Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ERwaTmUE5bEqvBxnCn3VV34hyxA.roa
File: ERwaTmUE5bEqvBxnCn3VV34hyxA.roa (raw, json)
Hash identifier: S6xPvhz1hOtkP8BIHTvAVPRxT5qjwQJudYJsbuKq/Dc=
Subject key identifier: 11:1C:1A:4E:65:04:E5:B1:2A:BC:1C:67:0A:7D:D5:57:7E:21:CB:10
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A014C7B8A65958B43B15C3058C709E6A27
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ERwaTmUE5bEqvBxnCn3VV34hyxA.roa
Signing time: Tue 18 Aug 2026 12:10:28 +0000
ROA not before: Tue 18 Aug 2026 12:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 45.43.148.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:c7:b8:a6:59:58:b4:3b:15:c3:05:8c:70:9e:6a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 18 12:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=111c1a4e6504e5b12abc1c670a7dd5577e21cb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:60:18:8c:96:9a:dc:50:74:ae:32:1b:ea:
c8:1c:67:20:7a:53:43:aa:59:de:02:bc:fb:0e:c6:
f3:ee:54:0c:7e:3d:ef:e3:59:07:6b:7f:eb:f4:ae:
9d:bf:89:38:5d:7a:62:a0:48:8d:89:11:0d:4d:05:
97:eb:15:f1:1e:83:aa:07:0c:31:ed:ae:cc:8d:5e:
76:94:7d:c1:b5:65:bd:b4:87:4c:d6:9f:b8:e0:ba:
93:b4:0f:f2:77:62:cd:58:51:08:ac:be:55:3c:be:
e6:ec:d3:cb:a5:32:01:2d:af:9c:f9:e5:e7:f0:36:
3b:4e:72:18:b0:4f:a7:e7:14:f3:24:38:a6:40:ab:
e3:36:a9:bf:40:37:03:cc:b9:14:82:8b:da:c1:ee:
dd:9f:76:bb:e4:26:02:f8:2c:7c:f9:b3:05:7a:8e:
ad:46:75:3b:ea:cb:3d:87:00:d4:83:33:01:a7:92:
f1:10:ef:cf:1e:3d:cc:68:1e:86:49:3c:96:dc:e8:
62:05:bc:84:ef:55:29:87:82:61:49:e1:4a:2e:92:
b1:7e:d6:53:6d:ff:58:38:90:ee:70:5a:f6:d5:7b:
ae:29:90:bd:57:e6:20:ad:30:45:2a:5c:d0:de:89:
a6:db:13:a4:22:26:b6:50:23:cb:67:1c:8f:5c:2a:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1C:1A:4E:65:04:E5:B1:2A:BC:1C:67:0A:7D:D5:57:7E:21:CB:10
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ERwaTmUE5bEqvBxnCn3VV34hyxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.148.0/24
45.43.151.0/24
104.222.180.0/24
104.238.28.0/24
104.239.14.0/24
104.249.21.0/24
Signature Algorithm: sha256WithRSAEncryption
65:25:ff:09:b2:66:d7:4e:45:d2:71:eb:3e:76:c3:13:e7:5b:
62:28:19:8f:82:6c:a1:23:5a:25:07:21:9a:9e:e0:13:e5:a1:
34:75:db:73:11:c2:77:34:f2:5e:02:57:80:f7:3b:68:0f:46:
5e:81:cb:89:39:39:b9:36:68:5e:66:d0:8f:01:d6:0d:c9:db:
5f:7e:20:3d:47:19:c1:c4:fb:19:55:a3:4c:2e:ea:b9:d5:40:
60:79:bd:89:25:4d:98:7e:96:d2:37:4c:fb:81:7a:2f:62:67:
a8:3d:76:ca:7d:c4:6a:67:d1:d3:3e:e2:cd:1e:ec:85:26:a2:
e4:90:b3:de:f5:01:ad:7d:c8:1a:1b:15:34:22:1d:41:83:bb:
ea:3e:84:88:d3:67:ac:96:c4:d0:b3:b3:5f:d1:ab:4f:3c:7f:
19:a0:8e:89:ef:17:78:38:a3:24:55:47:8c:59:8e:bc:67:88:
03:a6:56:b1:8b:5f:8a:f3:8f:22:aa:29:29:ef:82:ab:2c:6a:
46:65:96:2f:5c:b7:de:2f:fc:f7:a9:19:6d:23:ac:a3:22:7f:
c6:4c:83:12:a2:89:3f:a0:7c:ad:15:de:ea:40:f4:c4:9c:d5:
51:ce:e2:7f:3f:e3:53:9d:a6:3b:ae:17:39:3b:6e:9b:63:5d:
72:72:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:56:48 2026 by rpki-client