Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-mxc2c80uja2edoMaI0_U6Qk-fM.roa
File: 1-mxc2c80uja2edoMaI0_U6Qk-fM.roa (raw, json)
Hash identifier: g9EwCW4e2vkZeGKW6arh2TiHIr0zhl17Eg2XVys+7Co=
Subject key identifier: FA:6C:5C:D9:CF:34:BA:36:B6:79:DA:0C:68:8D:3F:53:A4:24:F9:F3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199C2A3CFF467ABF1E34166A390987C0DEA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-mxc2c80uja2edoMaI0_U6Qk-fM.roa
Signing time: Wed 08 Oct 2025 07:05:39 +0000
ROA not before: Wed 08 Oct 2025 07:05:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205536
IP address blocks: 217.60.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:a3:cf:f4:67:ab:f1:e3:41:66:a3:90:98:7c:0d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 8 07:05:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa6c5cd9cf34ba36b679da0c688d3f53a424f9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:c6:e3:c9:a1:c1:22:b5:29:a8:39:2a:75:
0a:bc:96:79:58:3d:f9:3d:24:67:6b:68:2b:c3:b2:
53:c8:6f:6a:60:18:11:ff:c4:18:a6:d8:17:c0:48:
fc:38:65:0c:8e:d9:7a:60:70:83:49:04:35:5a:9e:
d2:70:4d:08:54:bd:80:b4:1b:33:b6:e1:1f:8f:db:
eb:e9:d2:11:23:27:71:80:68:a0:ab:ed:cb:24:e4:
9b:05:c5:16:fb:43:34:12:ea:57:ba:e3:25:77:d6:
83:e6:4b:df:34:02:3c:dc:42:69:c7:ac:b7:ed:31:
bf:55:a2:26:0d:0f:20:47:86:ac:fa:45:61:b1:fe:
3a:aa:d6:94:5c:9a:aa:5d:fa:f8:c7:87:6d:f7:8b:
57:2d:ec:85:09:a1:a0:75:d7:45:67:74:2e:c1:5f:
9b:b6:00:7c:ac:ff:5f:65:8f:de:ad:cf:6a:28:f7:
89:27:b4:60:73:44:c3:ec:4b:96:d9:af:31:19:1f:
ba:6e:aa:ab:5e:06:d7:15:46:1d:7b:2a:b6:29:9e:
35:62:a7:3d:3d:db:b4:6d:02:c7:34:b6:f9:99:12:
b1:6f:82:04:93:45:01:ac:99:88:ac:70:e4:4c:e4:
95:1a:ea:ec:8d:14:71:78:ba:5d:d2:3e:17:fd:dd:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:5C:D9:CF:34:BA:36:B6:79:DA:0C:68:8D:3F:53:A4:24:F9:F3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-mxc2c80uja2edoMaI0_U6Qk-fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c1:9f:63:ae:84:bb:48:43:da:a5:4f:e3:7b:76:e7:1c:75:
65:b0:71:56:cb:71:71:c3:8f:29:fe:52:d4:25:d6:bc:60:78:
5d:f2:bf:e0:31:c0:2a:75:7c:13:88:e3:5a:54:1b:a2:96:cd:
81:b0:8a:ab:18:f9:54:fd:38:da:79:6d:36:e0:b6:31:32:5c:
a6:8b:a6:a0:24:4f:cd:34:7f:3a:b3:9e:94:bf:0f:20:fc:6e:
17:2f:b2:69:28:62:33:f2:aa:a1:b4:8a:b3:7f:6b:93:ac:d3:
63:9d:cc:fa:5b:9c:9f:34:65:48:6c:f5:f2:ec:da:c9:61:b8:
f6:57:28:fa:42:5e:4e:4c:9c:25:b7:da:d2:50:8b:0e:91:d7:
15:9b:f6:44:b7:8f:dd:fb:e8:d0:67:2e:e4:a1:fc:ff:75:ba:
76:8b:50:08:fd:47:af:3b:e0:19:71:f3:24:81:84:09:0b:bf:
e0:e1:8a:37:48:6a:08:39:2d:f2:c3:84:fd:26:0f:b1:e5:9f:
18:dd:cf:3c:c2:55:cb:7c:79:bd:a7:60:9c:17:e6:64:c7:04:
30:a3:16:2d:9b:ea:6d:98:a3:2f:97:14:e0:36:4c:ba:2d:5b:
4c:f0:ef:bf:98:0a:02:78:36:98:85:8f:df:0f:d7:2f:30:d0:
18:cf:15:92
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZnCo8/0Z6vx40Fmo5CYfA3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMDA4MDcwNTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTZjNWNkOWNmMzRiYTM2YjY3OWRhMGM2ODhkM2Y1M2E0MjRmOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C/G48mhwSK1Kag5KnUKvJZ5WD35
PSRna2grw7JTyG9qYBgR/8QYptgXwEj8OGUMjtl6YHCDSQQ1Wp7ScE0IVL2AtBsz
tuEfj9vr6dIRIydxgGigq+3LJOSbBcUW+0M0EupXuuMld9aD5kvfNAI83EJpx6y3
7TG/VaImDQ8gR4as+kVhsf46qtaUXJqqXfr4x4dt94tXLeyFCaGgdddFZ3QuwV+b
tgB8rP9fZY/erc9qKPeJJ7Rgc0TD7EuW2a8xGR+6bqqrXgbXFUYdeyq2KZ41Yqc9
Pdu0bQLHNLb5mRKxb4IEk0UBrJmIrHDkTOSVGursjRRxeLpd0j4X/d09rQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPpsXNnPNLo2tnnaDGiNP1OkJPnzMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMS1teGMyYzgwdWphMmVkb01hSTBfVTZRay1mTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTIvNTExZjk1LWU0YmYtNDNmMS1hZjJmLWI4MTFjZmNiOWZk
NS8xL1R4c0pYNnRuWXp3Qko5WWY5b1Y0Wk9wckpjVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANk88DAN
BgkqhkiG9w0BAQsFAAOCAQEAjMGfY66Eu0hD2qVP43t25xx1ZbBxVstxccOPKf5S
1CXWvGB4XfK/4DHAKnV8E4jjWlQbopbNgbCKqxj5VP042nltNuC2MTJcpoumoCRP
zTR/OrOelL8PIPxuFy+yaShiM/KqobSKs39rk6zTY53M+lucnzRlSGz18uzayWG4
9lco+kJeTkycJbfa0lCLDpHXFZv2RLeP3fvo0Gcu5KH8/3W6dotQCP1HrzvgGXHz
JIGECQu/4OGKN0hqCDkt8sOE/SYPseWfGN3PPMJVy3x5vadgnBfmZMcEMKMWLZvq
bZijL5cU4DZMui1bTPDvv5gKAng2mIWP3w/XLzDQGM8Vkg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:15 2025 by rpki-client