Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/pqb4KBJovxvRQQ4q-ugA5Mnuau0.roa
File: pqb4KBJovxvRQQ4q-ugA5Mnuau0.roa (raw, json)
Hash identifier: GBuS6tHCD//2hFDgOz5UfdmneDvyB14m1gcFQCZ+Oqg=
Subject key identifier: A6:A6:F8:28:12:68:BF:1B:D1:41:0E:2A:FA:E8:00:E4:C9:EE:6A:ED
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A163A9FCFF108BA6CB1BBAFC928335A1D2
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/pqb4KBJovxvRQQ4q-ugA5Mnuau0.roa
Signing time: Thu 22 Oct 2026 12:50:47 +0000
ROA not before: Thu 22 Oct 2026 12:50:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 104.238.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:a9:fc:ff:10:8b:a6:cb:1b:ba:fc:92:83:35:a1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 22 12:50:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6a6f8281268bf1bd1410e2afae800e4c9ee6aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:73:7c:14:21:c5:28:47:45:e8:92:0a:5a:
bd:39:c8:be:79:06:89:6c:04:93:8d:d8:4b:5e:3b:
90:36:06:b9:91:9b:f9:54:80:83:76:b1:de:fa:43:
b6:e5:60:cf:e3:72:bc:17:e4:f7:1a:bd:7b:4b:bd:
e7:24:d9:96:57:a1:da:cc:19:f5:93:06:98:44:fd:
e6:60:81:fe:eb:36:6d:58:18:80:24:ed:56:68:20:
8a:63:31:d8:20:b7:ca:6d:5d:b7:af:e3:56:45:69:
26:f0:40:bc:0e:f5:60:2b:bb:73:fe:15:e1:68:1b:
09:61:97:c0:e3:22:b2:53:3b:03:51:b1:04:68:64:
da:a9:36:4a:0a:a4:b8:a3:71:5f:c3:d0:13:0c:73:
c8:76:c0:61:e0:e5:83:6e:73:fd:35:1e:06:da:b1:
ba:fd:7c:60:11:18:0a:3c:9e:64:00:1a:7e:42:4f:
6e:f4:04:3d:99:c4:c6:84:51:ac:58:24:e5:f8:8c:
3e:7c:37:37:97:c7:2b:4c:42:09:32:45:a8:5c:95:
b0:23:3e:55:29:96:77:20:ac:9b:47:12:01:5e:d8:
2b:b7:0d:69:24:ab:79:63:8e:63:b4:3b:2d:21:53:
48:e3:b8:d8:31:05:8c:ff:6d:74:bf:7b:9f:3f:d8:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A6:F8:28:12:68:BF:1B:D1:41:0E:2A:FA:E8:00:E4:C9:EE:6A:ED
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/pqb4KBJovxvRQQ4q-ugA5Mnuau0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.3.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bb:c3:8f:93:70:b0:8b:bb:53:7d:24:87:44:23:62:97:46:
6d:21:8d:71:7f:1e:3c:db:79:bd:9c:a2:41:97:0c:2b:31:a9:
02:ae:4d:6f:52:a3:cb:ca:bc:4c:a4:62:77:87:76:92:c2:0f:
6e:f9:0a:5c:64:4a:5a:5d:6f:a3:73:91:0c:9c:11:e7:cc:a8:
65:d2:05:46:4f:f3:f0:13:45:fc:e8:ca:84:69:31:ce:71:d9:
97:c6:45:7d:ed:56:70:c7:75:96:2e:6c:c5:c2:58:1b:d7:87:
c5:44:9d:4b:3b:09:7b:f7:53:1b:36:b0:8f:a4:a7:81:a1:4a:
87:93:a6:60:73:4c:e1:5e:6c:e6:cf:03:9d:0d:21:b9:44:bd:
49:4e:d4:ea:ef:76:b0:43:ce:18:11:c8:c8:b8:6a:3d:1d:84:
05:32:c1:3f:2e:6e:ef:3b:d6:3d:dd:ed:a2:70:3e:2c:12:85:
a5:52:9e:b0:16:96:16:47:eb:b4:50:46:aa:a8:a0:88:50:18:
8d:e9:5d:22:bc:1c:a0:34:e7:e0:00:22:da:b3:78:e0:c6:18:
81:00:d3:3c:87:4c:1f:10:a8:f5:62:66:5f:d3:c6:20:ce:e3:
dd:fe:bf:2d:8c:cd:54:6f:3b:76:58:62:cf:0c:a3:62:31:dd:
73:91:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:15 2026 by rpki-client