Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/866SJe0LMvqkXmL_tHBlCIa8FIg.roa
File: 866SJe0LMvqkXmL_tHBlCIa8FIg.roa (raw, json)
Hash identifier: NCFHRJFNos1XrUWSqNuhjaH/X4waiPYX9rg31GxgUSA=
Subject key identifier: F3:AE:92:25:ED:0B:32:FA:A4:5E:62:FF:B4:70:65:08:86:BC:14:88
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A140569921116528F0776A71FBE13BB25B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/866SJe0LMvqkXmL_tHBlCIa8FIg.roa
Signing time: Thu 15 Oct 2026 16:12:59 +0000
ROA not before: Thu 15 Oct 2026 16:12:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 64.137.29.0/24 maxlen: 24
64.137.34.0/23 maxlen: 23
64.137.40.0/23 maxlen: 23
64.137.114.0/24 maxlen: 24
64.137.119.0/24 maxlen: 24
64.137.125.0/24 maxlen: 24
64.137.127.0/24 maxlen: 24
84.246.108.0/24 maxlen: 24
204.52.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:56:99:21:11:65:28:f0:77:6a:71:fb:e1:3b:b2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 15 16:12:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3ae9225ed0b32faa45e62ffb470650886bc1488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:db:40:d9:7c:11:dc:cc:ed:f6:45:41:25:
1f:1a:56:61:9a:d6:37:e3:29:28:0d:fa:08:46:b1:
80:2f:0a:00:25:e8:fc:46:29:31:e7:b6:90:c5:a7:
f7:d4:b9:ef:7d:60:f8:dd:1d:ad:84:05:e2:ff:e1:
ab:33:29:fd:19:ff:0b:66:d9:c0:eb:43:bc:d4:34:
4a:18:b3:56:0e:1f:56:a5:2c:ba:59:c7:48:43:14:
ce:21:08:16:a7:08:2a:68:6e:b7:7f:84:75:ea:f3:
c5:44:25:09:4d:50:21:4b:29:1c:37:6a:e1:8d:a8:
4c:06:00:70:55:c9:13:20:8c:ee:42:0e:e4:a7:f8:
6d:09:a2:75:ec:41:ea:a0:f5:54:04:a2:43:80:f4:
fd:f4:8b:f9:b1:37:6a:40:ac:e1:0c:7c:31:54:ca:
bf:3d:38:fa:12:e5:cd:ac:b3:ec:40:27:18:0c:f0:
92:bb:1c:e2:9d:fe:c7:e2:2c:18:44:8f:fa:db:9b:
52:ea:bf:ab:8a:0c:91:55:83:40:cf:9d:2f:3e:f2:
c4:67:19:f6:94:5d:f1:7c:d1:27:55:51:75:74:d2:
23:71:d5:91:72:ee:b3:16:c5:70:a9:2b:be:e3:60:
59:39:e7:81:4c:c7:56:bf:6e:64:ce:39:52:f6:50:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:92:25:ED:0B:32:FA:A4:5E:62:FF:B4:70:65:08:86:BC:14:88
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/866SJe0LMvqkXmL_tHBlCIa8FIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.29.0/24
64.137.34.0/23
64.137.40.0/23
64.137.114.0/24
64.137.119.0/24
64.137.125.0/24
64.137.127.0/24
84.246.108.0/24
204.52.112.0/20
Signature Algorithm: sha256WithRSAEncryption
37:f7:c0:12:b3:8a:6f:5b:52:f5:83:49:06:71:95:d7:1a:3b:
80:a0:8f:4c:44:8c:b4:e1:ba:af:1f:17:77:0f:59:b1:f5:a5:
b8:77:3a:39:19:d7:c4:8c:21:08:7a:0f:f4:0f:ed:0e:d9:85:
03:51:5f:c1:7c:bc:58:ff:e3:b8:61:40:5e:9a:52:5f:43:a3:
fe:3b:5f:f6:76:a4:15:3f:8b:8f:27:45:a6:94:30:5d:64:3d:
3e:a2:54:75:9a:10:2f:af:ec:0d:e5:73:47:27:8f:d3:6b:27:
cd:ec:e0:88:d1:51:0b:a3:ba:2a:29:62:85:73:75:ad:c3:23:
c6:c7:07:15:15:90:0a:07:68:da:6c:5d:f4:47:fa:ec:3a:c8:
77:99:e1:66:87:d4:7c:03:0d:59:58:67:d1:ee:db:a1:fd:18:
e7:37:18:43:77:78:1c:ba:1a:d5:74:f3:ab:ad:01:bb:05:65:
8d:0f:48:66:69:0b:24:b8:79:c2:44:73:4a:5a:af:f2:aa:df:
69:18:4b:8e:49:27:09:22:74:0e:88:c6:40:ad:ff:68:09:e6:
23:38:f3:7a:06:6d:ea:6e:45:b5:40:46:4d:64:13:cb:b3:e6:
d9:c3:3d:20:a9:f8:00:4c:d1:f2:e5:35:7d:b5:31:0f:06:cf:
63:68:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:19:51 2026 by rpki-client