Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/EpgH043xXq9mmdWcovwq1e4COpU.roa
File: EpgH043xXq9mmdWcovwq1e4COpU.roa (raw, json)
Hash identifier: hKFReukiEydbYQgAW8d5go+2AZz7SmQ26IchwEBj24U=
Subject key identifier: 12:98:07:D3:8D:F1:5E:AF:66:99:D5:9C:A2:FC:2A:D5:EE:02:3A:95
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A00021771B9BC55771F48F196C4425939D
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/EpgH043xXq9mmdWcovwq1e4COpU.roa
Signing time: Fri 14 Aug 2026 11:56:28 +0000
ROA not before: Fri 14 Aug 2026 11:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 64.137.109.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:21:77:1b:9b:c5:57:71:f4:8f:19:6c:44:25:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 14 11:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=129807d38df15eaf6699d59ca2fc2ad5ee023a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:12:02:2b:15:ad:80:98:9f:4b:15:78:d5:b5:
9d:9d:3b:b4:40:db:3e:90:90:5b:8d:c0:bf:de:d8:
de:98:e4:fd:3f:bc:69:37:90:bf:68:e3:5e:41:d0:
94:62:3c:17:e1:7d:5b:ac:bb:09:df:6a:d4:94:85:
ff:8a:28:af:45:b8:30:fa:3c:82:11:2b:23:a4:93:
3e:57:8b:bf:bd:97:d2:fe:08:f9:32:c2:ac:ec:eb:
03:8c:7d:ca:c3:f2:d9:4a:46:f2:9d:01:39:55:53:
92:87:1c:f4:cb:f0:8b:c8:55:30:f4:08:62:5a:60:
9d:3f:0c:98:fe:2a:89:74:2f:d8:8b:44:28:b1:15:
6e:52:b6:2b:ae:e3:1c:c7:04:65:37:41:63:57:ed:
0e:d1:78:30:61:53:20:fe:8f:fd:ef:44:5c:02:b3:
ef:df:b5:65:1b:63:89:b2:2f:fc:36:4b:92:ff:e5:
a8:48:76:15:c9:0f:d2:2b:68:77:b3:71:36:bb:ec:
ec:1c:06:2b:ec:e2:1e:9c:33:b3:81:e3:b1:d3:3f:
9e:a5:37:e3:4e:14:a8:ad:b2:6e:d2:a5:32:d1:80:
74:6d:f6:c4:62:f1:5d:fe:38:29:b7:67:d1:91:b8:
aa:e9:ed:bd:a7:45:37:14:b0:77:50:55:c7:f8:93:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:98:07:D3:8D:F1:5E:AF:66:99:D5:9C:A2:FC:2A:D5:EE:02:3A:95
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/EpgH043xXq9mmdWcovwq1e4COpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.109.0/24
104.222.183.0/24
104.238.6.0/24
104.239.12.0/24
104.249.22.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b3:27:66:f8:b6:b7:82:46:10:21:6f:9d:0c:f7:d3:b2:01:
54:c5:1f:19:d3:c7:37:8c:3e:87:61:ec:f7:48:0b:a5:af:64:
96:5f:10:9b:ee:e2:6e:36:85:62:ef:fb:d2:60:50:6b:6c:dc:
f8:15:fc:a9:99:59:69:69:df:72:94:af:dd:f8:1e:59:b6:b0:
90:29:11:9a:7c:e4:84:d7:80:9f:44:1f:9a:4a:c7:2f:89:ca:
db:3d:aa:8e:73:3c:24:a4:83:3f:09:b6:5d:a7:a7:4c:2d:db:
63:5b:85:f8:57:4f:05:fd:0d:77:69:12:f6:b3:25:1d:a1:66:
2a:3e:b4:7e:4a:5b:51:08:0e:78:f5:5c:60:83:b5:5d:f0:63:
56:09:c3:ad:63:73:de:66:2c:e6:09:02:d8:a0:ee:6f:eb:1a:
17:26:e8:6d:91:98:31:b1:76:41:6e:f0:39:b3:2e:78:0e:2d:
39:23:e5:ca:8e:f4:19:62:77:3c:ce:51:fe:98:f7:5e:98:f4:
12:3e:e9:c4:b8:b4:9c:9b:da:bf:47:53:ee:14:af:f8:b6:b8:
5c:c0:17:b7:4d:6a:f3:83:e9:c0:b6:22:0f:70:46:7b:65:9a:
24:13:eb:dc:d1:f1:81:cc:cf:50:21:cd:df:4a:41:6b:4a:7f:
d5:7a:2c:08
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaAAIXcbm8VXcfSPGWxEJZOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjYwODE0MTE1NjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjk4MDdkMzhkZjE1ZWFmNjY5OWQ1OWNhMmZjMmFkNWVlMDIzYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BICKxWtgJifSxV41bWdnTu0QNs+
kJBbjcC/3tjemOT9P7xpN5C/aONeQdCUYjwX4X1brLsJ32rUlIX/iiivRbgw+jyC
ESsjpJM+V4u/vZfS/gj5MsKs7OsDjH3Kw/LZSkbynQE5VVOShxz0y/CLyFUw9Ahi
WmCdPwyY/iqJdC/Yi0QosRVuUrYrruMcxwRlN0FjV+0O0XgwYVMg/o/970RcArPv
37VlG2OJsi/8NkuS/+WoSHYVyQ/SK2h3s3E2u+zsHAYr7OIenDOzgeOx0z+epTfj
ThSorbJu0qUy0YB0bfbEYvFd/jgpt2fRkbiq6e29p0U3FLB3UFXH+JPf7QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBKYB9ON8V6vZpnVnKL8KtXuAjqVMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvRXBnSDA0M3hYcTltbWRXY292d3ExZTRDT3BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAQIltAwQA
aN63AwQAaO4GAwQAaO8MAwQAaPkWMA0GCSqGSIb3DQEBCwUAA4IBAQBZsydm+La3
gkYQIW+dDPfTsgFUxR8Z08c3jD6HYez3SAulr2SWXxCb7uJuNoVi7/vSYFBrbNz4
FfypmVlpad9ylK/d+B5ZtrCQKRGafOSE14CfRB+aSscvicrbPaqOczwkpIM/CbZd
p6dMLdtjW4X4V08F/Q13aRL2syUdoWYqPrR+SltRCA549Vxgg7Vd8GNWCcOtY3Pe
ZizmCQLYoO5v6xoXJuhtkZgxsXZBbvA5sy54Di05I+XKjvQZYnc8zlH+mPdemPQS
PunEuLScm9q/R1PuFK/4trhcwBe3TWrzg+nAtiIPcEZ7ZZokE+vc0fGBzM9QIc3f
SkFrSn/VeiwI
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:08:42 2026 by rpki-client