Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/r3KnjuQsnWpC1dAcPJRrEp1ES9k.roa
File: r3KnjuQsnWpC1dAcPJRrEp1ES9k.roa (raw, json)
Hash identifier: 1ho83QZbgxuJ01RteT2n8baUln/J2lODsNy/wNYdTI8=
Subject key identifier: AF:72:A7:8E:E4:2C:9D:6A:42:D5:D0:1C:3C:94:6B:12:9D:44:4B:D9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E0682A4395AE4445A41668634FF4CE4E6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/r3KnjuQsnWpC1dAcPJRrEp1ES9k.roa
Signing time: Fri 08 May 2026 07:34:45 +0000
ROA not before: Fri 08 May 2026 07:34:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 217.60.128.0/19 maxlen: 24
217.60.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:82:a4:39:5a:e4:44:5a:41:66:86:34:ff:4c:e4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 8 07:34:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af72a78ee42c9d6a42d5d01c3c946b129d444bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:70:db:60:67:a7:df:83:03:f3:1c:01:1d:
14:bb:08:6a:cd:f7:5d:36:3b:d7:ec:15:bb:c1:02:
3f:fa:ed:04:18:c9:7b:f6:17:ef:47:91:c7:a2:b4:
91:07:d5:1f:98:0d:f9:d7:b5:6d:6c:e1:47:49:9a:
3b:a9:fc:27:c1:67:25:ad:4a:24:81:90:37:0f:64:
9e:10:18:95:22:24:41:34:c1:f1:ab:24:4c:22:d1:
bc:dc:af:13:93:88:6d:cc:39:74:12:33:54:6f:66:
a2:15:1b:b4:be:d1:f4:96:00:c1:a3:74:93:b6:7d:
8a:83:31:62:73:df:b6:27:2c:ac:f7:ef:26:4c:33:
cc:e0:5b:d7:a4:ba:fa:21:75:be:c1:95:e1:6a:93:
ba:45:cd:c4:d1:74:3f:62:4f:b1:17:ce:be:2d:1e:
cd:2e:63:d5:be:bf:4c:dc:cd:41:14:0f:f0:a2:af:
35:eb:d7:4a:a8:6f:2e:a8:c3:02:6a:aa:f3:0c:49:
84:51:51:f8:ca:f7:54:84:b3:7f:25:4f:9e:88:64:
09:20:60:ed:56:40:61:70:c3:ce:a2:fd:19:2c:37:
df:d1:ba:ce:c9:be:ae:2b:94:eb:34:0e:1d:eb:de:
c9:9c:f2:4d:2e:3f:1d:1d:07:55:f7:7a:65:2b:63:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:72:A7:8E:E4:2C:9D:6A:42:D5:D0:1C:3C:94:6B:12:9D:44:4B:D9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/r3KnjuQsnWpC1dAcPJRrEp1ES9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:64:44:33:8a:77:49:ec:19:fc:aa:e2:17:37:2c:00:a0:56:
84:d0:86:08:58:10:fe:a2:ee:d9:b5:65:93:db:6b:3c:c7:36:
97:c9:f5:56:a1:fd:5e:6a:1e:f3:60:5a:db:7c:ef:75:8c:54:
b5:f7:d5:5a:f4:40:32:47:54:80:d3:8c:20:55:11:bc:93:a8:
9b:f7:e1:6b:f2:dc:bc:51:78:91:d5:a8:b1:3d:ed:5d:b1:48:
50:32:7d:af:45:63:b7:cb:eb:1b:2b:cf:6c:68:ce:30:1d:45:
7a:7c:75:45:0b:a2:aa:f6:8e:2c:8e:fc:61:80:03:ad:76:5b:
22:7f:9e:b2:2a:f1:08:23:53:02:e1:ba:c3:69:10:e3:4b:9a:
9c:5a:7b:85:8b:14:7c:28:11:d1:07:d0:9a:83:52:c4:fb:3f:
96:61:52:4b:2c:64:e4:39:75:05:1b:b9:37:22:da:9f:cf:b0:
9f:0f:27:f1:13:b8:2c:64:4a:7e:c9:a1:d9:47:f0:19:c2:f9:
68:ca:96:8c:77:28:e9:f0:24:45:cc:d5:de:00:98:42:a1:28:
48:ba:91:6f:d9:04:a8:40:f8:56:76:09:a1:78:1e:58:28:9b:
01:64:dc:fb:79:ac:6e:7e:97:e2:51:cb:29:e5:30:35:10:09:
43:d8:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:49 2026 by rpki-client