Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Q4SboGHX-4eI_nXQYiAvjJM6QVw.roa
File: Q4SboGHX-4eI_nXQYiAvjJM6QVw.roa (raw, json)
Hash identifier: L5MgpdjtTSGvWpVh5A4akMIs35wFGz2kod7wuIJPCT4=
Subject key identifier: 43:84:9B:A0:61:D7:FB:87:88:FE:75:D0:62:20:2F:8C:93:3A:41:5C
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A1AD74A0E36CE931DD0F084DA684F77E49
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Q4SboGHX-4eI_nXQYiAvjJM6QVw.roa
Signing time: Thu 05 Nov 2026 20:44:24 +0000
ROA not before: Thu 05 Nov 2026 20:44:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13768
IP address blocks: 45.43.130.0/24 maxlen: 24
104.249.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ad:74:a0:e3:6c:e9:31:dd:0f:08:4d:a6:84:f7:7e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 5 20:44:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43849ba061d7fb8788fe75d062202f8c933a415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:46:18:21:f7:9c:e9:62:80:f9:c3:94:9e:
c1:8b:a8:87:99:c6:a9:65:66:45:75:b5:7e:e3:82:
77:1a:d9:2c:d5:cc:57:7a:69:5b:9f:90:08:ca:b6:
f5:14:dc:01:98:33:1a:4d:72:49:4b:ab:ba:d5:f5:
60:3a:c3:8b:1f:9e:a7:dd:a4:fe:87:a5:a4:7d:80:
ae:ee:ea:89:51:25:35:5a:6f:01:f3:62:5f:73:67:
4f:68:2c:7e:47:52:eb:ec:32:95:87:39:c5:75:cc:
04:8a:35:c6:0b:fc:15:7d:5b:6b:4c:50:29:6a:41:
0d:96:8c:da:05:a0:80:d7:f2:85:c0:25:30:81:42:
89:bf:e0:5b:61:10:83:c4:4a:87:06:bd:c1:5e:5b:
0a:43:7d:2c:3b:a1:07:c9:72:61:d5:84:1c:3c:be:
04:b0:fd:7b:09:0b:1d:a9:5d:a4:90:85:b2:b1:4d:
2c:3c:67:52:6e:87:1b:13:cb:6c:58:fc:e5:79:8d:
d4:90:8d:9b:f4:f7:c7:4a:18:52:1e:6b:ab:d6:f2:
f5:30:7f:b3:89:e4:8e:a8:1d:ac:23:ae:60:bf:fc:
82:dd:c3:ea:c4:c8:2d:42:f6:9d:fa:2b:95:1d:73:
e3:8f:1c:e3:bc:ae:62:78:58:06:ad:77:e7:e4:cf:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:9B:A0:61:D7:FB:87:88:FE:75:D0:62:20:2F:8C:93:3A:41:5C
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Q4SboGHX-4eI_nXQYiAvjJM6QVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.130.0/24
104.249.24.0/24
Signature Algorithm: sha256WithRSAEncryption
70:33:ca:59:e4:94:ef:fc:87:02:99:88:56:b1:f6:50:4e:ca:
ce:0e:9c:f5:68:d0:08:e1:d8:62:6c:d8:50:bb:73:02:7c:97:
05:60:c8:95:74:36:0a:e5:9f:13:5f:d0:d2:3a:19:98:cb:eb:
8a:9a:77:57:0b:ac:4b:c0:8c:32:00:8b:51:1c:93:1e:59:f0:
57:1e:4d:9f:f4:b0:66:b4:9a:3a:37:94:96:31:4e:c4:5e:0a:
e8:8a:4c:5d:a2:74:f1:53:22:84:f5:fa:00:68:04:e0:47:35:
3c:fe:1d:53:08:c4:46:0b:f2:fb:06:f9:b3:a9:a1:72:1f:e1:
8d:35:94:8d:e2:f1:e0:c3:55:77:46:b7:d0:b3:cf:fa:5c:f4:
a8:f6:33:10:52:89:2b:74:2f:15:26:13:ec:3b:49:ae:24:fd:
7f:e9:4f:e7:fe:2b:f4:69:a3:c6:25:93:73:b0:5d:25:82:19:
08:0c:79:37:8a:c1:a1:a1:c2:bf:c0:d9:8b:d5:b0:f0:a0:4e:
54:e5:69:fe:e5:4f:ad:d0:1e:d3:f4:f0:bb:45:94:64:c4:e0:
5d:22:ff:51:51:45:d3:83:11:af:63:21:3e:3d:33:e0:25:10:
1c:27:22:16:11:07:e0:34:9a:63:9f:3d:01:82:50:ae:0f:b9:
3a:9a:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 21:10:05 2026 by rpki-client