Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hrNnx6gbsu6xzwcQQDMFuFrQrPo.roa
File: hrNnx6gbsu6xzwcQQDMFuFrQrPo.roa (raw, json)
Hash identifier: UwwJgFwCiksJ2k/BQOXMRXjssge7Vu3umHzxrWkDUL0=
Subject key identifier: 86:B3:67:C7:A8:1B:B2:EE:B1:CF:07:10:40:33:05:B8:5A:D0:AC:FA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1B03ADB34848FEDFA4AEA0377BA5FEE6E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hrNnx6gbsu6xzwcQQDMFuFrQrPo.roa
Signing time: Fri 06 Nov 2026 09:40:09 +0000
ROA not before: Fri 06 Nov 2026 09:40:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209274
IP address blocks: 217.60.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:3a:db:34:84:8f:ed:fa:4a:ea:03:77:ba:5f:ee:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 6 09:40:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86b367c7a81bb2eeb1cf0710403305b85ad0acfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:75:f8:4b:ff:83:b4:34:ad:6e:79:4c:4b:
98:4c:70:b2:e3:bf:3a:a3:72:df:43:7c:3b:74:0a:
a3:bf:b0:80:ba:14:66:de:c1:d2:6b:d2:65:ae:c5:
91:c0:71:4e:9c:ed:72:38:53:2d:fd:91:00:69:cc:
ad:61:fb:c5:6d:27:fd:8c:ee:57:75:b9:ef:98:60:
4c:47:2e:55:bb:ff:de:8f:91:ed:50:38:d3:63:a0:
2e:e8:4c:66:0a:0a:b1:8c:79:74:5d:3d:8b:15:e7:
a4:59:88:60:d4:1f:08:f7:df:53:e1:0c:05:ae:fe:
19:be:46:e3:64:aa:50:2e:7d:75:64:86:40:b6:a9:
f8:e1:c3:93:70:5a:b6:55:09:5c:75:71:b9:cd:5d:
e0:2e:fa:c9:54:b7:18:36:d3:9f:41:6d:10:e9:f0:
51:23:b2:c2:38:9f:c4:e3:1e:25:18:8c:df:e5:61:
2a:f5:e3:1f:0f:56:9c:2b:87:c4:0c:86:3d:03:89:
e7:2a:1f:10:ac:fe:82:c5:a6:26:51:bc:a7:74:36:
87:42:b3:dc:04:37:59:b4:b6:ec:4c:8c:2d:7c:61:
4e:54:86:f9:e8:b7:86:3c:c1:59:96:8e:0f:6a:ad:
40:69:df:d9:5a:e8:dd:25:25:ec:d7:d5:a7:40:02:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B3:67:C7:A8:1B:B2:EE:B1:CF:07:10:40:33:05:B8:5A:D0:AC:FA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hrNnx6gbsu6xzwcQQDMFuFrQrPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.199.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ab:c8:27:80:7f:c1:6a:e5:06:d2:8e:76:e1:cb:83:4c:cd:
9d:e3:ec:1d:ec:50:ff:8f:c4:54:7b:29:41:74:df:8d:92:cb:
79:9b:1b:18:af:bf:19:da:e5:22:ab:47:40:e0:7d:2e:f1:98:
c2:5b:eb:cc:70:ee:87:5a:83:b9:d4:99:a2:e4:f1:c1:84:f0:
57:62:13:23:e4:07:b0:92:af:e3:93:aa:c8:5a:97:04:56:64:
94:a0:1f:be:e3:ff:5a:94:ad:f1:95:ca:af:dd:c7:c4:ef:3d:
41:d3:52:7b:d6:1f:42:32:e3:63:31:1a:71:80:e5:6f:12:f9:
25:e0:40:ab:64:00:38:0c:05:58:9d:0f:61:ef:f2:1f:07:1e:
20:e1:96:a6:de:e6:55:9c:16:5f:4d:40:55:63:a0:b8:64:8e:
b6:d0:69:7c:f6:7d:fd:ff:81:97:2c:fb:51:69:37:75:9d:30:
8b:f6:69:71:df:c6:a8:24:02:b0:67:91:93:a1:4a:7c:47:49:
72:92:28:08:59:c8:e0:82:6b:35:2a:d3:59:b9:90:85:16:4e:
2b:61:02:6a:7b:e8:38:13:e4:74:e3:32:0d:49:f4:21:9f:f9:
4b:ba:d8:ed:69:40:0d:69:81:8e:d5:fe:d6:66:a0:98:da:fb:
5a:89:00:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGwOts0hI/t+krqA3e6X+5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTA2MDk0MDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmIzNjdjN2E4MWJiMmVlYjFjZjA3MTA0MDMzMDViODVhZDBhY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ud1+Ev/g7Q0rW55TEuYTHCy4786
o3LfQ3w7dAqjv7CAuhRm3sHSa9JlrsWRwHFOnO1yOFMt/ZEAacytYfvFbSf9jO5X
dbnvmGBMRy5Vu//ej5HtUDjTY6Au6ExmCgqxjHl0XT2LFeekWYhg1B8I999T4QwF
rv4ZvkbjZKpQLn11ZIZAtqn44cOTcFq2VQlcdXG5zV3gLvrJVLcYNtOfQW0Q6fBR
I7LCOJ/E4x4lGIzf5WEq9eMfD1acK4fEDIY9A4nnKh8QrP6CxaYmUbyndDaHQrPc
BDdZtLbsTIwtfGFOVIb56LeGPMFZlo4Paq1Aad/ZWujdJSXs19WnQAJVnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIazZ8eoG7Lusc8HEEAzBbha0Kz6MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaHJObng2Z2JzdTZ4endjUVFETUZ1RnJRclBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2TzHMA0G
CSqGSIb3DQEBCwUAA4IBAQBBq8gngH/BauUG0o524cuDTM2d4+wd7FD/j8RUeylB
dN+Nkst5mxsYr78Z2uUiq0dA4H0u8ZjCW+vMcO6HWoO51Jmi5PHBhPBXYhMj5Aew
kq/jk6rIWpcEVmSUoB++4/9alK3xlcqv3cfE7z1B01J71h9CMuNjMRpxgOVvEvkl
4ECrZAA4DAVYnQ9h7/IfBx4g4Zam3uZVnBZfTUBVY6C4ZI620Gl89n39/4GXLPtR
aTd1nTCL9mlx38aoJAKwZ5GToUp8R0lykigIWcjggms1KtNZuZCFFk4rYQJqe+g4
E+R04zINSfQhn/lLutjtaUANaYGO1f7WZqCY2vtaiQDy
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:56:45 2026 by rpki-client