Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/6uage4LbRMI1ZpwteT7SgL9kXG8.roa
File: 6uage4LbRMI1ZpwteT7SgL9kXG8.roa (raw, json)
Hash identifier: iPSzfh8muxaonSH3tZzKYPohTAwh+JEobYuspVmR+1U=
Subject key identifier: EA:E6:A0:7B:82:DB:44:C2:35:66:9C:2D:79:3E:D2:80:BF:64:5C:6F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019E98B202936A4C212DAB1F81F11BBAE42A
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/6uage4LbRMI1ZpwteT7SgL9kXG8.roa
Signing time: Fri 05 Jun 2026 16:51:03 +0000
ROA not before: Fri 05 Jun 2026 16:51:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 104.222.180.0/24 maxlen: 24
104.233.4.0/24 maxlen: 24
104.233.5.0/24 maxlen: 24
104.233.6.0/24 maxlen: 24
104.233.7.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:b2:02:93:6a:4c:21:2d:ab:1f:81:f1:1b:ba:e4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 5 16:51:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eae6a07b82db44c235669c2d793ed280bf645c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:6c:a6:da:13:32:90:3a:f3:7b:e0:dd:a3:
5c:7c:a8:81:89:98:55:c7:68:48:58:6b:a1:73:c0:
1b:1c:af:3e:11:68:1c:14:f6:ae:7b:b7:b4:1d:b9:
99:c7:08:c1:f9:f9:c8:79:65:81:69:60:10:4e:75:
43:d3:37:b9:74:06:ed:41:b9:5f:05:f0:e6:d0:bd:
26:71:8a:c3:e5:90:a1:d5:8d:2a:81:da:85:78:76:
f1:68:66:11:82:a6:df:e9:48:32:14:4e:a3:89:5b:
50:71:da:38:75:5c:fe:cc:68:3b:92:f5:b2:c5:a1:
f7:62:be:5d:87:a1:ea:15:d6:99:f5:55:40:9a:93:
f0:45:4b:1f:ce:b1:da:f3:15:e7:3a:04:06:9e:9f:
f3:91:e9:18:f4:ad:9b:39:bd:2f:b2:63:64:03:87:
61:52:90:af:8b:08:17:93:ce:f9:02:a9:e2:79:43:
61:78:fe:f1:12:fb:1a:66:4e:64:c7:ff:55:3b:b2:
53:c6:82:b6:2c:cb:22:56:d7:55:f4:28:5e:8a:8b:
17:ac:5d:15:1a:93:4c:2a:4d:b3:e5:e1:96:f4:bd:
74:66:85:79:06:83:ee:77:83:a8:70:8b:ee:bf:9e:
61:a3:b0:c3:96:38:43:ca:4d:f5:4f:04:a0:67:42:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E6:A0:7B:82:DB:44:C2:35:66:9C:2D:79:3E:D2:80:BF:64:5C:6F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/6uage4LbRMI1ZpwteT7SgL9kXG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.222.180.0/24
104.233.4.0/22
104.249.21.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ac:89:c7:6e:66:b9:47:8b:20:25:92:b1:ce:d1:f7:98:e5:
50:3f:d8:2a:a3:22:10:1a:94:02:47:d7:07:b9:36:a1:03:8e:
48:ef:4a:99:15:b7:ef:b3:fd:c6:b1:81:37:11:89:30:36:89:
68:ae:a8:81:08:98:8a:d7:a4:d3:47:75:3c:3a:f9:e3:26:f6:
f0:11:1f:80:e4:41:3c:a6:16:7f:06:6a:36:ee:86:dc:e0:c3:
5e:03:47:10:53:06:3d:c7:1e:70:93:2b:a4:04:12:b6:71:d4:
84:50:24:95:c0:95:b0:15:ed:33:a6:81:7f:7c:4d:7d:29:c9:
be:80:39:bd:bc:3b:62:40:0e:e9:cc:bb:a0:e5:27:97:ae:73:
6e:cb:7f:73:92:af:34:da:0b:75:25:51:3c:e0:23:50:9e:eb:
fa:a7:a8:29:4b:19:25:5b:85:6f:24:79:c7:5a:d2:af:fd:e0:
ad:42:57:a9:7f:a1:cc:2c:58:80:d4:0b:cf:70:5b:64:66:e1:
52:61:d0:52:64:08:35:76:17:5c:9a:af:2b:89:96:03:2c:15:
2d:69:df:0f:99:5e:65:c6:9f:df:d0:c0:24:d4:f3:f1:83:74:
78:a9:80:f3:b7:26:84:2d:2c:50:99:b8:d8:ac:1d:09:dd:53:
87:ba:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:32:43 2026 by rpki-client