Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oZmpoKPrAkxFdcbDJEBJbA14Od4.roa
File: oZmpoKPrAkxFdcbDJEBJbA14Od4.roa (raw, json)
Hash identifier: cAhiRZJk8aonRSPqqMRPT8N5LH6PnoxghjniLsmEp0k=
Subject key identifier: A1:99:A9:A0:A3:EB:02:4C:45:75:C6:C3:24:40:49:6C:0D:78:39:DE
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019E3B75CF706C8EDA425E8C013CBA4B4997
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oZmpoKPrAkxFdcbDJEBJbA14Od4.roa
Signing time: Mon 18 May 2026 14:20:37 +0000
ROA not before: Mon 18 May 2026 14:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216253
IP address blocks: 64.137.54.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.238.31.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:75:cf:70:6c:8e:da:42:5e:8c:01:3c:ba:4b:49:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 18 14:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a199a9a0a3eb024c4575c6c32440496c0d7839de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:34:79:cb:28:ee:11:85:64:16:ef:d3:81:32:
d9:8f:4d:7c:a0:a7:37:8b:83:94:b9:cd:9b:9f:b9:
9d:d2:c9:cf:86:71:0c:2d:69:0f:e0:98:4c:87:68:
fe:47:d9:a2:a4:5f:75:82:15:12:80:16:bb:2b:f3:
41:4e:5a:e0:3f:f3:99:39:cf:fd:3b:e7:56:62:82:
eb:5b:1b:71:69:f7:91:a5:5f:a6:d9:27:cd:6e:82:
f1:ef:5e:52:97:60:d0:11:c0:d0:61:df:10:a4:4c:
3f:f6:65:df:99:42:de:1c:cb:b9:76:45:84:24:ff:
35:bb:db:8c:23:ff:6c:1c:76:62:a3:74:ca:af:64:
41:7a:fe:7b:f4:08:46:ac:ee:94:a5:38:d5:b8:63:
7c:d7:55:3b:75:59:17:ca:e6:6c:5a:3f:ca:8a:0c:
18:d6:c9:c5:71:3b:0d:6c:c1:bc:ef:4f:2f:30:85:
4f:08:34:d6:e4:57:9e:55:ab:dd:2f:6f:2f:4d:4c:
85:65:e2:52:3d:96:d2:34:2e:ca:74:5a:f7:e8:ec:
0f:12:23:33:1e:26:c7:be:13:13:9d:b5:83:7b:ba:
32:2e:f2:be:14:45:d5:80:65:ff:68:17:96:3c:29:
b6:e5:c4:07:15:6e:37:05:b2:76:a0:09:7b:5d:29:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:A9:A0:A3:EB:02:4C:45:75:C6:C3:24:40:49:6C:0D:78:39:DE
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oZmpoKPrAkxFdcbDJEBJbA14Od4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.54.0/24
104.222.189.0/24
104.233.56.0/24
104.238.31.0/24
104.249.44.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:bc:ec:92:44:b6:71:bd:b7:5d:99:9d:7c:b1:18:e5:a6:47:
02:d1:3e:a0:0d:3c:5c:86:8c:95:24:ab:fe:3b:8d:77:bb:c3:
d8:f1:48:0d:80:27:f2:ed:85:fb:72:a4:51:60:ef:8f:ba:be:
15:f4:b6:2f:30:41:7c:38:18:2b:86:60:60:96:41:6e:40:91:
d4:e4:aa:8e:5f:02:ab:d8:dd:14:b5:c5:bb:df:02:ae:1a:69:
e3:8d:e5:0b:a6:8e:81:20:78:b8:5d:69:21:e2:d3:93:61:b9:
31:37:84:b6:3c:a8:56:bc:9d:76:09:9e:a2:fd:4d:64:e4:de:
69:af:89:41:5f:75:a5:86:6c:99:24:d3:18:6b:b0:75:4a:48:
72:87:c0:30:8b:76:29:98:b0:f1:70:cb:d0:b4:e7:5e:68:96:
4b:02:db:d7:63:24:ff:1a:a5:96:2a:8d:1e:68:65:9b:05:67:
4e:4d:d3:b8:d1:ef:41:fd:e9:18:8c:01:89:f0:2d:93:42:a4:
5a:14:b4:76:31:82:8d:49:5c:78:cd:af:dd:f4:7c:ce:ed:0b:
e4:d5:0a:8e:9c:2a:e1:f2:ee:af:8f:4c:9d:33:68:2f:a0:df:
32:29:e1:2b:bb:20:cf:48:67:3b:43:df:14:91:c6:5c:56:96:
4e:ae:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 02:57:15 2026 by rpki-client