Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PxaBHueePlAhXHvtwuv0y0x8OXY.roa
File: PxaBHueePlAhXHvtwuv0y0x8OXY.roa (raw, json)
Hash identifier: S5+YVFkhy8ovxq7enB0UUktGXGlR7pTrjlpbHKX07Z0=
Subject key identifier: 3F:16:81:1E:E7:9E:3E:50:21:5C:7B:ED:C2:EB:F4:CB:4C:7C:39:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D255CBD2355E5CB783E66389CF2FE6FF9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PxaBHueePlAhXHvtwuv0y0x8OXY.roa
Signing time: Wed 25 Mar 2026 14:18:47 +0000
ROA not before: Wed 25 Mar 2026 14:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 217.60.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:5c:bd:23:55:e5:cb:78:3e:66:38:9c:f2:fe:6f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 25 14:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f16811ee79e3e50215c7bedc2ebf4cb4c7c3976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:94:41:f8:0f:31:aa:a6:75:e4:3a:f6:fa:
dc:87:4d:a8:fe:b4:e3:55:6f:80:ae:bb:19:70:f3:
d0:ea:c4:da:d5:e8:28:b2:e9:20:27:1e:17:b6:d6:
df:97:1e:63:0b:53:95:d3:25:15:87:6e:12:de:77:
f9:f2:af:8d:8b:22:4e:fe:e9:e4:f0:23:7f:a3:d6:
e9:1f:b8:1b:6a:d1:27:87:eb:31:fa:5e:f7:65:ef:
2b:bf:20:0a:6d:fc:b9:af:48:47:90:8b:7f:74:06:
2f:92:97:45:e5:e2:db:57:57:7b:f7:cd:85:79:94:
6b:8c:e2:71:3c:82:1c:44:25:06:35:8a:7d:4b:cd:
77:7b:49:e1:83:30:be:22:2c:b4:81:e4:76:3f:bf:
13:9f:7d:e5:eb:b2:3e:91:53:17:0b:7d:0d:0a:fc:
3c:95:5d:5d:fe:83:cd:c6:c3:58:c0:f6:77:2c:bb:
c4:ef:68:99:d5:c7:f3:59:d2:40:40:1a:35:00:9d:
a1:a0:8b:e5:7f:89:d8:54:3c:dc:83:a8:e0:30:1e:
0a:53:1e:18:27:25:ab:25:f9:09:de:9b:58:11:ef:
3b:d6:71:e5:cb:60:de:72:88:12:18:f4:7f:17:a0:
78:56:0b:d8:a4:7a:08:82:0e:53:80:05:63:08:f3:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:16:81:1E:E7:9E:3E:50:21:5C:7B:ED:C2:EB:F4:CB:4C:7C:39:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PxaBHueePlAhXHvtwuv0y0x8OXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:45:97:7e:e2:6e:e8:75:83:d3:e8:23:d4:82:fb:b4:d6:42:
f4:f1:8a:60:48:bc:8e:66:05:5b:7a:06:59:fe:b6:f9:9c:a6:
bd:82:59:4b:dd:78:c6:12:3c:65:d8:e3:30:78:ae:4e:4a:55:
90:62:d7:af:ee:5a:15:97:21:6d:c8:7e:74:01:84:0d:90:1d:
42:46:ef:dd:4e:37:b1:e2:a3:f3:24:47:6b:1e:18:55:bc:8a:
da:75:63:ea:0e:46:0c:2c:c8:6f:50:f6:e3:84:67:82:b3:03:
15:42:c6:68:7b:22:8e:64:75:35:f6:69:cf:87:2c:62:47:f4:
c6:89:0d:71:b4:42:8d:1d:f9:a2:30:2d:d3:29:06:1a:96:19:
03:7b:56:a4:89:a0:be:aa:41:35:61:e2:a9:7b:15:8c:00:2b:
5f:e8:27:bd:5d:18:90:ef:c2:ca:c7:c0:52:1a:36:90:7a:39:
3b:6b:e7:fe:4a:d4:72:9c:f3:9c:c6:43:50:3d:1e:a4:44:fa:
b7:38:0a:2b:59:c8:7a:90:52:bf:1c:6c:eb:70:75:fb:7d:73:
dd:42:e0:34:d1:8b:35:95:64:be:e9:f3:bc:4e:17:7f:08:66:
6e:04:c9:b9:83:ba:2e:05:13:b2:d7:c3:c2:f2:7b:df:bf:bc:
fe:96:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:21 2026 by rpki-client