Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3a8_QrEyN96tKyCFNR9pr0vr4ig.roa
File: 3a8_QrEyN96tKyCFNR9pr0vr4ig.roa (raw, json)
Hash identifier: 8ehJX4ueccVXn/1VNiZ62K9VrLDsOsXihYq2HrWl4Lo=
Subject key identifier: DD:AF:3F:42:B1:32:37:DE:AD:2B:20:85:35:1F:69:AF:4B:EB:E2:28
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A1405B2CA807729F5621F622EC4241EE86
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3a8_QrEyN96tKyCFNR9pr0vr4ig.roa
Signing time: Thu 15 Oct 2026 16:17:59 +0000
ROA not before: Thu 15 Oct 2026 16:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5089
IP address blocks: 45.43.168.0/22 maxlen: 22
64.137.0.0/22 maxlen: 22
64.137.4.0/22 maxlen: 22
104.239.68.0/23 maxlen: 23
104.239.70.0/23 maxlen: 23
104.239.120.0/23 maxlen: 23
104.239.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:5b:2c:a8:07:72:9f:56:21:f6:22:ec:42:41:ee:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 15 16:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddaf3f42b13237dead2b2085351f69af4bebe228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:60:2f:7f:e0:ad:21:1c:b2:b3:a6:9b:2e:
a7:67:c7:cd:6d:e7:f1:9f:59:ea:c8:6f:81:1d:6c:
ce:c9:32:82:03:67:1e:13:ed:4f:77:77:ab:6d:4b:
fe:ec:68:78:4a:a2:6e:cc:b9:bd:6b:3a:ce:de:0a:
b5:46:97:07:55:4a:a5:8f:37:f0:76:fe:d4:1c:3c:
c9:df:e8:84:7c:33:8c:e1:6c:37:21:52:e7:5e:9b:
eb:8d:97:6d:d9:c3:ce:09:64:c5:23:b6:f0:26:2b:
71:37:70:41:e7:2b:3c:2b:8e:f9:13:79:17:bf:10:
1e:64:af:cb:80:35:1f:b5:6f:0f:cd:de:63:24:b9:
f1:31:18:93:d8:aa:81:73:00:f4:0b:ff:a2:eb:48:
8a:80:73:20:b2:c9:9b:a2:98:d9:49:b6:3b:44:a3:
da:40:e8:13:de:1a:eb:32:f9:df:15:3b:13:e4:da:
31:4e:55:03:b3:71:55:40:22:3c:15:b1:33:7b:82:
90:42:a3:57:68:6f:ca:d7:3c:47:17:7f:f8:92:34:
63:3f:9c:3e:c4:d6:ff:08:06:28:fe:74:71:80:90:
bd:a2:56:3a:04:88:e2:5d:f3:b3:92:ee:d4:d8:b5:
a3:f2:bd:7f:40:f0:97:c5:a5:4f:bb:50:51:b0:09:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AF:3F:42:B1:32:37:DE:AD:2B:20:85:35:1F:69:AF:4B:EB:E2:28
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3a8_QrEyN96tKyCFNR9pr0vr4ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.168.0/22
64.137.0.0/21
104.239.68.0/22
104.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:08:03:92:b9:62:a8:ae:89:d6:c7:68:4c:04:65:69:00:fb:
63:ae:d5:38:15:46:ed:88:4f:37:c3:56:36:6d:b3:7d:6f:9a:
cb:b9:83:f0:be:a1:cf:05:d2:6e:7b:f8:c4:fd:c4:30:0f:62:
cf:a1:91:9d:91:ec:c9:0e:d2:28:89:90:59:57:ea:63:8f:e1:
55:4b:3f:27:ea:d6:d1:00:bf:5b:6e:23:f2:7e:c5:1e:0d:f3:
5c:c3:6b:63:42:d0:86:f1:07:9b:40:6a:1f:23:ac:d3:f4:71:
47:22:32:92:67:28:11:a3:bc:0e:70:00:b1:25:4d:d4:de:7a:
e5:72:3c:70:fb:e0:4b:3c:8f:3e:be:38:a6:1e:6f:fe:6a:5e:
a2:06:a4:0d:6c:0d:3d:f0:c2:55:77:d8:d3:fe:f0:7a:e0:2f:
20:14:c8:35:14:cf:59:51:7b:0f:1e:b2:52:f8:71:71:54:f5:
cd:c9:a7:b0:45:6f:85:f5:f8:4a:27:ba:29:48:94:a6:06:d8:
31:79:33:e2:5c:28:dd:96:d7:f6:38:8d:d1:4a:bf:26:89:18:
36:e0:e8:83:51:ee:c5:0a:44:d3:85:fd:2a:7a:60:af:61:4e:
54:45:76:7f:46:32:ed:34:72:23:8c:69:0c:c9:f2:09:18:d3:
21:69:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:19:55 2026 by rpki-client