Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1HSyr20B3i_qTFJxW9XOqEpwZqg.roa
File: 1HSyr20B3i_qTFJxW9XOqEpwZqg.roa (raw, json)
Hash identifier: Rfz0LNfe4XNNTIdVpgKICHyHrKG2+dMFTSiFRZhXoJk=
Subject key identifier: D4:74:B2:AF:6D:01:DE:2F:EA:4C:52:71:5B:D5:CE:A8:4A:70:66:A8
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A1405B2CF4B2F18882396C6E89FDBCD187
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1HSyr20B3i_qTFJxW9XOqEpwZqg.roa
Signing time: Thu 15 Oct 2026 16:17:59 +0000
ROA not before: Thu 15 Oct 2026 16:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13886
IP address blocks: 45.43.165.0/24 maxlen: 24
64.137.51.0/24 maxlen: 24
104.167.3.0/24 maxlen: 24
104.167.4.0/24 maxlen: 24
104.167.5.0/24 maxlen: 24
104.167.6.0/24 maxlen: 24
104.167.8.0/24 maxlen: 24
104.167.9.0/24 maxlen: 24
104.167.11.0/24 maxlen: 24
104.167.12.0/24 maxlen: 24
104.167.14.0/24 maxlen: 24
104.167.15.0/24 maxlen: 24
104.233.48.0/21 maxlen: 21
104.238.29.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.239.112.0/21 maxlen: 21
104.249.0.0/21 maxlen: 21
138.128.144.0/24 maxlen: 24
138.128.146.0/24 maxlen: 24
138.128.147.0/24 maxlen: 24
138.128.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:5b:2c:f4:b2:f1:88:82:39:6c:6e:89:fd:bc:d1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 15 16:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d474b2af6d01de2fea4c52715bd5cea84a7066a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:95:89:66:73:d9:a5:f2:ba:c2:65:2b:dd:
e9:f9:56:dd:4f:11:2c:3a:24:86:2c:9c:b4:50:82:
a4:14:6d:22:14:6d:cc:1d:d7:97:de:36:3c:cb:0e:
83:b1:1e:d9:14:7c:70:04:2b:74:d7:92:da:7e:4a:
26:cd:a1:9e:95:ee:ea:f0:c5:a7:ea:4d:1d:2f:66:
ad:4d:f5:5c:34:ad:98:c7:f6:27:e2:bf:17:24:ab:
60:26:dc:5d:d3:0e:10:06:1b:35:fc:da:b9:7c:f8:
98:4c:75:34:07:c0:79:c3:03:7b:7c:62:6a:2d:5b:
db:f8:d5:f3:71:1e:a0:df:a5:2f:d0:97:51:1d:b6:
6d:8f:a8:7c:8a:37:fb:de:d9:84:33:11:e3:24:31:
b3:0b:1e:2b:a5:1f:bf:1a:c6:41:50:42:56:83:ef:
5d:3b:5e:c4:f7:35:bc:eb:3a:bc:3e:3b:d5:42:8b:
bc:bd:84:6e:b9:ee:7e:2b:f4:0d:36:d9:e8:78:ee:
97:f5:ec:93:98:25:5b:77:9b:e4:0c:df:3e:4c:90:
8f:31:f3:9f:77:b4:0a:8c:fb:cb:ed:f6:97:3c:0a:
2e:f8:7a:e1:26:51:be:23:4c:99:1f:8c:03:fc:be:
58:3e:b4:27:22:aa:13:9c:d2:7a:d5:8b:f8:1f:83:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:B2:AF:6D:01:DE:2F:EA:4C:52:71:5B:D5:CE:A8:4A:70:66:A8
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1HSyr20B3i_qTFJxW9XOqEpwZqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.165.0/24
64.137.51.0/24
104.167.3.0-104.167.6.255
104.167.8.0/23
104.167.11.0-104.167.12.255
104.167.14.0/23
104.233.48.0/21
104.238.29.0/24
104.239.15.0/24
104.239.112.0/21
104.249.0.0/21
138.128.144.0/24
138.128.146.0/23
138.128.150.0/24
Signature Algorithm: sha256WithRSAEncryption
88:23:c0:4d:71:58:ac:7b:05:db:23:7b:78:b1:9b:aa:1d:42:
26:2b:f3:ab:45:f7:5d:ee:4e:3c:00:7a:32:84:9b:e0:61:55:
09:7f:e2:ae:f7:95:c0:37:38:92:93:33:05:ea:65:de:36:7d:
34:ee:bb:79:ad:67:fe:76:e3:79:c7:df:32:00:4a:8e:9c:24:
75:82:ba:6e:19:8a:3c:6a:73:e9:24:cb:25:27:13:3f:3d:0b:
38:ae:73:ff:3e:e6:18:d5:ea:8f:e1:ff:06:67:91:93:c1:65:
1f:25:74:a1:f8:04:e0:fe:e7:12:65:21:53:95:b5:72:8f:9d:
48:19:12:a5:a4:70:4e:c9:16:8e:2e:c9:1c:af:54:18:a3:80:
62:31:7c:09:6b:18:19:b8:bb:3c:ff:4f:4b:55:5c:24:bb:94:
72:7a:68:76:9b:65:3c:e5:06:11:6b:7c:f9:d0:57:bc:28:74:
81:69:72:2d:cc:29:40:d3:e3:57:d9:73:cd:4d:cb:62:8d:2a:
93:e2:a4:ad:5c:e0:ec:8a:d8:ba:28:83:d3:36:39:58:69:3a:
5f:10:ee:08:5c:a8:66:8c:04:6e:9b:49:8d:c8:7e:b2:d9:64:
ef:f9:b7:fc:63:03:8b:01:b7:57:bb:8c:11:4c:e0:8d:2d:88:
fe:b9:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:22:21 2026 by rpki-client