Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8ESiew_2KA732Gfe4LvDVliy2Rk.roa
File: 8ESiew_2KA732Gfe4LvDVliy2Rk.roa (raw, json)
Hash identifier: WrF4PuBQWTnguf6GNLZNqR04oAAT+yR5JN+Q+yTJCT8=
Subject key identifier: F0:44:A2:7B:0F:F6:28:0E:F7:D8:67:DE:E0:BB:C3:56:58:B2:D9:19
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A13E95FD3ADB7C2DF281880F32CB7CB1B4
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8ESiew_2KA732Gfe4LvDVliy2Rk.roa
Signing time: Thu 15 Oct 2026 08:02:59 +0000
ROA not before: Thu 15 Oct 2026 08:02:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214854
IP address blocks: 45.43.152.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
104.233.4.0/24 maxlen: 24
104.233.5.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:fd:3a:db:7c:2d:f2:81:88:0f:32:cb:7c:b1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 15 08:02:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f044a27b0ff6280ef7d867dee0bbc35658b2d919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:21:6e:f3:9c:98:0e:47:4a:a9:79:0b:ea:
5c:02:4d:8d:75:eb:64:e0:3e:bf:22:1f:51:a0:91:
38:29:29:5f:5d:ae:58:30:52:9e:f6:6b:1e:58:ab:
59:a8:65:73:f3:b6:43:ab:04:83:f6:cf:d0:9c:8e:
8a:ca:22:dc:54:2b:e7:8f:74:6d:40:d1:4b:17:6e:
c5:f8:35:4b:47:d2:5e:b6:77:f6:cb:2f:f7:9e:b0:
46:80:b4:6c:6b:ae:3b:8d:61:64:ed:e5:4c:31:48:
4a:6e:ec:77:fa:30:b7:ce:8f:15:9b:66:fc:43:c0:
27:35:58:ea:f0:cc:05:6f:c1:a9:4f:91:78:56:d8:
f8:65:2e:ac:10:58:d3:9e:a8:7f:21:a0:e9:6e:1a:
81:60:55:68:37:26:57:e7:e8:08:af:41:81:2c:d0:
78:29:ae:39:66:c0:76:99:41:1e:e9:69:83:51:12:
29:3b:5a:1d:26:8f:70:64:49:67:96:29:8a:33:ad:
a3:41:02:eb:d2:17:f9:c6:11:12:a9:fe:b3:ac:b7:
59:4c:50:f4:29:09:b1:38:6b:dc:21:cb:d2:c2:f8:
81:54:fc:36:65:cf:8d:70:07:a1:91:b1:9d:3a:14:
e0:a6:14:3a:c6:f9:5e:86:47:a0:6c:8d:e2:5e:e1:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:44:A2:7B:0F:F6:28:0E:F7:D8:67:DE:E0:BB:C3:56:58:B2:D9:19
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8ESiew_2KA732Gfe4LvDVliy2Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.152.0/24
45.43.154.0/24
104.233.4.0/23
104.249.19.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b4:27:ba:61:41:ab:06:41:57:ae:9c:55:a3:0d:84:82:76:
38:57:86:d5:04:04:76:ea:ba:69:9d:4a:d0:cf:ad:be:d2:fa:
84:68:10:55:8e:6c:6c:0a:93:6b:30:38:c7:71:75:56:1a:95:
b3:a0:8e:c5:7c:d5:ad:a2:7b:8b:90:7c:37:51:f6:a1:6d:c5:
04:1d:24:37:57:36:78:94:d8:92:7d:17:72:42:e5:c8:d2:a4:
e1:3a:49:17:ec:d2:52:90:95:5c:7c:07:63:d8:0c:4e:cf:1a:
6e:ea:60:da:4c:76:ea:10:85:60:23:5c:4d:62:c8:a1:5d:11:
4e:b0:fd:2b:c0:d0:39:7a:6e:ed:7b:cd:57:53:a6:8d:36:63:
fe:9b:7d:41:42:1b:83:4c:b1:41:12:8b:77:ef:b2:30:50:5a:
7e:2b:c9:13:da:61:5b:af:52:87:a2:64:b5:d9:80:7e:3c:6c:
64:f4:2b:86:cd:3e:81:3b:17:a9:b1:7c:9e:94:e4:8f:ad:5e:
ed:2a:40:76:71:47:0b:18:6a:5f:a3:8a:f6:1d:fa:80:f0:6e:
d0:1d:0d:e1:1c:52:f7:11:05:24:74:42:bd:d8:bd:24:83:9c:
27:93:fa:56:ca:9f:db:13:3e:d4:61:58:78:0c:1d:fb:47:32:
e7:6e:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:19:54 2026 by rpki-client