Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/710KAlt9uEmjyo9RlqrpDkePIjQ.roa
File: 710KAlt9uEmjyo9RlqrpDkePIjQ.roa (raw, json)
Hash identifier: ZZcqg6JHVOM6Y6wr/0/0vmoKdJRHjCS/wYJ3Aafudsw=
Subject key identifier: EF:5D:0A:02:5B:7D:B8:49:A3:CA:8F:51:96:AA:E9:0E:47:8F:22:34
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019FD64FB10C67A913D95B2A713811C8DC5C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/710KAlt9uEmjyo9RlqrpDkePIjQ.roa
Signing time: Thu 06 Aug 2026 09:02:54 +0000
ROA not before: Thu 06 Aug 2026 09:02:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214854
IP address blocks: 45.43.152.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
104.233.4.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 17:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:4f:b1:0c:67:a9:13:d9:5b:2a:71:38:11:c8:dc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 6 09:02:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef5d0a025b7db849a3ca8f5196aae90e478f2234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:3a:e8:45:32:39:eb:53:52:8d:74:bd:ca:
ec:b2:27:fd:5a:f3:ad:af:3d:d0:f5:d8:92:26:1a:
28:a6:98:57:84:4c:1e:79:ad:e5:44:f0:1c:81:23:
bc:cd:c8:e8:b0:66:25:a0:39:12:6f:98:85:f0:1c:
1a:9e:55:f2:58:b4:f7:00:57:48:04:43:72:ce:f8:
61:5a:65:af:b7:c1:ef:0b:0f:9c:97:45:21:d0:06:
58:11:6d:4b:14:cd:ba:28:9b:f4:38:64:d8:97:22:
ff:fb:44:5a:eb:6a:41:d5:a5:69:26:96:1b:5c:1f:
50:f8:bc:f6:76:8e:2d:70:55:7d:57:74:e8:02:72:
be:a3:e2:86:e6:1d:ff:7c:89:20:82:f2:4c:43:73:
ea:08:1e:83:e4:aa:1f:c8:08:a3:c1:8a:ea:e4:1a:
68:2e:5f:47:a2:9a:84:99:e4:54:cb:c3:33:b7:9a:
82:72:a6:71:d3:db:95:28:9d:b0:b0:fc:e4:95:e6:
1c:83:41:ed:5e:d3:a0:f2:f5:67:ab:d9:b2:71:10:
14:a1:d0:53:21:30:22:38:61:9c:a6:bc:50:9d:c6:
3e:a7:55:12:df:3b:ee:9b:7a:45:4d:d2:32:1d:3c:
c9:12:e8:fc:58:82:34:69:33:51:3d:e8:f4:46:13:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5D:0A:02:5B:7D:B8:49:A3:CA:8F:51:96:AA:E9:0E:47:8F:22:34
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/710KAlt9uEmjyo9RlqrpDkePIjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.152.0/24
45.43.154.0/24
104.233.4.0/24
104.249.19.0/24
Signature Algorithm: sha256WithRSAEncryption
46:50:46:14:8b:18:10:20:d3:ff:50:37:8f:68:7e:cb:92:4c:
3c:30:bb:08:eb:33:ab:ce:d6:62:fe:d4:41:9f:fa:33:0d:b1:
90:8d:b5:aa:76:da:b1:5b:b9:c2:55:18:b0:8a:b2:0f:5f:a3:
d2:70:2c:36:68:18:f6:76:bc:89:e4:35:e4:86:46:a2:1a:62:
49:af:c0:43:0b:46:91:9a:c2:20:18:86:77:cf:fd:79:17:0b:
df:44:32:95:3a:b0:34:da:98:a0:6b:8b:36:34:08:a6:fb:a2:
9f:2d:94:ce:1b:76:5b:a8:0f:13:af:72:d1:fc:d8:a8:4f:3c:
47:2f:5f:3a:86:e8:46:f9:fd:da:73:5e:fb:f9:00:bb:bf:e2:
d8:e0:78:76:59:d1:72:55:9a:1c:07:f1:a7:39:6c:30:ad:5e:
d5:f1:ee:57:1c:2d:c4:3f:dd:eb:d7:38:2d:bc:64:98:e9:d0:
15:9c:85:6e:36:bd:6b:17:eb:f1:73:76:9e:52:d2:96:4d:5f:
cb:78:f6:5a:41:e9:f1:b4:47:28:cd:8d:36:30:68:e4:dd:43:
92:80:20:90:2b:d3:e7:c1:07:d6:c3:5b:cf:c8:19:a5:eb:b7:
35:7d:4e:ec:1b:d6:2c:38:33:00:6b:d7:8a:73:1f:aa:05:ed:
a5:af:23:75
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ/WT7EMZ6kT2VsqcTgRyNxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjYwODA2MDkwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjVkMGEwMjViN2RiODQ5YTNjYThmNTE5NmFhZTkwZTQ3OGYyMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRw66EUyOetTUo10vcrssif9WvOt
rz3Q9diSJhoopphXhEweea3lRPAcgSO8zcjosGYloDkSb5iF8BwanlXyWLT3AFdI
BENyzvhhWmWvt8HvCw+cl0Uh0AZYEW1LFM26KJv0OGTYlyL/+0Ra62pB1aVpJpYb
XB9Q+Lz2do4tcFV9V3ToAnK+o+KG5h3/fIkggvJMQ3PqCB6D5KofyAijwYrq5Bpo
Ll9HopqEmeRUy8Mzt5qCcqZx09uVKJ2wsPzkleYcg0HtXtOg8vVnq9mycRAUodBT
ITAiOGGcprxQncY+p1US3zvum3pFTdIyHTzJEuj8WII0aTNRPej0RhNGjwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFO9dCgJbfbhJo8qPUZaq6Q5HjyI0MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvNzEwS0FsdDl1RW1qeW85UmxxcnBEa2VQSWpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALSuYAwQA
LSuaAwQAaOkEAwQAaPkTMA0GCSqGSIb3DQEBCwUAA4IBAQBGUEYUixgQINP/UDeP
aH7Lkkw8MLsI6zOrztZi/tRBn/ozDbGQjbWqdtqxW7nCVRiwirIPX6PScCw2aBj2
dryJ5DXkhkaiGmJJr8BDC0aRmsIgGIZ3z/15FwvfRDKVOrA02piga4s2NAim+6Kf
LZTOG3ZbqA8Tr3LR/NioTzxHL186huhG+f3ac177+QC7v+LY4Hh2WdFyVZocB/Gn
OWwwrV7V8e5XHC3EP93r1zgtvGSY6dAVnIVuNr1rF+vxc3aeUtKWTV/LePZaQenx
tEcozY02MGjk3UOSgCCQK9PnwQfWw1vPyBml67c1fU7sG9YsODMAa9eKcx+qBe2l
ryN1
-----END CERTIFICATE-----
Generated at Sun Aug 9 00:15:28 2026 by rpki-client