Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/BcInNzaxqQm56GpPlf8Loe0e9W0.roa
File: BcInNzaxqQm56GpPlf8Loe0e9W0.roa (raw, json)
Hash identifier: hZrLdW0cDcIZkT7ZaKwiW6rbAwcvFax9jXuwhvfhdik=
Subject key identifier: 05:C2:27:37:36:B1:A9:09:B9:E8:6A:4F:95:FF:0B:A1:ED:1E:F5:6D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A0E74FA71523F7048A0CC738774A410277
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/BcInNzaxqQm56GpPlf8Loe0e9W0.roa
Signing time: Mon 28 Sep 2026 09:19:11 +0000
ROA not before: Mon 28 Sep 2026 09:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 104.238.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:4f:a7:15:23:f7:04:8a:0c:c7:38:77:4a:41:02:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Sep 28 09:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05c2273736b1a909b9e86a4f95ff0ba1ed1ef56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:97:b7:db:ec:db:10:4f:b9:8d:81:e4:04:
f9:ae:f7:8e:97:88:67:10:0d:f6:65:07:18:63:8a:
1b:8d:0c:06:c4:52:73:e8:df:19:cc:0c:b3:e4:bb:
26:ed:9a:58:1f:31:c4:53:9f:cb:c0:1b:e3:09:c3:
b4:1f:7e:7f:e0:00:29:ad:39:79:15:15:01:2a:19:
ee:a0:7f:1b:83:6b:f6:9b:d9:f0:a1:0e:bb:b2:f9:
b5:dc:8a:d8:ce:26:00:74:4e:f9:12:76:f8:32:bb:
ce:22:c2:f9:39:7b:89:7d:f0:77:50:c4:97:a0:0d:
5f:4c:09:25:a8:63:03:dc:33:4a:36:d0:12:e8:46:
8a:62:8c:c1:93:b0:79:35:ed:44:9d:d4:17:da:4c:
ad:31:11:3a:78:e9:fc:0b:8a:b2:4d:d7:07:ec:81:
af:84:4c:f7:8f:da:86:d4:93:c9:ec:26:8f:c7:d7:
95:8a:5f:8a:3f:ed:f9:48:ec:0d:3f:e4:e6:b1:96:
28:3b:48:cd:da:a6:eb:4e:59:ed:f0:b8:92:3c:b4:
44:77:ae:d7:11:2c:2e:11:85:35:ec:c3:19:2c:bc:
b7:92:38:ab:bd:da:0b:0f:f3:ac:34:f4:c6:4b:70:
7f:53:f9:bc:4b:3c:73:94:c2:99:19:01:44:b8:0d:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:27:37:36:B1:A9:09:B9:E8:6A:4F:95:FF:0B:A1:ED:1E:F5:6D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/BcInNzaxqQm56GpPlf8Loe0e9W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5c:05:e2:a5:78:a2:59:43:cf:63:0d:84:17:94:03:0c:e1:
fc:51:9e:38:b4:97:8e:c3:2c:0a:b5:f9:97:f3:2f:4a:56:e5:
a5:33:77:8b:c8:2c:70:2d:18:99:15:4e:81:0d:65:3e:f4:d0:
06:49:fd:5c:51:a0:af:49:96:03:ae:5d:14:6d:56:71:8f:52:
20:22:52:f4:83:ae:2e:38:0d:3d:2e:b9:5a:7e:b7:74:c5:fe:
f9:ce:42:7b:b0:f8:31:15:65:51:5a:cb:12:a5:29:59:83:88:
45:20:a8:31:e2:2b:fa:d5:d9:6d:5a:71:49:4c:2a:7e:64:5c:
a1:18:ea:92:f1:be:a5:20:07:5f:96:fa:32:8a:ba:05:c6:0e:
32:82:55:f3:81:80:8a:42:0d:1c:16:dd:79:b1:8a:6a:81:8c:
36:83:9f:32:01:b7:8b:c1:69:7c:f6:18:19:80:61:6a:cb:6e:
f3:f1:36:95:72:68:40:8b:04:b0:63:24:f2:de:75:42:85:14:
29:16:47:33:fc:c5:01:52:6e:ad:77:de:9e:6c:dc:15:1b:d0:
1a:db:af:1f:8c:55:92:ff:f9:47:7d:0b:3c:47:b2:3d:e5:85:
e4:d2:f7:b7:1d:ad:15:ba:1e:34:d1:62:cb:62:1b:27:aa:1c:
46:fa:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:05 2026 by rpki-client