Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mjKBQMmm4qNwTetI_mW9NzqCdxw.roa
File: mjKBQMmm4qNwTetI_mW9NzqCdxw.roa (raw, json)
Hash identifier: 625clzL4wN9g0HYzA1s8ldD4DUtJT+pS6Xu/yEW1Rw0=
Subject key identifier: 9A:32:81:40:C9:A6:E2:A3:70:4D:EB:48:FE:65:BD:37:3A:82:77:1C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F6C730DBEB8B46032CEF523B112EBECF4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mjKBQMmm4qNwTetI_mW9NzqCdxw.roa
Signing time: Thu 16 Jul 2026 19:41:47 +0000
ROA not before: Thu 16 Jul 2026 19:41:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201279
IP address blocks: 217.60.240.0/24 maxlen: 24
217.60.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:73:0d:be:b8:b4:60:32:ce:f5:23:b1:12:eb:ec:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 16 19:41:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a328140c9a6e2a3704deb48fe65bd373a82771c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3b:01:78:70:62:8e:96:85:4d:80:cf:87:b8:
0e:27:69:50:df:75:29:85:4d:1c:de:7e:44:bd:d4:
27:19:86:08:4d:8a:a5:81:a2:a4:3a:e3:6a:c8:e2:
53:5d:e7:90:32:a8:7d:23:32:02:d7:5a:29:e5:08:
f0:f0:a3:ed:6c:4f:58:11:6c:46:19:a9:db:db:0e:
ef:dd:d2:25:75:c9:23:6b:61:47:2f:c0:5d:31:46:
9e:11:e9:35:66:20:9b:d0:da:6e:5e:f0:8c:e4:8e:
01:86:f7:b6:a9:b5:80:df:65:40:64:5a:45:0f:44:
bd:e1:86:5c:32:d6:0e:6b:22:ac:d0:87:6a:09:9c:
66:45:6e:d4:9e:4d:83:df:7c:81:c4:bb:fe:9d:c6:
6e:6a:72:59:25:33:49:27:83:a0:72:59:06:63:5d:
60:be:a0:c1:0b:e6:7d:1d:3e:bd:cb:1c:e7:a3:5d:
45:3c:25:85:25:86:81:8a:4c:b6:4b:4c:9f:04:1e:
92:ec:c1:b3:26:97:5f:65:54:53:a5:a3:5e:e9:ba:
8b:73:d3:00:c0:1c:a6:2b:9d:c2:46:b2:15:58:c0:
8c:45:7b:05:b8:b3:2b:f4:a1:9e:46:3d:eb:6f:9d:
75:37:a6:d2:aa:ae:c6:90:24:d0:61:3f:16:42:f9:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:81:40:C9:A6:E2:A3:70:4D:EB:48:FE:65:BD:37:3A:82:77:1C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mjKBQMmm4qNwTetI_mW9NzqCdxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.240.0/24
217.60.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3b:2c:a1:7d:5a:6e:c4:eb:12:8b:d4:7d:3c:ba:d0:93:41:
ff:9b:53:cc:f3:0b:05:7f:fc:fe:ae:61:1f:c0:46:7b:9a:6f:
e5:ca:f3:84:51:2a:59:46:71:78:1c:4b:91:0a:b1:c1:f0:0d:
96:3e:bf:7e:d6:06:30:c3:db:9a:5b:74:cc:35:5e:f2:08:19:
7a:9f:5c:ad:79:01:a1:79:17:7e:13:00:33:9d:01:54:0d:20:
7b:26:22:d8:07:8e:d2:d6:97:71:37:0f:cc:e1:cd:49:0e:8a:
e0:bf:f2:01:b0:9f:2a:8a:8e:fe:48:f5:e2:52:0e:2e:22:ae:
4a:8d:15:a3:8a:59:3a:9b:bf:5a:cb:cf:f2:7a:e0:e4:b8:95:
0f:01:de:ca:49:21:08:6f:87:e5:93:71:c2:e2:c5:77:e6:bd:
c2:47:e0:ef:c6:cb:cf:99:c7:d2:97:95:32:b7:02:28:11:86:
5b:e7:cc:36:34:9c:21:f5:8a:9f:8f:19:dd:27:ce:30:bd:7e:
2f:c2:71:98:32:2c:ca:9a:e8:f4:c2:cf:51:49:6a:f8:63:c9:
ab:87:a3:e6:69:08:87:85:a2:24:9f:02:cf:c3:55:be:c4:43:
db:2e:21:d9:c6:91:0f:5e:da:8d:03:42:bb:b4:31:78:3d:d3:
e1:45:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:39 2026 by rpki-client