Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nWTGuQxwASDwDHZWej1irRLWMl8.roa
File: nWTGuQxwASDwDHZWej1irRLWMl8.roa (raw, json)
Hash identifier: d0cYXJjfbuac9U6EeBBkpoW7ZhsAw/ByeAcs3phWru8=
Subject key identifier: 9D:64:C6:B9:0C:70:01:20:F0:0C:76:56:7A:3D:62:AD:12:D6:32:5F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019E6B15BD3BBFD6E9C01BA6714EEDBB548A
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nWTGuQxwASDwDHZWej1irRLWMl8.roa
Signing time: Wed 27 May 2026 20:17:27 +0000
ROA not before: Wed 27 May 2026 20:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 104.222.180.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 20:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:15:bd:3b:bf:d6:e9:c0:1b:a6:71:4e:ed:bb:54:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 27 20:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d64c6b90c700120f00c76567a3d62ad12d6325f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:86:96:a2:08:5a:0e:d2:2d:09:a0:8d:33:
70:7f:a8:77:00:f3:97:c1:30:62:77:42:67:25:01:
9e:26:d4:59:e2:a6:5c:cf:15:eb:ae:f5:61:95:8b:
c9:6d:45:c2:d2:eb:da:d9:4c:b6:3b:49:8f:be:f0:
75:5d:c2:0a:48:a5:9c:62:58:d5:93:54:32:59:e8:
a1:47:b7:e6:07:af:25:e8:dd:c7:30:e7:ca:a5:f9:
03:36:fc:34:e7:d6:27:f1:b8:eb:0b:8e:e8:53:b0:
b6:4e:7d:ae:98:c4:a3:85:11:f4:24:e9:95:4c:25:
14:2f:9b:35:2a:63:27:8b:ed:c9:d8:2f:38:b8:f0:
11:8b:ea:6c:f4:b7:5d:f3:80:da:0b:07:16:99:7d:
b6:50:39:79:81:48:99:4a:75:79:0a:19:0f:ec:af:
69:12:a3:b6:f0:6e:be:9d:ee:ba:43:71:a5:c5:4b:
9c:80:a1:47:2e:8c:e6:cc:7a:0e:07:85:72:95:49:
67:99:31:f6:cf:dc:5e:3c:9c:91:32:cc:d0:ab:e4:
f2:62:89:14:ca:21:9a:59:40:4b:52:17:3f:43:d7:
78:81:2d:4c:6a:5f:95:27:5f:78:a5:97:09:3a:a4:
2b:06:70:29:b8:9d:e7:a2:09:22:26:5f:7b:2b:d2:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:C6:B9:0C:70:01:20:F0:0C:76:56:7A:3D:62:AD:12:D6:32:5F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nWTGuQxwASDwDHZWej1irRLWMl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.222.180.0/24
104.249.21.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ea:7f:9c:3b:ae:dd:cc:b9:43:cb:9b:7d:f5:06:16:3f:a1:
fb:18:f6:c9:23:2b:7c:67:bc:e8:61:5f:d7:54:40:f1:4f:93:
3a:97:d9:15:8d:d6:e0:a9:3c:9c:f3:da:9c:d5:42:2e:07:1d:
19:ef:36:01:46:da:95:f8:a2:47:ca:51:65:b3:bd:97:45:7b:
88:85:8e:31:1d:54:e0:f4:78:02:74:30:2e:b1:c8:85:a2:7f:
68:3a:6a:86:d4:4e:22:b0:85:a2:13:fb:59:2d:64:06:e1:02:
37:38:c2:19:f0:93:51:8a:c8:7c:32:27:4d:fb:1e:0e:1d:80:
f1:ce:b2:a5:97:31:21:df:d9:75:dd:37:05:f4:c2:92:5d:31:
eb:92:52:de:7b:a2:da:38:9d:33:3e:5d:73:8a:c2:ff:76:67:
70:3e:5f:c0:22:b7:5c:c1:f4:7c:11:eb:30:8d:93:92:3e:69:
cf:0a:b2:9e:21:00:6c:ad:e0:d0:55:f3:8a:73:02:9f:f1:fd:
c9:73:48:5f:19:66:8d:ee:11:dc:54:e1:c3:f8:f7:31:e3:41:
89:f1:08:f3:70:fe:9b:b6:60:5b:33:c2:50:e4:26:2a:1f:f7:
a6:8e:83:9b:ec:12:72:28:10:6e:e9:35:00:8c:97:36:44:e0:
80:b5:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 04:11:28 2026 by rpki-client