Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/JL0dfMSrezPk1XCWuEhuxzLRxh8.roa
File: JL0dfMSrezPk1XCWuEhuxzLRxh8.roa (raw, json)
Hash identifier: m66qZpYz5bNZDpI8v6joyJc9yK5OMIEssIyUpBpWMl8=
Subject key identifier: 24:BD:1D:7C:C4:AB:7B:33:E4:D5:70:96:B8:48:6E:C7:32:D1:C6:1F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019D9B9893420AF8A2B940189D532C0532AF
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/JL0dfMSrezPk1XCWuEhuxzLRxh8.roa
Signing time: Fri 17 Apr 2026 13:19:20 +0000
ROA not before: Fri 17 Apr 2026 13:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198753
IP address blocks: 104.222.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:98:93:42:0a:f8:a2:b9:40:18:9d:53:2c:05:32:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 17 13:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24bd1d7cc4ab7b33e4d57096b8486ec732d1c61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:61:1b:a4:a3:79:36:f2:73:92:6a:57:f1:
7b:b2:53:51:69:76:88:fc:d2:36:7a:cf:73:14:ba:
2c:b0:66:53:9a:72:c5:84:60:b7:7e:d7:73:ae:72:
a6:99:83:c9:38:1b:ac:97:c5:e2:0a:ff:04:03:f9:
b6:e4:41:3f:3d:17:9e:1c:71:0f:cc:29:76:b4:68:
0f:ff:3c:45:97:2e:bc:9d:b6:64:44:da:70:e8:67:
37:cc:6c:ba:aa:5e:92:3e:11:b9:e3:62:17:69:8b:
05:45:b1:37:01:9c:93:0b:c2:4e:c7:22:54:b1:3d:
98:fd:85:b7:37:71:96:ed:86:33:89:61:53:6f:aa:
c9:59:65:86:40:13:1f:a9:86:0f:3a:b1:7b:fe:1f:
6f:fb:2a:89:09:2e:87:aa:18:4a:ce:e4:8a:e2:cc:
3c:04:b3:5c:2b:de:89:0d:3c:a1:a3:c4:8b:55:a7:
fb:64:93:ca:23:e6:e0:db:b9:3a:dc:ff:10:a6:ae:
7e:5d:4d:0c:3f:fc:80:f9:21:7f:3a:d8:da:e4:ab:
24:5c:44:d0:c6:28:4f:ef:10:e1:3b:cb:22:41:17:
07:fe:8c:42:a7:bb:bd:f2:49:36:ce:58:93:ba:76:
70:cc:3b:9e:ec:14:af:86:f8:56:b0:d0:ca:a3:8a:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BD:1D:7C:C4:AB:7B:33:E4:D5:70:96:B8:48:6E:C7:32:D1:C6:1F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/JL0dfMSrezPk1XCWuEhuxzLRxh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.222.176.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3e:c1:42:7f:6c:ab:3a:84:1b:17:5a:24:ba:78:2b:ea:c3:
10:d0:73:f5:e6:ca:35:80:84:a1:fd:5a:94:54:4f:82:c7:3e:
11:ab:ec:77:db:c5:ad:a1:d1:c7:bc:9f:02:6a:d7:a0:4d:13:
b6:de:30:61:7b:51:11:4b:61:fd:ed:7c:66:23:a3:88:d4:7c:
13:ad:ea:b9:95:c0:42:bd:ec:35:b5:c2:93:67:d0:b0:0c:56:
f8:23:1d:66:28:d3:93:a1:79:20:2e:c3:b0:e0:e1:a6:f9:84:
7d:84:ce:d3:6d:39:d5:41:2f:39:8d:07:31:11:a7:46:c5:29:
71:ec:42:8b:f1:93:52:5f:ee:74:8a:74:35:2c:36:3f:ea:5e:
2a:9d:d2:4b:3e:e5:73:c8:8f:45:94:9b:c5:52:26:f0:77:fc:
4a:2e:93:ab:81:ff:f2:cd:7b:6c:bf:bc:0b:b7:11:f8:7f:ed:
d8:62:07:28:81:6c:c2:36:e1:00:98:df:a0:f6:e0:5c:40:ab:
be:cc:84:dd:80:78:47:ed:bc:d7:74:ca:d4:da:ec:bc:ab:77:
0e:43:85:cb:7f:6a:d4:72:1c:c0:80:0b:84:09:dd:fb:df:5e:
11:a8:b4:63:0e:a5:0a:2d:bc:c3:99:3e:cf:b1:6a:71:e8:5e:
9b:de:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:21:14 2026 by rpki-client