Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/C-IXyu3g2WSR2q8tp19puDRLKLw.roa
File: C-IXyu3g2WSR2q8tp19puDRLKLw.roa (raw, json)
Hash identifier: sma5a6pz8L0r9PEhcf4NWrBsl6i/0meQKSYIBrWCdic=
Subject key identifier: 0B:E2:17:CA:ED:E0:D9:64:91:DA:AF:2D:A7:5F:69:B8:34:4B:28:BC
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019ECA78737B469AA5CAA00B123FA73FAC26
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/C-IXyu3g2WSR2q8tp19puDRLKLw.roa
Signing time: Mon 15 Jun 2026 08:49:11 +0000
ROA not before: Mon 15 Jun 2026 08:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47692
IP address blocks: 104.239.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:78:73:7b:46:9a:a5:ca:a0:0b:12:3f:a7:3f:ac:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 15 08:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be217caede0d96491daaf2da75f69b8344b28bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:45:6a:de:49:46:43:7c:0c:a4:f8:22:71:
bb:e7:91:ff:75:aa:ba:d4:dc:38:42:5e:df:c5:94:
b9:16:84:e5:7d:d9:21:7b:58:fc:7b:0b:b8:3d:24:
5c:25:e1:b7:e3:9c:6a:86:4e:89:bb:24:1e:a7:ed:
5e:21:05:bc:79:7c:da:7a:c8:53:af:64:f2:1a:0a:
a1:fe:d3:0d:67:74:b2:f9:18:83:9f:07:c9:e6:cf:
23:6a:d5:18:cc:cf:b1:f0:68:09:f0:b2:f1:06:81:
aa:81:17:9b:e8:e4:b8:39:9c:7c:ad:60:1b:92:bc:
23:ae:cd:cd:df:18:d7:b5:8b:94:f5:5d:c9:cc:fb:
e5:83:0f:39:ec:e5:2f:17:1e:0d:f2:d1:1f:ac:cd:
ef:2b:72:b1:50:5e:6a:57:f4:b2:82:5c:42:05:0f:
7b:e8:66:b0:3f:f7:61:70:ef:43:d0:6f:c5:b5:98:
f6:8e:00:56:57:65:7c:89:27:49:5f:be:cc:0b:85:
4e:67:be:43:9c:03:dd:4b:8d:6a:f8:1a:f8:02:71:
ee:f4:bd:0f:05:92:a9:9c:9d:85:7e:55:3d:db:e8:
89:53:b8:19:8b:c0:df:68:be:d5:7f:eb:55:d2:da:
a5:f1:9a:cc:1a:c7:40:a8:fa:0c:9a:53:4f:f7:a4:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:17:CA:ED:E0:D9:64:91:DA:AF:2D:A7:5F:69:B8:34:4B:28:BC
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/C-IXyu3g2WSR2q8tp19puDRLKLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.127.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ac:ad:fb:ea:2c:60:14:b4:08:32:b4:e5:07:a6:56:14:87:
ad:7e:8f:6c:33:c8:8c:fd:1f:13:a9:03:a6:fb:75:0d:9a:bc:
68:5b:44:5d:0c:d3:dd:5f:69:84:8e:d8:5e:bb:ca:23:d0:cb:
bb:b5:c5:4a:5c:65:fc:82:f6:be:4a:6c:4d:0c:9c:b2:db:ae:
b6:d8:90:ba:0e:c8:90:71:d3:b6:57:1b:79:c1:74:c9:d4:d6:
50:bd:b0:6e:74:66:aa:14:2e:92:91:bc:18:3c:29:df:f8:33:
4f:26:e1:54:22:0d:68:fb:b4:79:f1:45:d7:a5:19:6a:fd:5f:
e4:0c:61:e1:70:40:4f:4f:b8:fa:b5:0d:09:03:ce:8d:bf:fb:
51:eb:84:6e:0b:05:b2:47:7e:14:b0:69:bd:4d:f4:65:40:3d:
80:2b:ec:0c:67:b7:5a:e5:4e:12:02:b1:16:b9:bc:e9:a0:76:
d8:f3:c8:84:60:2e:d5:e7:62:df:e4:21:6f:bd:b5:a0:ea:72:
e5:48:1e:86:6b:02:3f:e0:49:bc:49:f8:a1:4c:9a:ed:01:84:
e8:d6:97:24:e2:55:9d:5b:38:be:1a:41:3d:fc:a9:be:98:39:
93:e8:9b:34:96:55:91:49:c6:b7:4e:b4:36:0d:92:1b:c9:be:
f5:a6:65:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:54:43 2026 by rpki-client