Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/60ntKR9j__TV76XtztOi8EELC1U.roa
File: 60ntKR9j__TV76XtztOi8EELC1U.roa (raw, json)
Hash identifier: MPGk0ETfffAsLowNrPJvEVqUTZtXYWGPciK8sXzFsZQ=
Subject key identifier: EB:49:ED:29:1F:63:FF:F4:D5:EF:A5:ED:CE:D3:A2:F0:41:0B:0B:55
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01A0D84A0D3C87AE0E1196C84F3D13A8F9CF
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/60ntKR9j__TV76XtztOi8EELC1U.roa
Signing time: Fri 25 Sep 2026 11:18:46 +0000
ROA not before: Fri 25 Sep 2026 11:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50928
IP address blocks: 31.173.248.0/21 maxlen: 21
31.173.248.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
31.173.252.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.254.0/24 maxlen: 24
37.29.80.0/22 maxlen: 22
37.29.80.0/24 maxlen: 24
37.29.81.0/24 maxlen: 24
37.29.82.0/24 maxlen: 24
37.29.83.0/24 maxlen: 24
46.29.192.0/21 maxlen: 21
46.29.194.0/24 maxlen: 24
46.29.195.0/24 maxlen: 24
46.29.196.0/24 maxlen: 24
46.29.199.0/24 maxlen: 24
178.23.144.0/21 maxlen: 21
178.23.148.0/24 maxlen: 24
178.23.149.0/24 maxlen: 24
178.23.150.0/24 maxlen: 24
178.23.151.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
178.176.254.0/24 maxlen: 24
178.178.78.0/24 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.244.0/24 maxlen: 24
188.170.245.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.252.0/24 maxlen: 24
2a00:9780::/40 maxlen: 40
2a00:9780:100::/40 maxlen: 40
2a00:9780:200::/40 maxlen: 40
2a00:9780:300::/40 maxlen: 40
2a00:9780:400::/40 maxlen: 40
2a00:9780:500::/40 maxlen: 40
2a00:9780:600::/40 maxlen: 40
2a00:9780:700::/40 maxlen: 40
2a00:9780:800::/40 maxlen: 40
2a00:9780:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:4a:0d:3c:87:ae:0e:11:96:c8:4f:3d:13:a8:f9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Sep 25 11:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb49ed291f63fff4d5efa5edced3a2f0410b0b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:de:a7:81:24:2c:26:67:34:20:dd:e3:22:
91:32:9e:b6:e7:6e:07:db:f0:25:5a:48:8a:25:46:
b9:7b:4f:b6:b9:60:39:47:35:12:11:29:08:98:9c:
f7:5f:fd:57:d9:5a:ee:37:14:b5:2f:53:18:df:59:
84:1f:1a:96:46:b8:3a:c1:ec:b7:1e:7a:ac:09:b9:
a6:b3:13:c3:31:6f:a9:85:70:21:69:71:0c:4d:b2:
d5:45:89:e7:ab:c0:a2:02:77:e4:cd:4b:14:92:c7:
41:4b:5d:a9:ef:66:46:5a:6c:e2:59:54:55:91:be:
24:23:63:b1:61:aa:21:d1:20:e2:38:81:b6:fa:a5:
7a:a8:29:53:92:c1:3a:4c:f8:27:1b:0d:1f:75:ef:
b3:9e:14:c5:8a:79:7d:f2:03:cb:7c:69:11:ff:43:
ed:13:3c:06:d4:e3:23:08:bd:28:b0:56:de:8b:43:
9e:6c:44:76:69:66:b4:97:e9:ab:bf:61:78:65:7a:
66:b7:83:69:3f:03:98:4d:ba:8b:7e:11:c8:0f:9d:
1b:6d:a5:c7:d5:0d:17:d1:c0:8d:94:7c:79:71:c6:
57:4e:7c:61:84:5e:4e:5e:93:43:7d:eb:bc:8d:a2:
b9:71:6f:de:34:32:b6:71:50:35:0f:8a:7f:60:12:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:ED:29:1F:63:FF:F4:D5:EF:A5:ED:CE:D3:A2:F0:41:0B:0B:55
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/60ntKR9j__TV76XtztOi8EELC1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.29.80.0/22
46.29.192.0/21
178.23.144.0/21
178.176.248.0-178.176.254.255
178.178.78.0/24
188.170.244.0/23
188.170.248.0-188.170.252.255
IPv6:
2a00:9780::-2a00:9780:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:ad:d1:a2:92:02:67:fd:0f:40:ff:0a:33:46:de:83:63:cd:
de:d9:ed:75:64:c5:f2:b1:ce:66:6a:9e:30:e7:20:37:60:3e:
0d:16:79:8b:e0:66:26:7d:39:5f:60:0c:41:e7:49:3a:3d:d0:
c4:ec:b6:6a:af:29:71:93:c7:8d:65:38:48:b6:01:6a:81:28:
0e:78:3e:83:a4:a3:d5:56:62:b7:43:69:e7:69:b7:49:52:0a:
39:68:ed:0a:f0:f6:05:bd:b7:c3:02:e1:f3:28:2a:ce:d9:b3:
f5:79:1d:2b:a6:0b:cc:68:3e:75:42:7d:5c:e9:07:50:4a:ec:
1a:01:3a:45:85:01:82:c0:89:2e:ac:80:4f:75:4b:1b:13:6c:
01:3e:43:3d:5b:60:ea:ed:d6:03:36:f8:ec:39:d4:5c:d4:33:
b7:7f:97:66:ac:57:c1:54:85:45:ba:c7:97:7d:14:df:d2:2d:
cb:65:83:f1:19:8f:1e:16:0b:b6:3e:8d:84:75:70:13:51:5b:
82:6c:df:de:93:1d:72:a0:57:5b:b4:ba:e4:26:be:15:4c:d4:
49:94:f6:01:ae:ed:bb:ee:30:b9:ef:22:1f:af:89:66:13:3f:
af:eb:bc:d2:6f:80:7d:3d:a5:8f:57:2d:65:e9:1e:84:f9:a4:
f4:e0:c9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:39:57 2026 by rpki-client