Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oRoB8R8JqOAWVWZkyha_Uaxv_uY.roa
File: oRoB8R8JqOAWVWZkyha_Uaxv_uY.roa (raw, json)
Hash identifier: fZ8k8AvKNY1x60CzNS3FxxB4iYAhwq/AP4jNElhnSmQ=
Subject key identifier: A1:1A:01:F1:1F:09:A8:E0:16:55:66:64:CA:16:BF:51:AC:6F:FE:E6
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019938623B3016AC29A93E0C1AFABF8EFEDB
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oRoB8R8JqOAWVWZkyha_Uaxv_uY.roa
Signing time: Thu 11 Sep 2025 10:46:25 +0000
ROA not before: Thu 11 Sep 2025 10:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 104.243.199.0/24 maxlen: 24
104.243.200.0/24 maxlen: 24
104.243.201.0/24 maxlen: 24
104.243.202.0/24 maxlen: 24
104.243.204.0/24 maxlen: 24
216.173.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:62:3b:30:16:ac:29:a9:3e:0c:1a:fa:bf:8e:fe:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Sep 11 10:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a11a01f11f09a8e016556664ca16bf51ac6ffee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:21:f3:36:af:af:6d:06:75:8a:2c:ac:a6:01:
02:ea:b7:ea:b9:11:26:e8:08:c9:ab:4a:fd:99:14:
0c:d6:54:7d:b3:98:73:63:ee:2e:28:de:91:ba:fc:
80:83:c0:b8:07:32:88:89:d8:b7:97:36:1d:7e:ba:
17:0c:36:59:3e:e3:82:0d:68:d8:4d:2f:1e:4d:cc:
2c:65:fe:a8:9c:a4:95:06:b1:da:f8:04:10:29:f7:
5a:1b:fd:be:e7:09:04:41:ed:00:32:dd:98:7e:5c:
aa:e9:64:ad:61:ed:1a:bf:e2:a5:73:b7:e6:9e:23:
1d:06:ef:a0:70:14:e7:a1:8c:93:66:63:24:85:f4:
c0:63:83:68:db:c0:a6:40:f7:32:37:17:32:d7:c0:
49:72:e4:0b:d3:22:7c:b6:b3:ee:d1:14:79:ae:7d:
19:98:85:f0:30:ce:df:99:ff:a7:2d:4d:da:59:7f:
e0:22:7b:14:f7:fa:f9:85:6d:a6:b8:82:37:da:66:
85:66:4f:7b:e1:79:04:c2:d6:a2:c3:2e:d5:9e:c8:
f3:22:f4:f6:01:5d:ef:ca:6c:d3:64:b5:c7:fd:c0:
0f:68:b8:5d:60:94:fa:ec:25:bc:aa:55:b5:25:af:
a9:14:92:b5:ba:8a:cc:cc:2c:75:bb:1f:6b:75:43:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1A:01:F1:1F:09:A8:E0:16:55:66:64:CA:16:BF:51:AC:6F:FE:E6
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oRoB8R8JqOAWVWZkyha_Uaxv_uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.243.199.0-104.243.202.255
104.243.204.0/24
216.173.87.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d3:c5:47:e2:0a:e8:1b:40:27:20:37:c3:74:d4:ad:3c:ce:
bd:33:9a:57:a0:57:71:09:d9:d0:be:c9:2e:82:46:66:be:d9:
37:f8:1f:0c:17:c5:17:bd:bc:8e:a1:79:56:85:1f:45:20:33:
fa:8d:ed:17:d7:8f:e5:bc:76:b2:b2:78:94:92:b6:a9:e3:4d:
12:2e:ff:44:ee:7c:ce:66:ed:89:93:5c:82:8d:0e:cf:bb:35:
5c:28:77:cb:10:2e:26:23:38:8c:59:5f:a8:4a:b6:06:b4:10:
b6:17:2a:dd:a2:10:d3:92:8b:aa:69:56:c5:83:99:18:17:6d:
5e:78:ba:24:14:90:f3:70:f5:b0:13:70:75:7a:a5:4c:c1:b9:
49:77:f8:a1:e7:a8:18:38:6b:a7:d3:48:71:fe:3a:8b:26:98:
e3:4b:5c:5c:0e:55:d9:bf:94:72:e0:f2:ea:ba:37:ac:5c:8e:
22:5a:b0:84:14:69:c5:11:b8:0a:10:b9:3e:4b:9d:da:10:20:
15:83:5b:ea:1a:f3:51:88:ba:db:57:09:21:aa:25:ea:db:39:
6d:2f:4f:3a:59:c7:94:e0:6f:36:0e:e3:97:d0:ff:14:ee:4d:
98:70:e5:d1:6e:14:91:65:58:3b:1c:bb:4a:03:02:16:dc:5a:
43:83:a3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:12:43 2025 by rpki-client