Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5bSv_0DKm_mIJARz9tnHFkH4VkY.roa
File: 5bSv_0DKm_mIJARz9tnHFkH4VkY.roa (raw, json)
Hash identifier: TaTyxu9TQ57jVUqXk4wyjbn2UwHxErUx982SfrooX1o=
Subject key identifier: E5:B4:AF:FF:40:CA:9B:F9:88:24:04:73:F6:D9:C7:16:41:F8:56:46
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019CE6F17A528469B6DC4E5902E42A981936
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5bSv_0DKm_mIJARz9tnHFkH4VkY.roa
Signing time: Fri 13 Mar 2026 11:25:11 +0000
ROA not before: Fri 13 Mar 2026 11:25:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 64.137.109.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:f1:7a:52:84:69:b6:dc:4e:59:02:e4:2a:98:19:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 13 11:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5b4afff40ca9bf988240473f6d9c71641f85646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:d0:02:0b:72:c9:67:a4:8f:54:dc:b5:fa:
fb:6d:b8:bc:e8:a5:df:5e:2a:6e:eb:58:0f:4c:83:
e4:9d:53:be:67:6f:ba:c3:85:5a:65:5d:b0:d6:1f:
34:f0:69:d3:0c:5e:d6:18:87:5d:d8:ba:83:05:88:
58:b9:35:fe:d8:f1:c8:f9:18:cf:71:fd:9d:76:dd:
49:2f:03:68:9a:2d:13:5f:6b:ea:c1:65:54:c5:91:
2d:ce:64:5a:c5:cd:30:a0:2d:ed:5a:0b:54:2a:ce:
14:f3:b2:c1:64:3c:f7:b0:1d:29:90:31:43:ea:35:
f9:09:fd:1d:00:97:18:93:71:8e:33:b2:c7:44:33:
78:96:b4:0d:d9:31:40:7b:01:7c:f3:d8:56:24:e5:
37:c7:e0:9a:29:00:2f:e0:02:17:da:6a:f4:d8:a4:
3b:aa:b4:47:2f:6c:04:9d:da:25:b9:bd:75:b0:bf:
b1:0d:06:86:c7:dd:82:bb:7d:67:cd:74:ec:d7:fa:
0f:15:ec:7b:dd:c6:81:12:25:54:0a:71:5f:6b:5c:
dd:81:95:a5:6f:1c:d4:0a:32:3b:12:66:93:b8:a0:
24:f7:14:68:44:73:da:b9:0e:98:c9:af:80:cb:3e:
0b:b6:c5:89:f9:28:7c:b5:25:2e:0c:27:20:e0:69:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B4:AF:FF:40:CA:9B:F9:88:24:04:73:F6:D9:C7:16:41:F8:56:46
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5bSv_0DKm_mIJARz9tnHFkH4VkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.109.0/24
104.222.183.0/24
104.238.6.0/24
104.239.12.0/24
104.239.127.0/24
104.249.22.0/24
Signature Algorithm: sha256WithRSAEncryption
24:02:cd:c1:03:5e:f8:01:1d:15:15:dc:a5:c4:e1:c5:4a:4b:
7e:8e:54:2b:6d:d0:44:00:ed:6d:95:35:a7:ed:67:ca:2d:a6:
ba:f3:78:23:ca:db:52:4a:9d:6d:37:64:0a:1a:62:86:4d:66:
4e:78:8f:15:32:67:63:3f:bc:19:a9:30:89:be:6d:39:09:9a:
51:4b:9a:53:2b:78:5e:75:56:04:08:a4:84:e7:ff:3f:a9:ed:
65:d2:6d:2e:51:bf:44:a2:94:7b:4e:47:b9:ca:68:c8:f8:bb:
4d:2d:70:4a:0c:bf:9a:ed:7f:c6:89:46:e2:35:72:56:42:3f:
96:30:50:d5:b1:aa:78:56:c7:5d:c3:70:9c:4e:52:9d:c0:42:
4b:ec:7a:9a:24:32:3e:9d:cd:91:41:a1:5e:25:91:92:79:d5:
e4:f9:4b:13:03:1f:08:4c:9a:19:79:e3:76:fe:a7:2a:d3:9c:
0b:73:af:f1:02:fb:a6:b4:ab:80:cf:5e:e9:24:56:33:6c:83:
1a:37:a1:8b:c3:32:f3:23:07:8e:65:81:de:5c:59:c4:a0:b9:
1c:a4:78:80:71:2b:6d:a5:1e:1e:56:e9:96:26:d7:57:88:29:
0f:af:ea:9a:d8:3d:92:47:58:cb:ce:7e:09:e7:2b:62:b6:fe:
7d:60:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:10:32 2026 by rpki-client