Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dGFuDT91Ri1chIadL-q0ayzZIfg.roa
File: dGFuDT91Ri1chIadL-q0ayzZIfg.roa (raw, json)
Hash identifier: R/2vckpGJrAQX61NzYfM+vWzMxZeUKbNIiIBT1NrAPM=
Subject key identifier: 74:61:6E:0D:3F:75:46:2D:5C:84:86:9D:2F:EA:B4:6B:2C:D9:21:F8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019E1AEF16DC3AE4D4268E9A7026763D5AF6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dGFuDT91Ri1chIadL-q0ayzZIfg.roa
Signing time: Tue 12 May 2026 06:45:37 +0000
ROA not before: Tue 12 May 2026 06:45:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213852
IP address blocks: 62.60.191.0/24 maxlen: 24
62.60.194.0/23 maxlen: 24
62.60.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:ef:16:dc:3a:e4:d4:26:8e:9a:70:26:76:3d:5a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 12 06:45:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74616e0d3f75462d5c84869d2feab46b2cd921f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:ea:cb:4b:19:55:32:c2:77:b6:29:84:03:
8c:07:dd:a8:f3:aa:b5:c2:cc:14:49:10:bb:42:03:
b9:b6:58:ad:e3:85:12:9d:d8:2e:dd:43:4b:00:31:
8b:48:d1:9e:16:71:8d:f7:d2:be:66:15:59:2a:97:
3e:0e:b7:c0:fd:d8:fb:26:47:17:1b:04:ac:fb:03:
04:61:db:8d:60:6a:67:66:1a:84:59:ad:f3:f3:bd:
ee:dd:99:2f:3a:bb:03:85:73:06:5e:26:6b:ba:d1:
e6:ea:0f:ce:58:b1:b6:cc:5f:13:c0:ab:60:fe:cd:
55:ac:99:f4:76:8e:bc:cb:ab:9c:eb:95:33:88:07:
42:54:83:62:52:0f:9f:3e:0c:99:4a:64:28:f4:b6:
cc:84:70:a2:eb:e7:db:08:26:15:84:a4:02:dd:f1:
7a:e1:02:76:f9:9b:0e:66:32:6a:b1:6c:cc:36:9c:
03:bf:7b:c9:66:17:59:a8:9e:e7:40:4a:4a:3a:f2:
3c:0f:38:37:29:d2:5a:ab:06:d5:c6:bc:75:f1:74:
aa:72:ff:11:47:ab:23:6d:11:58:00:ce:6d:d9:94:
83:3b:51:44:75:85:bc:aa:71:66:7e:ec:74:a6:d7:
af:56:73:2e:dc:d9:e8:64:ef:bd:80:f8:b8:c9:fc:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:61:6E:0D:3F:75:46:2D:5C:84:86:9D:2F:EA:B4:6B:2C:D9:21:F8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dGFuDT91Ri1chIadL-q0ayzZIfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.191.0/24
62.60.194.0/23
62.60.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e1:c6:b7:56:87:1c:c7:bd:52:ff:64:af:03:4f:3b:cb:dd:
aa:fb:7a:a3:70:1b:31:99:7d:cd:c3:aa:3d:0f:fe:28:60:81:
a8:95:8c:92:56:af:2a:1a:81:19:04:ea:f1:e6:56:7a:cc:75:
cd:c2:f6:f8:da:00:a4:32:02:a9:4d:53:c8:dd:73:2a:e8:ae:
15:33:ab:90:48:29:63:4f:10:59:a5:1d:c1:6e:4f:4d:df:0e:
1f:b8:b7:74:42:bd:3b:3e:a0:a0:a1:d8:b2:69:70:40:31:c2:
cd:6e:09:5f:56:ea:2d:0c:f2:57:3c:3b:9b:76:32:fa:59:aa:
51:30:e8:14:e3:6f:ed:ec:eb:03:23:df:55:f9:b1:03:03:28:
af:64:2b:c6:d4:d2:bd:a3:aa:bd:62:8e:af:a0:3d:21:22:fc:
08:5c:8d:c4:a2:19:f7:87:0b:0f:7d:7d:d6:2b:72:21:29:34:
12:60:e8:f9:49:52:62:85:85:05:2a:d7:7a:90:6e:bb:c4:76:
95:d8:13:ff:5b:34:43:a8:c9:03:7b:05:3f:15:9f:1b:c4:76:
f8:1e:29:50:ab:8b:a0:b7:eb:ec:9a:d0:f1:54:0b:c6:78:39:
05:7b:85:7e:8d:97:f2:04:3a:1b:da:d4:9f:32:9a:e3:44:05:
4c:b1:18:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:38 2026 by rpki-client