Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CTwgEu5sKKe7ZLdkz7TG2VuXDA4.roa
File: CTwgEu5sKKe7ZLdkz7TG2VuXDA4.roa (raw, json)
Hash identifier: T4Kf7zptQdib0YtraCyi5hOBQUsObkPDqtXBrPsYZlI=
Subject key identifier: 09:3C:20:12:EE:6C:28:A7:BB:64:B7:64:CF:B4:C6:D9:5B:97:0C:0E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019FA4BFB34803FBC686AF77D07EA353C33B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CTwgEu5sKKe7ZLdkz7TG2VuXDA4.roa
Signing time: Mon 27 Jul 2026 18:04:14 +0000
ROA not before: Mon 27 Jul 2026 18:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 104.238.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bf:b3:48:03:fb:c6:86:af:77:d0:7e:a3:53:c3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jul 27 18:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=093c2012ee6c28a7bb64b764cfb4c6d95b970c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:04:7c:12:9a:ba:e0:49:f5:0e:67:3c:06:
8f:be:59:63:04:78:98:e1:b1:c7:f0:5f:d1:c5:77:
6a:f6:04:d9:f7:62:ec:84:5c:64:78:60:e1:2e:dd:
11:f2:ef:bc:23:a0:b3:09:df:a8:10:12:a9:5e:63:
ec:8d:d8:eb:b7:f8:da:e1:6c:31:0b:3c:4b:d6:54:
0f:72:10:cb:eb:a4:b5:37:7b:33:58:e7:97:85:47:
e5:e0:40:f3:24:12:4e:69:19:99:40:41:87:df:25:
10:94:4b:98:fe:0a:ef:b2:58:96:12:6f:65:83:91:
16:19:4e:50:32:dc:3b:d8:e0:79:86:b9:7b:f0:2a:
48:f6:22:6e:f2:85:24:ac:26:b1:2c:85:14:73:4b:
f2:e5:f2:f1:86:ae:f9:2a:b0:f5:fc:b7:04:48:c9:
53:e2:83:f8:51:87:85:9d:43:0b:05:dc:82:73:10:
28:ee:b4:e7:0e:2d:8c:9b:66:02:02:e8:2e:05:7b:
f3:ae:87:d4:65:02:be:0f:66:b3:db:83:4e:bd:67:
1c:6f:35:4d:7b:2e:4d:fc:93:05:95:48:5d:65:e9:
7e:46:7a:13:98:65:c6:b2:bb:15:84:c8:60:71:5d:
ac:c2:82:60:90:77:d5:a4:10:0b:9e:6a:5f:11:1e:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:20:12:EE:6C:28:A7:BB:64:B7:64:CF:B4:C6:D9:5B:97:0C:0E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CTwgEu5sKKe7ZLdkz7TG2VuXDA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:88:3a:c4:eb:f1:dc:77:bf:76:9d:30:7c:ef:95:0e:62:52:
fa:b0:42:6c:9b:4f:72:04:f5:ad:38:30:2c:6e:bf:14:6b:0c:
f2:dd:a4:57:e3:e4:27:07:d8:94:40:6a:65:8a:4c:da:95:fc:
f9:8a:c5:5a:61:d8:05:4d:9d:ca:c2:1d:9d:5a:dd:66:23:c9:
63:6f:75:e9:2b:d8:58:3d:53:27:98:fc:5a:16:4e:ec:93:cd:
c9:df:b9:1c:2c:ee:21:d8:30:fc:01:ca:14:63:c2:39:f4:60:
05:24:4c:54:ff:40:41:e5:fa:16:d7:c1:b1:a7:1e:87:db:37:
4e:97:ae:11:75:78:fd:89:fa:1a:36:d7:97:bc:f9:d6:fe:67:
63:a5:af:a3:51:c3:3c:5f:8c:9f:6b:e5:ba:d5:d2:f3:bf:1b:
dc:f0:64:4a:49:c3:2f:d7:5a:14:28:f3:65:50:35:e7:06:19:
d9:fc:fa:49:3a:8e:c7:f6:cb:3d:06:58:c3:ec:9e:3e:1d:a8:
2b:56:34:a4:02:e3:39:1b:51:69:50:7d:3d:e6:2e:82:24:06:
eb:cd:2b:e1:31:b4:13:ad:23:56:0f:c2:31:d9:f9:14:77:0a:
b5:d1:35:fc:58:03:e4:df:76:31:2b:04:07:c8:86:b1:f6:8b:
a8:bb:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:27:23 2026 by rpki-client