Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/GfkMtWiEMB6TO-W_M-hTlvLvzxA.roa
File: GfkMtWiEMB6TO-W_M-hTlvLvzxA.roa (raw, json)
Hash identifier: eDFw4MfQAENvojWVuqf5t4jcrYrhQ85Izxy20GI6pWE=
Subject key identifier: 19:F9:0C:B5:68:84:30:1E:93:3B:E5:BF:33:E8:53:96:F2:EF:CF:10
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A13F5BBDAA6ECA1169578536C77F7616E3
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/GfkMtWiEMB6TO-W_M-hTlvLvzxA.roa
Signing time: Thu 15 Oct 2026 11:38:59 +0000
ROA not before: Thu 15 Oct 2026 11:38:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211567
IP address blocks: 104.239.127.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:5b:bd:aa:6e:ca:11:69:57:85:36:c7:7f:76:16:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 15 11:38:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19f90cb56884301e933be5bf33e85396f2efcf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a3:f2:fb:58:81:87:a3:06:4d:9b:57:be:8c:
a7:10:ba:f4:e1:71:dc:af:4d:95:7c:a9:35:1a:f7:
42:75:31:4b:72:e9:62:18:2a:15:a2:28:18:5a:30:
d4:4e:59:69:65:25:14:6d:5f:67:82:f5:5b:10:bf:
df:44:fa:83:15:d5:0c:9c:d4:fa:53:46:88:3e:89:
b7:96:d0:8c:64:8b:52:6a:b1:79:b8:84:57:fe:9e:
c5:27:d5:01:21:90:03:64:53:a8:80:12:04:7b:a0:
ce:84:37:d8:ec:f1:cc:6c:b6:ed:a0:0c:db:0c:07:
71:4c:f4:51:63:08:68:a9:4e:0e:52:18:5b:81:2a:
9b:a6:c5:c1:e0:01:19:89:eb:29:e1:7e:bb:17:ea:
10:73:5f:83:55:97:b8:f0:7d:f2:eb:29:13:96:c4:
8c:1d:2f:67:a9:9b:88:7a:83:49:29:78:d3:c9:99:
61:b4:c5:dd:c4:ad:75:b9:35:59:85:76:bb:bf:de:
ad:f5:f6:ca:4f:70:96:29:b6:d9:b4:1d:8d:d0:ec:
3a:09:d2:ea:2c:42:53:f2:c2:5b:bd:bd:d6:d4:52:
47:d8:83:0a:33:23:13:2b:d0:4e:eb:5f:8c:02:77:
c4:0d:70:76:bd:23:d4:af:c8:29:f8:70:79:ee:a2:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F9:0C:B5:68:84:30:1E:93:3B:E5:BF:33:E8:53:96:F2:EF:CF:10
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/GfkMtWiEMB6TO-W_M-hTlvLvzxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.127.0/24
104.249.8.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f9:bd:86:65:d3:1a:a0:7c:1d:df:8e:92:ab:38:f2:06:93:
d2:c0:32:90:72:cf:11:78:39:6f:a8:f0:ab:45:b3:18:b5:66:
3c:ed:a5:84:ec:96:d7:75:fe:db:c4:76:cc:e8:35:a5:4f:0c:
b7:af:dd:c9:24:4a:d2:f3:ed:5d:91:46:59:39:f2:e8:6d:c2:
bd:e2:36:1d:fd:5f:db:c5:b6:7e:e0:18:96:1b:0b:f9:f1:80:
5b:e5:ff:01:3a:cb:c3:29:1f:c5:ef:c8:56:b3:8b:7a:5a:23:
77:70:53:35:f2:e9:16:54:2a:3d:1d:e3:cf:13:58:fa:91:ec:
24:96:10:68:be:bf:03:cf:a4:f3:63:84:6f:dd:ad:c1:85:63:
9a:ee:b2:82:c2:bf:a3:51:b8:34:29:63:bc:8c:97:f7:20:8e:
ae:eb:5e:72:7e:e5:fd:a5:c4:5d:15:1d:3f:85:41:82:f3:8f:
a8:e1:1b:44:93:f9:d8:2c:c3:57:41:45:57:85:b5:49:67:11:
e8:7c:bc:4f:89:e5:03:a4:8c:ad:2a:39:e2:2d:d6:dd:d9:5b:
91:46:34:ed:a2:c2:4a:b1:28:17:2d:8f:4a:db:7b:a1:0f:99:
f9:dc:8f:0c:89:09:29:df:40:4d:87:05:61:65:8b:f2:cc:ff:
f4:89:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:19:55 2026 by rpki-client