Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LtIuLdjlNkxPOUULXoI-1ncLUmg.roa
File: LtIuLdjlNkxPOUULXoI-1ncLUmg.roa (raw, json)
Hash identifier: 2X0rpJWzy8i558QHP7Cl1Qwo6EZkxFmn6m5vwrJ7yTk=
Subject key identifier: 2E:D2:2E:2D:D8:E5:36:4C:4F:39:45:0B:5E:82:3E:D6:77:0B:52:68
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A000AF5E10A104FB1235FF4F670EC6B19A
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LtIuLdjlNkxPOUULXoI-1ncLUmg.roa
Signing time: Fri 14 Aug 2026 14:31:27 +0000
ROA not before: Fri 14 Aug 2026 14:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47692
IP address blocks: 104.239.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:af:5e:10:a1:04:fb:12:35:ff:4f:67:0e:c6:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 14 14:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ed22e2dd8e5364c4f39450b5e823ed6770b5268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:fa:b1:21:f2:9f:65:15:6a:7e:d0:21:65:
6c:e0:23:ba:ca:b1:25:1c:95:cf:dd:5c:39:7a:e8:
67:52:97:33:ea:0b:55:e0:4c:aa:b9:87:5d:b9:19:
8a:4a:22:53:2d:1f:3d:ce:1e:a1:13:7e:36:b4:7d:
83:d3:d3:5f:58:71:8f:6d:b0:2e:58:e1:f7:61:ad:
8f:ad:6e:26:a3:7c:cf:cb:bf:45:9a:3f:78:13:ed:
31:bd:28:6a:5a:0c:dc:92:0c:c3:e7:90:fd:11:83:
f8:02:bc:85:53:30:e4:93:21:40:d9:b7:9b:91:f3:
88:79:09:80:77:a0:77:8a:d3:ac:be:cd:40:ce:dc:
45:6b:ae:df:28:4c:43:a7:32:54:89:68:90:27:c7:
97:f3:23:31:19:1a:8f:41:39:fe:c4:6d:b3:9a:44:
9a:71:83:36:ff:89:a7:8e:77:c0:d1:64:f3:d0:bd:
63:83:6c:40:0c:10:5c:8c:9f:cd:87:61:a5:e3:46:
d2:c6:c2:ef:52:c9:79:a0:ad:32:e6:0c:e9:fd:18:
82:fb:63:43:40:3f:16:ce:17:34:1b:8d:62:6e:8a:
1f:f4:81:8d:2c:b5:62:57:b8:e2:ba:e6:3d:7d:cc:
79:5e:9d:b5:ba:2d:ae:35:c9:0c:5b:4a:e7:c5:81:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:2E:2D:D8:E5:36:4C:4F:39:45:0B:5E:82:3E:D6:77:0B:52:68
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LtIuLdjlNkxPOUULXoI-1ncLUmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.109.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9a:05:93:ea:37:bb:a2:02:d2:59:a7:4c:9d:bb:ba:6e:5b:
dc:9a:9d:86:1f:49:d1:a2:a3:cc:36:98:a8:34:4f:a9:48:16:
37:14:0f:a7:63:f7:0c:d0:ef:5f:78:21:99:29:25:8c:e6:10:
48:6e:e1:3d:74:5d:a5:59:1e:29:30:5a:6b:67:6f:c4:6a:eb:
e0:b5:44:f2:81:e3:19:92:f8:5d:3d:55:19:2e:87:a2:0a:3e:
90:de:dd:77:c4:52:47:1b:4c:73:93:d1:ff:0c:c7:3c:d3:94:
5f:58:80:ba:d8:39:70:96:81:ea:c4:6c:d6:f4:19:1a:6b:ab:
0b:e1:69:2f:d6:9d:87:b5:65:ba:90:ac:4c:4a:22:1e:38:74:
78:5f:71:f9:c3:bb:35:16:96:ff:59:09:58:9e:28:41:55:36:
07:5c:be:87:ee:2c:86:1a:bd:15:20:a2:ab:ed:4f:93:1d:78:
b7:63:70:f0:e1:0f:d2:44:cb:3d:34:9f:e0:49:87:65:34:e4:
e2:99:df:d1:4e:f7:ec:70:fd:9f:77:6b:88:28:85:cf:aa:64:
c0:8a:b3:ac:5e:67:3e:58:62:85:24:d9:1e:d4:25:49:a5:9f:
57:bd:ce:da:ab:ac:e3:a9:18:b0:b6:f9:e7:9d:6c:7f:0d:ae:
e0:53:9e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:08:45 2026 by rpki-client