Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kVgyYttCgxWGyv5kv6nSX_Rc4B8.roa
File: kVgyYttCgxWGyv5kv6nSX_Rc4B8.roa (raw, json)
Hash identifier: i2t3V554euyOXhPlvtgpk8mDfxZ/cYMsCiQbeTe+pH4=
Subject key identifier: 91:58:32:62:DB:42:83:15:86:CA:FE:64:BF:A9:D2:5F:F4:5C:E0:1F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A197686F86FB0C46C55EDD14A0B17F1160
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kVgyYttCgxWGyv5kv6nSX_Rc4B8.roa
Signing time: Sun 01 Nov 2026 13:59:26 +0000
ROA not before: Sun 01 Nov 2026 13:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218261
IP address blocks: 217.60.200.0/24 maxlen: 24
217.60.201.0/24 maxlen: 24
217.60.203.0/24 maxlen: 24
217.60.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:68:6f:86:fb:0c:46:c5:5e:dd:14:a0:b1:7f:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 13:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91583262db42831586cafe64bfa9d25ff45ce01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:c7:23:5c:f4:86:32:79:a9:bc:4a:a3:f4:
8c:5a:41:c5:37:41:e1:a6:a6:db:cf:91:a6:cf:12:
5f:b5:bd:86:90:24:09:85:09:24:4c:58:5d:95:c9:
d5:c8:1a:ed:9c:aa:2c:76:8b:0c:b4:b0:88:ac:75:
f9:3a:66:8f:4a:df:22:b5:7d:fc:a8:15:8f:b6:9c:
44:7d:bd:b5:8b:4d:7c:56:bb:da:b5:1b:52:d1:27:
68:99:f4:8c:09:bd:a8:20:f4:64:22:47:78:bb:f5:
d3:6b:83:05:8e:0c:51:32:49:9d:db:d2:f5:b7:74:
eb:1c:f8:4c:63:cc:2a:d2:08:c3:b5:f8:cf:67:2e:
39:49:d5:59:1f:8a:57:78:e4:31:e2:42:33:37:06:
e6:08:13:7b:a5:62:f2:88:64:b3:7a:70:d1:80:88:
fa:fe:70:86:9a:4e:63:27:88:8c:f6:1f:11:b4:2a:
60:21:b5:04:95:74:92:72:a3:11:55:99:5e:69:2a:
bf:d9:aa:66:ab:ae:22:46:ff:85:6b:58:66:3b:18:
48:85:ad:83:c0:b5:14:71:db:5e:81:91:76:9e:4d:
60:79:2f:56:42:ac:e1:56:4d:c1:55:d2:f2:43:73:
14:4f:14:f1:51:98:be:65:f3:04:b0:8e:99:cf:0c:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:58:32:62:DB:42:83:15:86:CA:FE:64:BF:A9:D2:5F:F4:5C:E0:1F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kVgyYttCgxWGyv5kv6nSX_Rc4B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.200.0/23
217.60.203.0-217.60.204.255
Signature Algorithm: sha256WithRSAEncryption
86:f2:66:b9:4a:43:09:56:f9:1f:3e:1c:d0:4d:16:99:27:42:
7e:a4:3a:f4:17:53:72:ee:01:c4:ab:1a:5d:47:4f:f9:52:f8:
19:a7:b9:c4:02:42:52:2a:bb:5b:6c:d9:e1:93:a2:c9:80:5a:
e0:34:f8:58:5b:64:f8:2b:50:ee:cf:97:4f:6c:8e:c7:a1:bc:
18:28:9b:c2:99:9b:c4:ad:af:f1:61:09:83:f0:54:61:6d:e0:
50:82:bf:a4:71:eb:e4:83:3d:60:8c:2c:6f:47:66:6b:ca:4e:
86:bc:64:a6:ac:3a:d3:50:68:73:d8:ce:6a:67:e2:86:31:d2:
d2:bd:23:04:90:31:0d:d4:39:89:74:f7:a1:4b:e2:a4:88:3d:
ad:bf:33:59:ae:5c:44:89:5c:81:73:80:ca:75:d2:ba:4b:b1:
8d:52:07:e1:68:28:ab:d9:a4:7a:47:cc:cd:23:41:cb:92:da:
7c:fd:96:4e:3a:2f:d4:6a:d9:84:59:e9:7e:32:6b:bd:b0:f0:
ee:f9:b9:5f:3c:be:6d:21:da:31:14:c7:b5:41:c6:16:b5:05:
29:ea:b5:5f:d9:d8:d9:84:68:50:1a:78:cd:49:eb:1d:14:46:
55:f1:69:09:a7:c2:28:e3:bc:5b:56:ba:5f:bc:14:a2:1e:1d:
f1:c1:4a:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:43 2026 by rpki-client