Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-zbc1QqYxldbnn1Yjxfx72SuMaA.roa
File: 1-zbc1QqYxldbnn1Yjxfx72SuMaA.roa (raw, json)
Hash identifier: eDkFBHPF80qlWzAQzOjgERwb19YTvUJ+xJnQqveGKlk=
Subject key identifier: FB:36:DC:D5:0A:98:C6:57:5B:9E:7D:58:8F:17:F1:EF:64:AE:31:A0
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A0ECC0E066B9EF34C86969F7BBDDC1079A
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-zbc1QqYxldbnn1Yjxfx72SuMaA.roa
Signing time: Tue 29 Sep 2026 10:40:58 +0000
ROA not before: Tue 29 Sep 2026 10:40:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51852
IP address blocks: 104.238.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:c0:e0:66:b9:ef:34:c8:69:69:f7:bb:dd:c1:07:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Sep 29 10:40:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb36dcd50a98c6575b9e7d588f17f1ef64ae31a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:73:c2:48:cf:16:3c:7d:37:84:e5:48:24:
28:06:4a:4c:a2:d9:01:9e:e6:59:1d:e7:d1:a6:70:
c2:10:cf:f8:bb:ec:e4:4a:f1:0d:5a:58:cc:f9:a6:
0c:9c:32:81:e6:6d:d2:ae:da:81:04:02:04:a9:8a:
08:e7:8b:bd:0e:81:99:d0:40:2e:2a:60:56:28:bd:
3e:3a:58:d8:85:2e:43:c8:3f:f1:68:bf:6d:59:d9:
17:a2:6d:28:b7:b7:e8:bc:ea:4e:d4:a5:7b:2c:a0:
37:7c:be:8c:d5:73:e4:c7:2a:c9:09:b6:91:c8:ba:
0b:2b:b0:14:28:bd:eb:37:38:24:bf:99:49:30:31:
a7:d2:de:74:d9:63:71:25:59:34:a8:f3:56:4f:5a:
b6:99:31:69:91:e4:fb:9d:f6:80:19:47:2d:d0:f8:
23:51:86:28:fc:ff:63:14:35:3c:36:80:bd:e4:c4:
ce:c4:c4:6a:99:d5:72:4c:9f:72:f9:e9:a1:e2:d9:
1f:ca:fd:a1:eb:7e:f3:6f:38:b6:87:f1:5c:b3:72:
e0:29:65:5b:1d:d9:03:12:dc:b9:c5:fe:00:4e:6e:
4d:2e:4c:87:95:3a:f8:65:ea:65:76:f0:59:83:03:
3e:49:1c:44:c9:97:e3:15:21:03:99:01:a5:b6:ee:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:36:DC:D5:0A:98:C6:57:5B:9E:7D:58:8F:17:F1:EF:64:AE:31:A0
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-zbc1QqYxldbnn1Yjxfx72SuMaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.2.0/24
Signature Algorithm: sha256WithRSAEncryption
24:44:02:25:21:49:92:df:d3:99:6c:36:be:45:fb:3d:9a:0d:
e8:2d:b2:94:07:9c:16:72:be:6d:8e:c9:f4:d3:eb:f2:4e:26:
ab:37:96:de:05:e5:47:10:01:10:6d:66:eb:20:da:32:c4:0c:
83:b2:f3:a4:32:28:68:20:50:84:25:c1:e5:a8:48:77:da:ee:
89:94:15:7a:86:b8:27:6a:54:b4:e1:7d:f3:2d:c0:c2:08:03:
63:62:49:4b:fd:4a:30:b9:ae:86:f7:79:04:f3:db:30:87:cb:
8e:ad:51:55:32:87:0c:23:1b:1a:82:d6:af:ae:4a:48:12:91:
44:57:f6:da:df:21:75:1d:5b:fd:ef:c1:16:29:35:24:16:dd:
1a:5c:cf:12:08:db:46:4b:b5:36:74:6c:5a:ce:ed:8d:80:44:
4a:08:bc:7d:4a:05:a1:18:47:3e:e4:13:56:95:03:d9:d2:93:
6c:b6:73:26:04:85:8d:4a:dc:2e:0e:b2:73:9e:29:7f:1f:6d:
e0:42:7e:07:97:9d:78:e0:c1:f2:1f:6d:05:3d:bb:cf:05:d6:
73:72:03:6f:b5:f1:30:f0:ed:d6:9d:aa:a8:30:ab:fe:07:76:
1d:d9:bc:0a:8b:11:76:20:7c:e8:4e:79:30:ec:66:e4:4a:f8:
8b:f9:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:39:17 2026 by rpki-client