Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/D-zJ7QB6Cjgg3g-B472Omj_lcYM.roa
File: D-zJ7QB6Cjgg3g-B472Omj_lcYM.roa (raw, json)
Hash identifier: qukYNkeRDoi74zp7/uuGV/CMko5CZ8ak+T892DdtGDo=
Subject key identifier: 0F:EC:C9:ED:00:7A:0A:38:20:DE:0F:81:E3:BD:8E:9A:3F:E5:71:83
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019D85D680F987B05C3722A9359FABFA432B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/D-zJ7QB6Cjgg3g-B472Omj_lcYM.roa
Signing time: Mon 13 Apr 2026 07:55:20 +0000
ROA not before: Mon 13 Apr 2026 07:55:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13886
IP address blocks: 45.43.165.0/24 maxlen: 24
64.137.51.0/24 maxlen: 24
104.238.29.0/24 maxlen: 24
104.238.31.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
204.52.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:d6:80:f9:87:b0:5c:37:22:a9:35:9f:ab:fa:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 13 07:55:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fecc9ed007a0a3820de0f81e3bd8e9a3fe57183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:1e:9f:18:43:a5:29:f4:91:ba:52:d0:51:
d2:22:7f:44:72:07:c8:53:ed:08:66:92:00:8e:8b:
1b:af:a0:29:ab:97:d0:56:ec:21:61:b3:18:fb:4a:
62:55:22:b2:ab:00:cf:87:09:db:00:41:41:22:99:
2c:be:f2:a5:1e:f9:b9:8a:11:a5:e6:cf:09:2b:77:
c1:6f:de:49:d9:6e:ea:c3:42:18:cc:07:9a:a1:2b:
f0:9c:2f:f3:f7:39:05:a9:d1:ac:2d:cb:78:3d:0d:
38:17:58:75:15:4b:ca:c0:79:6e:f6:8e:60:6f:ce:
3e:3e:ca:dd:f5:2d:78:ad:52:4b:f9:bf:f5:6b:1c:
59:da:17:04:b0:fc:55:75:30:68:42:11:42:77:80:
bd:cc:30:7c:75:b4:30:86:e5:aa:78:3d:fd:c5:aa:
ba:4f:ae:91:8c:2e:73:bb:b5:d8:25:a7:02:a6:c7:
5e:00:1a:69:75:57:d7:d3:2a:fc:48:42:18:9e:a0:
1a:71:70:b8:53:b5:d7:a3:90:89:1b:37:f7:d2:60:
1f:9c:7e:2c:c5:c7:1b:94:89:cf:68:3c:15:9b:ee:
e5:75:13:3e:9a:75:31:75:21:3c:71:ee:a5:74:ab:
c3:ce:da:78:ed:f2:cb:22:62:87:0d:f0:9f:3b:30:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:C9:ED:00:7A:0A:38:20:DE:0F:81:E3:BD:8E:9A:3F:E5:71:83
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/D-zJ7QB6Cjgg3g-B472Omj_lcYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.165.0/24
64.137.51.0/24
104.238.29.0/24
104.238.31.0/24
104.239.15.0/24
104.249.18.0/24
204.52.112.0/24
Signature Algorithm: sha256WithRSAEncryption
81:06:61:70:91:48:f2:ce:d8:b1:ea:a4:37:25:11:f9:4b:92:
39:20:a4:60:94:d5:48:bb:e7:81:0f:dc:c2:42:a4:81:45:6c:
72:d1:10:8c:ec:f0:88:bb:6f:68:16:56:cd:85:d0:4d:51:7a:
62:ff:9b:82:e4:a4:e3:26:b2:d4:78:9f:fd:a2:54:eb:5a:d2:
95:78:ae:e9:9f:9c:6e:28:a1:67:5c:a8:a6:34:31:e6:08:a0:
81:63:d3:2e:e0:f2:cc:fb:ce:1b:e1:48:7e:7b:fe:a2:09:92:
55:bb:dd:e1:3e:15:93:ac:2d:9a:ce:38:41:79:01:58:c6:66:
86:2c:b0:59:48:58:f9:48:39:85:c4:51:3e:cd:b8:23:e2:a2:
ff:10:9b:71:a5:1c:85:8d:9c:da:9a:05:33:01:35:c0:f7:d0:
17:95:16:48:44:9f:89:e5:0e:cb:55:94:a9:64:1e:6c:dd:f5:
f4:05:dd:53:05:1d:a0:82:56:07:d5:f5:6d:75:03:d3:96:0a:
75:bf:e7:26:54:d0:75:2f:49:a5:e4:97:7f:f4:fd:1f:2d:ca:
05:21:55:6e:3a:1f:9a:64:5c:d7:17:e7:e8:59:14:92:ae:fe:
b5:8b:40:db:bf:68:d1:db:45:a5:64:a2:8c:00:93:21:e1:f1:
5c:10:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 03:51:44 2026 by rpki-client