Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YpnMIv1HXC_ArGacC3Yu4qOQiMQ.roa
File: YpnMIv1HXC_ArGacC3Yu4qOQiMQ.roa (raw, json)
Hash identifier: PAVfIWA7WM0U7Hg2+bkxLXn3QBYxGLVQ2N2FaspoV+o=
Subject key identifier: 62:99:CC:22:FD:47:5C:2F:C0:AC:66:9C:0B:76:2E:E2:A3:90:88:C4
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019E5EDD8AF5C2BAFD02D838DC0822246F92
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YpnMIv1HXC_ArGacC3Yu4qOQiMQ.roa
Signing time: Mon 25 May 2026 11:20:37 +0000
ROA not before: Mon 25 May 2026 11:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211567
IP address blocks: 104.249.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 20:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:dd:8a:f5:c2:ba:fd:02:d8:38:dc:08:22:24:6f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 25 11:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6299cc22fd475c2fc0ac669c0b762ee2a39088c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:4a:cb:d3:f9:22:74:e1:c2:4b:f5:2a:05:
67:38:ef:5b:7b:c4:bf:e1:d2:ec:7a:12:8c:21:43:
70:c1:de:91:b9:00:0c:92:08:d4:08:6a:99:6a:eb:
77:80:fe:ee:ef:77:97:26:10:40:fd:80:26:9f:04:
64:55:3f:5c:e2:23:f7:24:cb:58:94:aa:45:96:82:
d2:92:25:44:18:11:48:b9:9c:4a:54:f6:fb:7a:d5:
3c:e8:62:93:9c:cd:79:e1:a0:f2:fb:f8:39:61:fb:
f2:1a:58:5c:d6:46:c5:09:8d:8a:62:de:15:be:05:
f2:ab:19:1f:f1:9f:11:ca:03:f9:08:12:79:ce:31:
71:ee:fc:64:69:fb:ef:c2:d2:e9:6b:d7:8a:35:1b:
bc:f8:f7:a6:c2:4f:f6:7a:bf:24:ce:ab:6b:c9:08:
f1:7d:90:12:86:c3:32:a5:b7:af:ca:b0:e6:25:69:
c2:80:18:10:ec:92:83:82:16:5d:2f:50:41:7e:de:
95:90:f5:51:b5:df:e5:cf:0b:9b:77:d0:40:ff:0e:
56:43:85:27:f7:e8:4c:ab:fd:98:a8:a3:02:af:d1:
e4:db:50:80:c0:aa:8b:c3:07:7f:26:aa:a4:2c:f6:
a5:2d:5e:7b:87:ee:ec:d5:8d:8e:e5:2b:50:02:8b:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:CC:22:FD:47:5C:2F:C0:AC:66:9C:0B:76:2E:E2:A3:90:88:C4
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YpnMIv1HXC_ArGacC3Yu4qOQiMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:95:f6:5e:72:87:d1:0c:12:19:c8:01:0f:92:68:a6:27:05:
62:0d:bb:9f:4f:af:ab:a9:42:1b:56:69:31:6c:65:e3:53:85:
5f:c7:8c:9b:94:d6:3d:36:c2:64:e8:2f:4a:81:41:54:4b:8c:
ab:a1:3b:d5:c8:e5:bf:50:86:6c:b7:d8:9d:9e:6a:ed:53:95:
f6:74:f5:4d:1a:20:43:f1:92:c6:ce:91:9f:0a:95:2a:e1:e0:
2b:17:9c:c7:fe:7d:de:77:8c:92:8d:65:07:82:de:f0:6a:81:
4f:fc:c6:88:12:41:f8:88:37:4a:93:96:95:6e:b3:6f:96:87:
29:ab:d1:3e:03:dd:5a:97:a9:e3:36:f5:df:3d:32:92:a2:78:
00:b9:13:b7:68:8c:25:cc:1a:f8:66:4a:25:96:8d:db:8d:7f:
a7:63:dd:15:02:4a:01:b8:6e:87:6b:00:3e:5c:ac:90:5b:dd:
14:4a:37:92:58:c2:35:0e:32:58:bc:e6:f1:1e:77:48:a6:00:
bd:a5:8c:51:78:87:57:58:a8:08:d3:c5:e0:d7:3f:61:20:8e:
fc:73:d0:61:70:40:9d:77:93:c7:dd:4f:2f:7c:d6:f6:ca:57:
ad:9d:cb:1c:38:0e:ca:3c:94:4c:14:b6:8f:2f:30:3e:96:26:
42:3b:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 04:10:31 2026 by rpki-client