Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4dDulTxFJW0AWS-Ixox0qwmXVRk.roa
File: 4dDulTxFJW0AWS-Ixox0qwmXVRk.roa (raw, json)
Hash identifier: G6KWgug/kyzzy5mJJ4UM2GKjNgTeBz0sFMCmwg+QGrE=
Subject key identifier: E1:D0:EE:95:3C:45:25:6D:00:59:2F:88:C6:8C:74:AB:09:97:55:19
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1D0F393CF45BBB747B5C5EF579756E79E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4dDulTxFJW0AWS-Ixox0qwmXVRk.roa
Signing time: Thu 12 Nov 2026 18:09:46 +0000
ROA not before: Thu 12 Nov 2026 18:09:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26042
IP address blocks: 217.60.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:f3:93:cf:45:bb:b7:47:b5:c5:ef:57:97:56:e7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 12 18:09:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1d0ee953c45256d00592f88c68c74ab09975519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:a0:2c:1a:86:40:d7:e9:cd:2a:20:52:cd:
be:9d:f9:33:09:fa:2c:e3:cb:3e:e8:ea:f7:95:be:
4d:0d:76:c9:e3:fa:dc:71:f4:fe:04:53:7e:13:8c:
02:c5:b3:b6:81:03:b9:6d:b2:51:86:03:ac:c2:b1:
e2:7f:74:08:4e:2f:05:11:21:08:e6:4d:f5:75:92:
ee:45:e1:aa:a1:47:55:c1:50:e7:f3:26:71:f0:cf:
be:64:18:fa:15:1b:3d:ff:c7:d5:c4:c3:cd:d2:05:
88:22:1d:ab:f1:33:bf:c6:f5:4b:7c:1d:3f:ad:da:
7e:2c:43:b0:eb:b4:74:34:59:d8:50:f9:d6:f8:a5:
73:c6:0f:a1:59:d0:a9:1b:f0:3c:24:56:48:db:58:
5d:47:74:be:c1:f5:27:9e:51:0d:0b:8d:d8:78:40:
3f:ec:f6:41:da:63:e6:16:c0:3c:02:f0:02:c5:7b:
30:8d:12:09:f9:2d:f3:78:1e:bc:9a:9c:a3:c3:40:
ce:b7:db:95:6c:5d:c6:7f:82:d3:e5:c4:16:58:21:
6f:fb:fd:85:cc:54:ed:7b:80:da:b2:11:51:c0:c7:
40:29:af:a0:66:83:52:bb:39:11:a3:a1:b7:e9:53:
c5:f4:d0:4e:ff:b8:08:8a:ed:46:bb:4f:0b:f2:ec:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D0:EE:95:3C:45:25:6D:00:59:2F:88:C6:8C:74:AB:09:97:55:19
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4dDulTxFJW0AWS-Ixox0qwmXVRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:89:f5:ad:49:5d:18:1c:d6:4f:64:47:99:52:b7:82:27:29:
b8:b6:68:34:0e:cc:7c:b9:b2:c8:cb:15:3c:a6:c6:c0:be:58:
79:fe:46:75:52:cb:52:d6:e5:16:3f:bf:c5:47:54:7a:fd:0b:
12:8a:83:aa:50:16:48:e1:5c:8e:44:aa:2c:86:82:42:ca:b2:
7e:50:6f:9b:fe:50:04:f6:7f:ef:5f:06:4e:07:73:f1:29:74:
1f:94:de:20:e5:52:29:22:70:b2:36:c4:d7:db:4f:fe:ec:02:
d7:02:fa:a1:0a:b5:d2:40:00:3c:62:74:65:51:b8:ae:67:7f:
f2:2f:e5:75:5f:47:6f:c4:62:32:3d:3b:7c:81:3a:d7:c7:e2:
6d:1f:f3:e1:d9:57:c4:9c:32:b1:46:9f:57:be:47:b1:b5:c1:
da:31:67:10:78:2c:8c:72:af:9c:66:6a:b6:77:fd:30:ad:86:
89:32:b0:96:39:6b:37:cb:83:72:8c:82:9d:22:8e:98:b4:dd:
f9:45:b5:df:ac:14:c3:1b:fb:bd:f1:bf:0c:c0:ef:52:27:3b:
9b:66:90:42:2f:97:01:b0:04:76:09:c4:0c:27:bb:34:85:09:
3a:0d:2d:07:1f:04:88:4b:09:7f:a0:4f:1a:40:e6:30:bc:0d:
3b:d4:9b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:57:00 2026 by rpki-client