Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/J-aaYfgMPaEUnDIgYa1BkgeFr-c.roa
File: J-aaYfgMPaEUnDIgYa1BkgeFr-c.roa (raw, json)
Hash identifier: izO9D551eBf98uewGo3scjCddxm6B9KI3eZjghceJiU=
Subject key identifier: 27:E6:9A:61:F8:0C:3D:A1:14:9C:32:20:61:AD:41:92:07:85:AF:E7
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019D85D68016A2616F18FC487E281EC74F6D
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/J-aaYfgMPaEUnDIgYa1BkgeFr-c.roa
Signing time: Mon 13 Apr 2026 07:55:20 +0000
ROA not before: Mon 13 Apr 2026 07:55:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 204.52.104.0/24 maxlen: 24
216.173.88.0/23 maxlen: 23
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:d6:80:16:a2:61:6f:18:fc:48:7e:28:1e:c7:4f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 13 07:55:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27e69a61f80c3da1149c322061ad41920785afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:35:a7:2d:f4:7c:a0:16:2c:ee:04:21:54:
a5:83:65:ad:43:c7:74:0b:08:de:dd:e7:3e:db:fb:
77:b3:ff:02:f1:ec:b2:9f:a8:ff:5d:90:59:b8:53:
5b:90:14:d3:f6:6a:01:fd:34:dc:82:28:db:07:cf:
84:d2:62:1d:b7:1d:75:b7:6c:9b:2b:49:d6:a9:c4:
ee:8f:0a:75:1e:5b:3f:4e:7a:3b:ca:1f:c9:5f:7c:
21:20:7c:1a:c2:cc:80:99:d8:db:3c:39:3f:99:93:
f6:ce:c9:58:56:c8:ae:af:95:b0:38:ed:b0:84:56:
d4:0d:f3:86:a3:1d:48:84:44:40:78:94:fd:0c:21:
02:5e:24:f5:67:37:0a:d0:3d:31:52:36:e5:a8:cd:
b4:fe:bd:12:7c:d4:c1:b7:61:10:3a:b3:ce:35:d3:
3b:43:7b:a5:eb:89:5c:d4:9d:dc:ff:95:51:0e:d0:
e0:42:30:e9:77:49:12:d6:24:aa:ee:aa:8a:64:fe:
50:f1:e7:d6:14:e9:d8:57:f7:2f:cd:7e:eb:d3:16:
16:e4:5d:fb:2d:9d:71:2c:29:13:2f:57:a0:dc:78:
23:cf:21:ea:a1:ce:c6:9d:e0:d8:f4:0d:4e:ef:4f:
9f:23:6c:57:de:a6:78:02:20:ff:21:b4:83:a6:21:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:9A:61:F8:0C:3D:A1:14:9C:32:20:61:AD:41:92:07:85:AF:E7
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/J-aaYfgMPaEUnDIgYa1BkgeFr-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.52.104.0/24
216.173.88.0/23
216.173.92.0/23
Signature Algorithm: sha256WithRSAEncryption
74:47:c3:0f:6b:03:8c:5d:fe:b6:88:bf:74:37:47:b0:08:cc:
12:e1:ee:60:a5:36:2d:2d:ac:44:ce:f3:de:d0:86:f5:cb:2b:
5a:01:61:53:06:6c:ee:e7:7b:f3:b6:6b:89:44:a7:73:26:fb:
7a:3c:e4:4a:01:d5:be:c3:f3:ce:37:db:33:16:a6:d3:05:90:
9e:d9:33:a7:34:73:14:a6:80:b8:e1:74:80:25:a6:bd:e0:2e:
95:c9:19:63:4d:25:75:82:ed:9c:9c:f7:62:62:d3:48:28:47:
ec:f5:c7:74:03:ee:ea:54:46:cf:93:73:03:33:3d:30:db:b9:
78:30:34:54:d1:c9:ea:2a:03:6d:1f:f0:a6:d3:17:10:0e:aa:
9f:76:3c:44:d5:30:f3:c0:1f:4c:27:eb:e1:5f:30:19:9e:c3:
73:8c:e0:0e:ef:20:a9:f2:ca:b1:47:58:86:2f:58:1c:4f:5f:
e2:d4:83:81:a7:8e:65:f7:c5:51:ae:32:7e:cc:bf:f7:52:16:
77:16:3a:9a:01:ba:29:53:af:37:15:d4:09:3c:53:e7:5d:aa:
cc:75:46:83:67:ca:c1:23:cd:be:35:b3:12:21:06:f3:63:34:
a4:20:da:0e:de:9d:55:95:3e:8e:fe:e4:71:2e:1a:e4:dc:63:
c3:94:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 03:51:23 2026 by rpki-client