Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5YDTdGURNG36KwjQ8IC9I3h0sj4.roa
File: 5YDTdGURNG36KwjQ8IC9I3h0sj4.roa (raw, json)
Hash identifier: DLNcYD2uwVWCLk9uwN71uLoG+taNmOUQVKp0TbP0Vok=
Subject key identifier: E5:80:D3:74:65:11:34:6D:FA:2B:08:D0:F0:80:BD:23:78:74:B2:3E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D0788FCF264AD314D9A339E1A9B504634
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5YDTdGURNG36KwjQ8IC9I3h0sj4.roa
Signing time: Thu 19 Mar 2026 19:18:31 +0000
ROA not before: Thu 19 Mar 2026 19:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 217.60.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:88:fc:f2:64:ad:31:4d:9a:33:9e:1a:9b:50:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 19 19:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e580d3746511346dfa2b08d0f080bd237874b23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:e3:7c:11:00:23:77:4a:26:2b:66:0a:95:
4c:a4:8b:79:9d:51:05:c0:98:96:43:41:c8:49:77:
e3:f3:ff:72:b8:bc:29:29:7a:5f:08:58:14:91:61:
14:e0:f8:6f:ac:53:bc:95:b9:58:5c:01:cd:1d:9b:
cf:2d:c6:b4:5c:a9:dc:2a:59:70:e9:89:7a:af:a7:
9a:b3:23:2c:18:c5:ee:3d:a3:87:e2:52:ee:10:6b:
01:3b:8e:9a:dd:38:f8:c9:51:4e:dd:92:65:c2:1f:
94:02:d3:61:f1:8e:e2:31:4e:28:3d:c0:5e:39:3f:
ad:d3:9e:bc:27:1c:61:61:ba:3d:1b:d5:89:e6:8a:
96:a9:87:75:5a:50:08:43:3e:eb:fb:85:16:e6:8b:
fa:b0:ea:5b:cf:9d:ae:73:ff:21:d3:dc:e6:3e:9e:
76:1e:f7:b6:af:b7:5b:85:c7:1b:2b:d4:9a:3d:14:
b9:35:32:43:9f:5c:ae:57:f3:4b:6d:8a:45:f5:51:
d9:66:f8:ae:20:35:a1:53:46:81:bb:3c:f5:76:be:
b4:76:f5:03:49:5f:ba:2f:e4:6d:35:d3:f2:3b:d7:
3c:67:e8:19:d1:06:24:c3:40:9b:1b:9f:30:b8:e6:
9b:84:00:0f:6b:64:79:e9:2a:2c:c9:f4:6c:04:10:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:80:D3:74:65:11:34:6D:FA:2B:08:D0:F0:80:BD:23:78:74:B2:3E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5YDTdGURNG36KwjQ8IC9I3h0sj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.27.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0e:c2:ba:1b:60:ee:bf:cd:85:85:76:44:27:6d:bc:4b:56:
ac:5e:d7:d0:ce:44:40:64:17:b8:7c:8f:14:36:fd:ca:fa:7c:
6b:b3:0f:ec:b2:23:0f:92:26:4a:78:bf:e0:ee:c6:f8:bb:1a:
72:7e:7c:2b:06:ad:d2:96:b2:15:69:44:e0:bf:dd:b8:ef:71:
5d:b1:e0:26:f9:98:3c:5d:b0:08:4b:88:ae:69:52:d9:7f:d0:
58:83:5a:e4:6b:5e:16:3f:9b:f7:e4:d6:03:32:db:13:6f:da:
34:1b:91:aa:ce:49:54:fe:fa:63:3a:84:3a:fb:78:73:ce:28:
cf:93:a9:ee:41:fa:fc:66:30:65:7d:8b:b9:9a:f1:15:64:0b:
a0:a3:14:cf:3c:a6:9d:3a:d6:23:36:c8:f4:ce:08:94:55:e0:
e2:cd:97:e0:17:6e:41:84:bd:7c:ad:5e:ef:e4:dd:8b:bb:aa:
cf:a7:fc:a6:b4:a1:4c:b8:d0:43:9b:0f:0a:09:97:50:73:cf:
91:94:82:16:a8:a0:2e:54:e1:6e:9d:72:d1:3a:eb:2f:3c:6f:
e8:83:01:b8:2a:14:91:4e:9a:f5:71:a2:ca:d0:a4:75:11:00:
b5:86:3a:5a:bb:3d:32:13:3d:42:ee:84:40:2c:64:fd:8d:53:
c8:2d:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:14 2026 by rpki-client