Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G6wKMzB3PZYojvU60jCyQcjjKTo.roa
File: G6wKMzB3PZYojvU60jCyQcjjKTo.roa (raw, json)
Hash identifier: XhitIWFMM3g7xbJ/6JrfbOu3lF0nZN4lzcnoCgtqG7k=
Subject key identifier: 1B:AC:0A:33:30:77:3D:96:28:8E:F5:3A:D2:30:B2:41:C8:E3:29:3A
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019E689C324CEB6F957F95DBFDA3F9CBDB51
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G6wKMzB3PZYojvU60jCyQcjjKTo.roa
Signing time: Wed 27 May 2026 08:45:27 +0000
ROA not before: Wed 27 May 2026 08:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 45.43.148.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 20:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:9c:32:4c:eb:6f:95:7f:95:db:fd:a3:f9:cb:db:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 27 08:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bac0a3330773d96288ef53ad230b241c8e3293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:74:72:c4:a1:77:c7:46:1d:1d:10:70:9a:
dc:d9:fc:9c:5d:a8:0d:40:e9:99:8f:9b:4b:c4:e2:
d8:01:72:e3:f8:c6:ce:f2:b4:18:fe:cd:56:25:d6:
71:ec:2e:a6:a0:ed:ec:1c:e0:45:cb:ae:48:64:5b:
cf:3e:d9:6f:39:a0:12:21:c9:2a:25:d0:2b:c2:c8:
7d:e7:4b:12:27:98:76:26:8d:8b:52:74:1e:3f:e7:
14:ac:d8:5a:cc:df:8d:fe:bd:c9:7f:6f:3b:81:b3:
ce:9f:53:eb:3c:c1:6c:a4:a7:e0:6e:99:46:e1:8e:
03:20:fd:82:15:6e:48:bc:58:4d:7b:4b:0d:99:a8:
24:d5:64:7f:b5:ca:7b:1d:a3:09:40:af:b7:ea:65:
7a:00:34:50:b4:f3:17:02:9f:36:38:e2:9b:de:d2:
6e:7e:45:e0:ce:67:27:bf:b8:49:52:d1:f4:42:16:
c0:d0:08:0e:45:4c:37:62:0e:6e:69:7c:6e:1c:36:
50:bf:c4:1b:d5:ac:9b:e5:b5:1b:f2:cb:d5:74:ff:
39:cf:7f:21:48:a2:ca:af:8d:93:35:ee:04:be:9c:
03:08:9c:17:b5:51:a3:b4:93:c8:76:b1:51:1c:2b:
4b:51:1d:16:95:de:88:09:42:a3:78:2f:34:d7:e6:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AC:0A:33:30:77:3D:96:28:8E:F5:3A:D2:30:B2:41:C8:E3:29:3A
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G6wKMzB3PZYojvU60jCyQcjjKTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.148.0/24
45.43.151.0/24
104.222.180.0/24
104.238.28.0/24
104.239.14.0/24
104.249.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6c:5a:cb:38:4b:45:2d:b6:8f:85:0f:49:ff:6a:94:99:ff:
6c:2d:c6:18:be:23:f3:16:f1:a6:54:25:a8:68:68:1f:e0:d8:
f2:1e:fd:f5:6c:1f:b0:48:94:d0:a0:83:bf:dd:58:eb:34:74:
e1:11:85:aa:12:ea:d7:3c:76:d2:e7:0d:0e:c0:be:2f:43:ad:
cb:a7:f9:64:0a:14:c2:06:b8:93:52:6b:a2:72:d3:96:ba:ab:
ee:c4:d7:ce:2e:01:52:42:8a:6a:f8:0e:83:f8:f2:71:29:b2:
3c:f6:b2:8f:f1:ee:0a:28:c9:c1:9e:a9:cc:b3:d9:3c:bb:c1:
e9:c7:bc:f5:67:02:bd:0a:21:2e:62:2f:a3:f1:40:6d:1b:b0:
86:30:80:1c:62:b6:89:33:8b:36:87:e5:91:6f:8e:81:3f:b2:
88:a8:5f:4f:48:35:8b:a9:e8:86:e0:ec:53:da:79:7d:b0:00:
18:1a:d2:ba:5c:5e:4b:1a:31:eb:1d:fd:a8:56:78:9d:eb:33:
e3:50:ad:0d:eb:10:77:7e:99:b4:c5:ba:dd:7c:11:93:09:26:
5a:cb:c7:26:bf:0c:e2:33:9e:8d:e9:fc:d5:6f:90:81:13:34:
2b:6e:8f:68:08:36:ec:59:bc:f3:3e:ef:39:ba:64:4c:ff:f3:
e5:bb:63:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 04:10:45 2026 by rpki-client