocks: 62.60.138.0/24 maxlen: 24
62.60.144.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
62.60.160.0/24 maxlen: 24
62.60.218.0/23 maxlen: 24
213.176.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:05:26:a2:0c:10:62:cf:f0:03:3f:f2:37:35:4f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 11 07:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c024826009e1b377d924c3721b93c12485f270d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:dc:02:ff:ef:0d:a5:4a:21:a3:22:32:da:
7c:a2:1a:65:a8:ba:4f:88:f8:d7:95:4f:14:78:49:
0d:fc:34:0d:48:67:5b:41:5a:87:30:6f:8b:00:18:
2a:62:6d:ce:7f:f3:2f:e8:3e:7d:0e:dd:d0:85:73:
86:30:c9:e6:48:e3:cd:86:2d:46:42:92:74:81:69:
4f:3f:d4:54:ca:1c:0f:ce:81:05:6e:8d:91:ab:a9:
0d:38:ab:0e:40:67:7e:93:d0:29:7a:80:3a:35:fe:
03:1f:e0:f3:f5:0b:c7:e2:ec:3f:fd:bd:32:41:40:
45:f8:73:e0:24:ea:10:82:a9:dc:88:8b:0a:93:e8:
02:7d:9a:ee:62:7e:e4:7b:ef:df:bb:3a:d8:fb:f5:
5b:f4:4b:77:c0:32:da:55:67:21:d5:4a:4d:44:9f:
05:fc:24:a3:b8:60:eb:15:53:66:ec:d8:bb:de:03:
00:c7:96:38:c9:4b:1b:94:0b:13:cc:1f:b2:5c:3e:
0d:87:80:f3:6f:62:4a:3c:66:8e:4c:6a:44:80:b5:
25:fc:5a:01:f8:bd:41:89:be:59:73:6e:10:58:1c:
2c:01:e1:ed:fe:9a:4a:8b:45:2a:19:1f:1d:41:52:
5e:e6:b2:36:8f:4f:ad:53:b2:bd:56:e1:be:33:ff:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:48:26:00:9E:1B:37:7D:92:4C:37:21:B9:3C:12:48:5F:27:0D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bAJIJgCeGzd9kkw3Ibk8EkhfJw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.138.0/24
62.60.144.0/24
62.60.147.0/24
62.60.160.0/24
62.60.218.0/23
213.176.0.0/24
Signature Algorithm: sha256WithRSAEncryption
73:32:14:97:22:9e:1d:ce:0d:b7:65:fb:95:59:3b:71:b3:01:
84:56:96:05:8c:74:e2:4c:80:60:dd:47:6c:62:c6:23:ef:27:
b5:8e:00:d2:8a:e1:5e:20:9e:c1:48:9c:95:5e:3a:e3:4d:1e:
c1:ad:c0:a5:e3:0a:06:79:1a:45:7b:45:04:f5:74:63:4e:54:
f2:f7:f3:6e:11:e3:f6:d4:c5:63:bc:d8:ee:9b:88:0c:6f:42:
b1:3a:e4:10:aa:45:8c:d3:52:c4:96:5c:38:02:01:1c:30:2d:
b3:1b:12:33:5d:1a:f9:50:e5:b5:76:d9:d2:44:97:a4:f8:61:
46:29:3b:46:0c:39:53:ae:d3:e6:2c:32:57:19:3b:e3:aa:9d:
b5:37:dc:30:fb:91:16:e2:d6:28:4a:a2:46:c8:83:10:d1:8a:
e0:41:f3:1f:88:be:94:61:c0:91:e7:7a:d0:c2:7a:25:14:1b:
5a:0c:15:39:0a:2e:5b:ee:02:85:5f:e3:ea:0a:d4:a5:d6:8d:
b5:bb:69:fc:59:54:e9:a7:58:46:44:e3:84:e0:44:76:c0:98:
db:98:a6:ed:60:ab:32:87:7d:57:7d:24:41:19:30:0c:80:e8:
22:a7:fa:9e:1f:bc:66:39:1a:a2:76:33:cf:12:4d:3e:f3:49:
7d:b7:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:44 2026 by rpki-client