Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/K60hVPLSPVtUpielhkzPMTSO0aM.roa
File: K60hVPLSPVtUpielhkzPMTSO0aM.roa (raw, json)
Hash identifier: G37NAr4nS+/pnxGye8gLOv9acyLCoKW6Bim3ph2z7sw=
Subject key identifier: 2B:AD:21:54:F2:D2:3D:5B:54:A6:27:A5:86:4C:CF:31:34:8E:D1:A3
Certificate issuer: /CN=7ddabd648711d0ce56989896efb73a0e65e97339
Certificate serial: 019F7A46E46A110B24F48ECF68E0569FD08C
Authority key identifier: 7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/K60hVPLSPVtUpielhkzPMTSO0aM.roa
Signing time: Sun 19 Jul 2026 12:08:14 +0000
ROA not before: Sun 19 Jul 2026 12:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199256
IP address blocks: 195.253.242.0/24 maxlen: 24
2a13:bbc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:46:e4:6a:11:0b:24:f4:8e:cf:68:e0:56:9f:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddabd648711d0ce56989896efb73a0e65e97339
Validity
Not Before: Jul 19 12:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bad2154f2d23d5b54a627a5864ccf31348ed1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:91:c3:0a:1b:c8:f2:8a:86:cb:ee:f1:74:
cb:34:ca:21:07:3f:8a:2d:8b:55:86:77:f7:06:97:
55:79:6c:80:21:76:20:d1:6b:ee:ed:48:fa:a8:ce:
43:e6:ee:d0:e9:9f:ba:15:34:cf:eb:88:a4:b9:74:
54:bf:79:39:02:42:30:6d:31:c2:fa:19:a6:f6:f4:
55:3c:0d:3f:b8:a6:b3:3e:ba:e4:50:c7:d4:cb:d4:
1b:16:fe:ee:dd:54:09:1e:59:00:19:23:c9:35:18:
7d:8d:a9:1e:6f:fe:c9:4f:88:fd:6a:f2:9a:a9:a2:
80:c0:72:6d:75:f9:f0:9b:5a:8f:99:c7:d7:54:c2:
3e:da:11:09:46:d4:52:4b:6d:c1:02:6d:97:f2:e0:
a2:0f:c5:1d:07:5e:f1:4a:e8:f9:c2:76:68:25:cc:
be:d1:b2:64:21:62:35:94:0e:c6:3a:7d:60:fb:93:
1f:21:4e:67:0e:ff:3f:34:20:44:f0:e3:3c:15:a6:
d7:e3:0d:f1:0e:79:5e:1a:90:82:7b:1b:e4:3d:06:
ae:40:3f:e8:1c:e5:ff:16:f3:ae:34:9e:c5:95:ee:
db:38:87:36:25:ed:9d:ec:8b:d1:18:02:bf:81:44:
0d:f8:25:aa:bd:c4:b9:04:69:56:84:31:87:8a:bb:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AD:21:54:F2:D2:3D:5B:54:A6:27:A5:86:4C:CF:31:34:8E:D1:A3
X509v3 Authority Key Identifier:
keyid:7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/K60hVPLSPVtUpielhkzPMTSO0aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.253.242.0/24
IPv6:
2a13:bbc0::/29
Signature Algorithm: sha256WithRSAEncryption
49:42:ce:d5:c5:57:55:5d:73:b7:05:23:ab:41:94:87:5c:7c:
a2:cd:21:9c:35:66:05:cb:26:9a:55:54:99:e5:93:cc:5a:8e:
85:e2:a6:6f:2d:a1:c5:99:85:2d:09:7e:65:02:bb:b1:c2:2e:
aa:ae:7f:4a:99:24:fc:af:3f:06:ca:40:de:f7:ca:10:2a:1f:
64:3a:f4:99:60:87:42:46:9d:76:9c:55:ce:a2:92:39:d3:e3:
68:c7:01:4b:9c:c8:06:51:db:85:90:bf:d8:23:74:09:a5:af:
51:c1:aa:60:fe:d2:c0:b6:37:b7:6a:19:44:41:da:b1:e7:c2:
94:25:ed:25:84:10:47:9b:03:68:50:78:67:72:2e:11:83:fe:
b4:fd:8d:59:c9:6c:34:bc:10:1d:47:71:fb:f2:0f:99:06:00:
41:d9:be:00:13:e6:cf:aa:5f:05:f9:44:82:c0:74:88:fe:78:
0e:b3:33:4c:67:1a:75:6f:47:79:14:9e:e0:53:4a:bb:a0:f4:
28:cb:e2:e1:37:6d:4a:2e:84:89:ad:dc:8c:ad:95:8d:fd:2e:
2a:6c:c0:37:53:4e:23:0b:8e:b2:13:d5:0a:46:62:d8:97:09:
c8:38:b6:5f:3f:38:38:34:82:fa:53:1e:76:1b:55:9c:3b:78:
f0:9c:3c:41
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ96RuRqEQsk9I7PaOBWn9CMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGFiZDY0ODcxMWQwY2U1Njk4OTg5NmVmYjczYTBlNjVl
OTczMzkwHhcNMjYwNzE5MTIwODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmFkMjE1NGYyZDIzZDViNTRhNjI3YTU4NjRjY2YzMTM0OGVkMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XqRwwobyPKKhsvu8XTLNMohBz+K
LYtVhnf3BpdVeWyAIXYg0Wvu7Uj6qM5D5u7Q6Z+6FTTP64ikuXRUv3k5AkIwbTHC
+hmm9vRVPA0/uKazPrrkUMfUy9QbFv7u3VQJHlkAGSPJNRh9jakeb/7JT4j9avKa
qaKAwHJtdfnwm1qPmcfXVMI+2hEJRtRSS23BAm2X8uCiD8UdB17xSuj5wnZoJcy+
0bJkIWI1lA7GOn1g+5MfIU5nDv8/NCBE8OM8FabX4w3xDnleGpCCexvkPQauQD/o
HOX/FvOuNJ7Fle7bOIc2Je2d7IvRGAK/gUQN+CWqvcS5BGlWhDGHiruqBQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCutIVTy0j1bVKYnpYZMzzE0jtGjMB8GA1UdIwQY
MBaAFH3avWSHEdDOVpiYlu+3Og5l6XM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRxOVpJY1IwTTVXbUppVzc3YzZEbVhwY3prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMWJlMzctNmViNS00YmU3LWIwNmEt
Zjk1OGEwZWQwYTQ2LzEvSzYwaFZQTFNQVnRVcGllbGhrelBNVFNPMGFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMWJlMzctNmViNS00YmU3LWIwNmEtZjk1OGEwZWQwYTQ2
LzEvZmRxOVpJY1IwTTVXbUppVzc3YzZEbVhwY3prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw/3yMA0E
AgACMAcDBQMqE7vAMA0GCSqGSIb3DQEBCwUAA4IBAQBJQs7VxVdVXXO3BSOrQZSH
XHyizSGcNWYFyyaaVVSZ5ZPMWo6F4qZvLaHFmYUtCX5lAruxwi6qrn9KmST8rz8G
ykDe98oQKh9kOvSZYIdCRp12nFXOopI50+NoxwFLnMgGUduFkL/YI3QJpa9Rwapg
/tLAtje3ahlEQdqx58KUJe0lhBBHmwNoUHhnci4Rg/60/Y1ZyWw0vBAdR3H78g+Z
BgBB2b4AE+bPql8F+USCwHSI/ngOszNMZxp1b0d5FJ7gU0q7oPQoy+LhN21KLoSJ
rdyMrZWN/S4qbMA3U04jC46yE9UKRmLYlwnIOLZfPzg4NIL6Ux52G1WcO3jwnDxB
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:54 2026 by rpki-client