Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cHyypo8sEm_9mvTilzww07jNybs.roa
File: cHyypo8sEm_9mvTilzww07jNybs.roa (raw, json)
Hash identifier: 7Gsj9MMaJLvC3UtAhoYIH7FcocrIBpTcDvI58Yiqzu0=
Subject key identifier: 70:7C:B2:A6:8F:2C:12:6F:FD:9A:F4:E2:97:3C:30:D3:B8:CD:C9:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F090914CA06F2A6CEFED435AD425F3C09
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cHyypo8sEm_9mvTilzww07jNybs.roa
Signing time: Sat 27 Jun 2026 12:23:37 +0000
ROA not before: Sat 27 Jun 2026 12:23:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213900
IP address blocks: 217.60.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:09:14:ca:06:f2:a6:ce:fe:d4:35:ad:42:5f:3c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 27 12:23:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=707cb2a68f2c126ffd9af4e2973c30d3b8cdc9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:a8:aa:0c:a2:40:39:76:c6:20:52:3a:f8:
67:14:af:b9:16:d0:ba:45:b2:32:6d:a9:a2:ae:36:
00:4f:5d:d0:2e:53:13:9b:56:09:ed:4b:44:e3:8e:
c4:f6:11:56:a5:b3:22:00:f8:11:2b:e5:48:84:1a:
10:63:89:61:af:23:eb:8a:5c:0d:5d:55:3f:e7:cb:
14:ab:6e:ae:35:9d:08:a3:8a:99:cc:8c:c4:16:dc:
b3:8d:4c:1e:72:ee:1a:99:c7:b5:24:cf:28:b7:a4:
f4:d2:5e:a3:57:2f:fb:47:87:11:3b:1a:e0:82:33:
6f:1b:dc:ac:20:c2:46:a5:0e:68:27:e7:e6:ba:31:
55:47:7d:19:5f:9d:de:79:8a:91:af:5b:82:15:6a:
99:03:f0:9e:28:b8:78:8d:bf:1a:71:8b:85:63:49:
cc:1d:2e:bd:05:ce:ed:37:62:76:13:5f:a6:6a:d9:
bf:ab:32:21:36:3e:bc:e2:4a:75:79:bf:c1:7e:91:
16:75:3f:b2:03:ab:1b:fe:f8:24:6f:2b:ba:49:84:
f7:bb:cd:d1:19:fb:c9:23:22:85:a9:97:34:ac:4e:
f7:f2:01:76:d7:f1:22:dd:6e:5b:9e:91:21:e1:e4:
a8:d0:b0:69:ba:31:fd:1d:63:89:bd:fc:44:60:78:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7C:B2:A6:8F:2C:12:6F:FD:9A:F4:E2:97:3C:30:D3:B8:CD:C9:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cHyypo8sEm_9mvTilzww07jNybs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0e:ac:26:f4:6a:d7:37:a4:2d:30:2b:54:c3:f7:67:e9:56:
84:31:c8:c2:aa:44:f9:0b:d7:da:80:22:3b:a7:0f:37:48:52:
a7:ed:29:ef:38:98:0c:ba:37:19:69:f7:4c:ad:5b:3a:87:67:
68:d4:d3:2a:ab:aa:ba:64:85:b6:b0:b2:f1:b1:52:5e:44:93:
20:76:0e:01:54:d5:ba:9d:d7:72:d7:ff:3c:d7:2a:9b:76:ba:
b3:1c:ab:3a:b1:38:e9:07:e9:78:29:38:21:3d:47:8b:b9:18:
64:74:b7:a2:c5:1d:93:6f:f2:f7:c0:4b:67:4e:70:a6:7e:00:
bd:74:c9:0f:40:24:64:1c:8a:c3:c6:3f:2e:7f:7c:1e:27:53:
8a:90:9d:25:2b:48:db:53:14:15:e9:2c:b1:f3:5e:1f:95:e4:
6b:8f:fd:f5:b3:ab:6c:1a:ac:34:1a:d3:c3:1b:43:bd:f7:0e:
34:3f:0a:68:8c:59:01:48:e2:ce:c7:0a:d2:22:68:92:5c:73:
1e:35:58:18:d7:a0:d0:de:17:c9:94:cb:31:8d:9e:d9:70:4a:
f7:6f:5e:e6:0a:b3:78:2a:94:98:95:0b:5e:5d:85:99:2f:4f:
81:d4:a2:23:ec:b4:09:41:50:95:90:1d:82:19:17:9a:4c:2c:
d5:0d:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:47 2026 by rpki-client