Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l8SdMItNquRs5Gqix07YxPczJ5g.roa
File: l8SdMItNquRs5Gqix07YxPczJ5g.roa (raw, json)
Hash identifier: P1AJPv78Cvp4xX/SSyJm17vZv7zN3RlMJTuJ2atJMJQ=
Subject key identifier: 97:C4:9D:30:8B:4D:AA:E4:6C:E4:6A:A2:C7:4E:D8:C4:F7:33:27:98
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D0FF421CCD3FE8EBC4808EE90A03CE76E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l8SdMItNquRs5Gqix07YxPczJ5g.roa
Signing time: Sat 21 Mar 2026 10:32:30 +0000
ROA not before: Sat 21 Mar 2026 10:32:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213832
IP address blocks: 217.60.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:f4:21:cc:d3:fe:8e:bc:48:08:ee:90:a0:3c:e7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 21 10:32:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97c49d308b4daae46ce46aa2c74ed8c4f7332798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:e0:5a:5f:23:26:9d:48:b0:f9:3b:fd:e7:
50:d5:dc:85:5a:c0:c4:4b:c1:ec:be:2a:dd:43:6f:
26:e1:67:49:6f:70:16:40:7e:45:ac:f9:6a:01:25:
16:1a:3c:48:53:1c:85:83:69:09:f5:42:c5:00:59:
fe:45:cf:57:8d:99:b8:c3:de:a6:e7:78:12:cd:3f:
a7:23:7d:5e:ef:55:6f:68:fe:9f:c9:ba:28:ca:42:
47:2f:10:71:49:ca:e3:48:47:e1:c6:40:64:1a:a2:
86:ca:7f:60:a4:94:af:07:59:f9:a4:32:12:20:b5:
21:d1:00:36:1b:11:d0:a4:b3:ab:20:11:2e:ea:9f:
0b:68:c6:61:d0:78:68:ab:38:7e:c6:da:f3:a5:3f:
53:ef:5e:29:e1:19:0d:14:1f:ef:ce:4c:db:9b:7a:
d3:2f:49:c0:9b:00:30:c2:23:6c:09:30:0c:48:02:
76:5a:92:f1:fa:9b:e0:22:df:79:ef:85:20:53:5f:
df:66:c8:45:d5:50:22:c0:45:c3:1b:57:a2:19:64:
15:b1:19:bf:a7:af:ac:41:13:31:a4:8f:9f:bf:c1:
98:15:69:54:29:b0:9f:27:b4:e8:9a:f4:ac:72:5d:
b1:52:50:b4:a5:c1:30:ef:3a:59:2b:e1:d7:fa:9a:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:9D:30:8B:4D:AA:E4:6C:E4:6A:A2:C7:4E:D8:C4:F7:33:27:98
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l8SdMItNquRs5Gqix07YxPczJ5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.26.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5c:d9:45:63:88:ac:af:a0:f6:37:cb:70:7a:aa:02:b8:fd:
31:ec:b9:61:7d:0e:1f:b5:4a:8d:7f:af:40:31:96:30:c4:5b:
54:f0:87:6b:4a:04:1a:65:ba:bd:8a:ae:d6:cf:d9:67:8c:cc:
b4:b0:f7:91:95:63:8f:1a:d2:4f:94:1f:60:3c:32:4b:f3:a2:
10:65:2a:bc:8e:65:9c:2c:1e:86:6d:93:7a:44:d3:9f:6a:7d:
c5:89:3c:18:2e:fe:2d:b8:f5:53:65:3f:8d:45:4a:e4:40:42:
40:cd:2f:20:ff:b6:6d:15:4b:b6:49:91:31:a4:21:06:b3:ba:
d6:8d:65:42:2a:73:69:43:ef:a8:53:4e:ac:a5:80:db:7d:b5:
7b:7b:d3:9c:c0:e2:dd:19:9f:38:87:58:9f:1c:fc:88:8f:d8:
d3:a4:fd:5a:47:cc:91:b9:63:cc:39:40:09:f8:3d:85:93:9b:
c0:a1:3e:8c:35:1b:11:11:53:8c:42:7a:44:13:bd:02:00:79:
c1:80:d0:b9:82:36:0d:52:f8:c6:ea:7a:3a:c4:62:72:c2:19:
c0:63:d8:4d:07:d3:d8:ab:87:d2:c5:3a:de:bb:fd:e8:ca:91:
45:e8:f0:8a:d3:b6:23:7b:00:69:5f:bf:7e:6d:63:59:38:5e:
fe:21:20:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0P9CHM0/6OvEgI7pCgPOduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzIxMTAzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2M0OWQzMDhiNGRhYWU0NmNlNDZhYTJjNzRlZDhjNGY3MzMyNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoDgWl8jJp1IsPk7/edQ1dyFWsDE
S8HsvirdQ28m4WdJb3AWQH5FrPlqASUWGjxIUxyFg2kJ9ULFAFn+Rc9XjZm4w96m
53gSzT+nI31e71VvaP6fybooykJHLxBxScrjSEfhxkBkGqKGyn9gpJSvB1n5pDIS
ILUh0QA2GxHQpLOrIBEu6p8LaMZh0Hhoqzh+xtrzpT9T714p4RkNFB/vzkzbm3rT
L0nAmwAwwiNsCTAMSAJ2WpLx+pvgIt9574UgU1/fZshF1VAiwEXDG1eiGWQVsRm/
p6+sQRMxpI+fv8GYFWlUKbCfJ7TomvSscl2xUlC0pcEw7zpZK+HX+pqw7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJfEnTCLTarkbORqosdO2MT3MyeYMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbDhTZE1JdE5xdVJzNUdxaXgwN1l4UGN6SjVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2TwaMA0G
CSqGSIb3DQEBCwUAA4IBAQAyXNlFY4isr6D2N8tweqoCuP0x7LlhfQ4ftUqNf69A
MZYwxFtU8IdrSgQaZbq9iq7Wz9lnjMy0sPeRlWOPGtJPlB9gPDJL86IQZSq8jmWc
LB6GbZN6RNOfan3FiTwYLv4tuPVTZT+NRUrkQEJAzS8g/7ZtFUu2SZExpCEGs7rW
jWVCKnNpQ++oU06spYDbfbV7e9OcwOLdGZ84h1ifHPyIj9jTpP1aR8yRuWPMOUAJ
+D2Fk5vAoT6MNRsREVOMQnpEE70CAHnBgNC5gjYNUvjG6no6xGJywhnAY9hNB9PY
q4fSxTreu/3oypFF6PCK07YjewBpX79+bWNZOF7+ISBQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:24 2026 by rpki-client