Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bjiS4H7aneCD4z0CVjPv59nLzmQ.roa
File: bjiS4H7aneCD4z0CVjPv59nLzmQ.roa (raw, json)
Hash identifier: VQDTkNNZ0IRuGQieZSLu2/qoa4QUbT9XGstT4J6TNT8=
Subject key identifier: 6E:38:92:E0:7E:DA:9D:E0:83:E3:3D:02:56:33:EF:E7:D9:CB:CE:64
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019E160527567AF76A49E17C45366F8F2492
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bjiS4H7aneCD4z0CVjPv59nLzmQ.roa
Signing time: Mon 11 May 2026 07:51:36 +0000
ROA not before: Mon 11 May 2026 07:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213990
IP address blocks: 62.60.134.0/24 maxlen: 24
213.176.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:05:27:56:7a:f7:6a:49:e1:7c:45:36:6f:8f:24:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 11 07:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e3892e07eda9de083e33d025633efe7d9cbce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:50:49:a8:58:76:43:6e:7b:b9:5f:69:ff:
04:41:f0:6a:b1:bd:e6:8a:8d:b4:c8:9e:1d:16:4a:
81:e1:b4:0b:58:8f:07:25:17:6e:54:fb:9a:a2:16:
aa:a1:6a:dd:dd:5b:5e:b7:89:bb:81:03:33:a8:37:
9d:f2:55:09:8a:9d:8d:39:65:ac:68:bb:8a:37:67:
20:b2:ad:5e:24:45:22:bb:be:94:6e:6e:ff:c6:6d:
62:3d:78:f3:4a:9c:f3:58:1b:be:73:6e:87:2d:5d:
59:51:ad:79:e5:55:51:cb:92:a8:8d:98:41:0a:69:
2c:49:1e:bd:b1:f4:14:a3:5b:20:0f:6d:4a:27:53:
11:c8:73:4c:34:e4:76:1b:c3:ed:fd:15:81:05:bd:
6f:6c:2c:47:d8:1e:28:44:2b:9a:0a:26:f8:ef:da:
ff:3b:a7:b3:7a:c6:37:29:80:14:59:5d:f9:32:c0:
ef:08:f3:02:01:e6:5f:b6:54:23:f3:92:1f:95:a0:
55:4f:cc:6f:4f:77:c2:5c:69:86:67:de:7e:32:c1:
b1:a7:ae:c3:c2:60:49:66:d0:e3:0e:1d:89:c4:8b:
f1:c4:6e:d6:35:0a:65:e3:23:42:6d:19:a2:8a:5c:
68:c1:17:5e:67:dc:ce:f9:0a:82:cb:a0:9f:53:14:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:38:92:E0:7E:DA:9D:E0:83:E3:3D:02:56:33:EF:E7:D9:CB:CE:64
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bjiS4H7aneCD4z0CVjPv59nLzmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.134.0/24
213.176.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0b:6f:6f:0d:b2:62:29:18:37:37:96:a2:83:c9:6e:77:c5:
23:41:10:52:3a:40:a4:07:c1:63:c4:7f:51:9e:da:0f:88:97:
c7:88:07:3e:58:18:bd:b5:b4:f1:56:9c:94:66:d4:30:08:8b:
a8:f7:1f:df:aa:2c:29:90:f6:bd:83:34:8d:3a:af:ef:0d:d7:
6d:03:98:f3:32:fb:45:66:d3:da:04:d4:16:d0:73:70:1c:e8:
80:ea:ce:55:d5:42:4a:5c:95:2c:be:3e:af:c5:a6:42:5a:9e:
83:02:06:04:5f:e8:2f:21:f1:ba:95:7a:77:70:3e:d6:03:da:
1e:db:8c:d5:17:35:fa:d1:54:19:cb:7b:1b:58:38:d9:b1:2e:
c9:b3:74:79:b4:a0:f4:f5:6c:b5:56:35:bd:d2:f3:7d:b9:ed:
a0:34:f0:1d:f7:b2:39:83:14:52:c4:42:8f:36:5b:19:5b:14:
78:e7:8e:47:40:f3:13:f8:94:33:02:18:f2:1b:02:95:41:11:
11:bc:72:77:69:39:0b:b5:4e:e4:b1:ba:f3:e3:77:c3:84:a4:
4f:d4:c7:ca:1a:5a:85:e5:a1:f9:94:2e:2e:c1:d3:8f:cf:7b:
ab:d6:af:8d:27:6c:37:9f:b2:cc:5a:15:56:de:71:ec:da:a0:
07:59:e5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:14 2026 by rpki-client