Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8RL_i4oIo7CDpOzbLaz0Fu1wofA.roa
File: 8RL_i4oIo7CDpOzbLaz0Fu1wofA.roa (raw, json)
Hash identifier: 82+pBUUg0lrpZ9Zk1hxYQrWBrqLFlz/SYNiCSSXGYFA=
Subject key identifier: F1:12:FF:8B:8A:08:A3:B0:83:A4:EC:DB:2D:AC:F4:16:ED:70:A1:F0
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019FCD913E7EDAF6A036E932954C911AD318
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8RL_i4oIo7CDpOzbLaz0Fu1wofA.roa
Signing time: Tue 04 Aug 2026 16:17:55 +0000
ROA not before: Tue 04 Aug 2026 16:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219055
IP address blocks: 104.233.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:91:3e:7e:da:f6:a0:36:e9:32:95:4c:91:1a:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 4 16:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f112ff8b8a08a3b083a4ecdb2dacf416ed70a1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:54:48:b2:f7:3f:17:37:6f:cc:a0:36:42:42:
e3:d9:01:71:c2:35:5f:b2:9f:6b:69:22:18:e0:b4:
9d:78:7c:6d:d4:bf:b5:8e:8d:cc:cb:41:75:fb:f5:
6b:9e:d6:57:01:08:0d:06:f8:6a:1d:90:99:8b:0c:
f6:b6:d9:ba:27:df:1c:07:e7:05:c6:46:df:43:af:
4a:96:a7:ac:77:4a:76:fb:3e:d9:26:33:06:93:84:
44:bc:58:cb:2d:d3:d3:2f:58:be:a6:aa:0d:ad:19:
e9:16:a5:16:ca:87:89:94:a6:4c:36:01:6e:bc:d6:
73:b4:ef:28:15:f1:78:ac:00:d8:ba:cb:13:2f:68:
19:8f:62:08:ce:53:6a:c7:5a:d3:f1:c9:5f:26:a0:
db:cc:8f:d5:3a:28:b0:82:b3:98:14:0b:0c:df:10:
ed:60:76:70:90:3a:9c:ac:75:b0:31:73:5b:6d:c2:
9f:55:35:b2:fe:12:d0:00:5e:26:b4:f4:42:fe:22:
47:3f:38:b6:8c:79:d8:d6:4d:98:2e:7e:5c:41:59:
c5:ef:d4:b7:87:9b:01:35:44:f5:b3:33:19:d9:2d:
85:8d:83:7d:ee:5e:31:44:af:8b:1f:10:15:5b:b1:
f7:4a:63:cc:11:e2:6d:8c:d9:45:c4:3e:b4:78:b0:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:12:FF:8B:8A:08:A3:B0:83:A4:EC:DB:2D:AC:F4:16:ED:70:A1:F0
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8RL_i4oIo7CDpOzbLaz0Fu1wofA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b1:59:6c:31:dc:85:e6:54:15:14:c0:b1:fc:45:b8:97:c4:
7f:a9:fc:8b:80:f0:1b:ee:50:6c:c1:b3:34:5d:bf:31:ae:81:
95:00:ca:d6:80:4c:0a:6a:e4:7c:63:f3:65:42:5d:0b:3f:8d:
61:08:11:1e:b2:70:2d:a2:33:17:46:b3:92:5b:dc:eb:b0:5d:
67:a6:7b:98:de:f0:ce:3c:f0:40:c2:dc:56:50:2c:55:17:0f:
62:9f:eb:66:2c:11:cf:65:4d:2a:84:60:27:ae:03:b9:dc:a5:
66:e8:0f:df:39:4b:c9:4e:00:fe:4b:d3:3a:e5:0e:01:df:99:
37:fb:0f:47:ef:87:eb:09:10:79:2c:8f:dd:32:da:ca:2d:5a:
40:b9:af:a5:05:e2:a1:8e:c3:63:3a:18:27:4c:c7:de:42:76:
d7:81:29:1c:23:83:f1:2b:cf:0f:db:7f:db:41:c0:87:17:08:
c6:e4:e3:bd:89:ab:2a:83:94:3b:30:2f:e0:f3:c0:7c:f5:d3:
fc:f5:f3:30:0e:65:ba:d3:78:4d:48:06:dd:b9:12:52:7b:4f:
65:42:a7:22:04:fc:70:00:8b:b6:7c:10:2a:f3:08:58:09:bb:
bf:13:e2:12:8c:22:97:d4:0b:95:f1:df:6c:3c:1b:62:8b:42:
52:76:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 21:45:17 2026 by rpki-client