Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/q4dMqen1Vst5Rfl7fKcjPc32MI4.roa
File: q4dMqen1Vst5Rfl7fKcjPc32MI4.roa (raw, json)
Hash identifier: e9xlkLePKNF3r2AdRXbd6S4GBzjsQAY8keU9r6LeEus=
Subject key identifier: AB:87:4C:A9:E9:F5:56:CB:79:45:F9:7B:7C:A7:23:3D:CD:F6:30:8E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019ED76A4E07121A309D70DA35FD2708D249
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/q4dMqen1Vst5Rfl7fKcjPc32MI4.roa
Signing time: Wed 17 Jun 2026 21:08:48 +0000
ROA not before: Wed 17 Jun 2026 21:08:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62874
IP address blocks: 45.43.167.0/24 maxlen: 24
104.233.12.0/22 maxlen: 22
104.233.26.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d7:6a:4e:07:12:1a:30:9d:70:da:35:fd:27:08:d2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 17 21:08:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab874ca9e9f556cb7945f97b7ca7233dcdf6308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:a9:af:97:68:65:4a:51:bc:50:13:ac:42:
bd:dd:2e:6a:35:e3:ae:19:f4:6d:9c:4b:de:45:4d:
25:bc:fd:8e:7f:c8:58:9d:66:aa:73:88:79:04:a4:
a8:71:6a:6d:9d:ee:97:f7:40:69:42:c8:12:cf:55:
10:6e:98:8a:ac:05:3f:ff:69:99:90:5c:46:65:94:
b7:88:f5:98:73:3c:36:be:f8:34:a3:ba:75:e1:97:
25:1b:95:13:8a:05:47:62:8d:99:53:41:55:90:49:
dd:1d:bf:20:79:a5:02:a9:31:dd:aa:25:a4:f6:82:
4b:60:e6:b3:65:dd:e0:d4:bf:8d:d8:83:52:d3:59:
1e:15:a0:9b:79:a4:e8:60:4b:b0:c7:90:5c:c2:9a:
09:f2:37:97:72:77:16:0a:38:83:ac:9a:96:2a:c7:
37:99:8d:ec:8c:7d:d1:66:98:e4:f2:ee:59:b9:39:
e5:7d:d2:8c:5b:6f:a9:1b:fb:94:31:a3:b9:2f:c2:
52:a3:28:f3:20:ec:63:79:f0:ed:eb:9e:86:5b:bf:
d1:61:d9:2f:22:27:ff:35:8a:82:81:8c:d2:ef:22:
21:37:97:d8:cf:71:27:07:30:5c:17:be:3f:83:70:
ae:13:9e:c4:ec:87:57:91:63:55:fd:69:4d:42:7e:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:87:4C:A9:E9:F5:56:CB:79:45:F9:7B:7C:A7:23:3D:CD:F6:30:8E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/q4dMqen1Vst5Rfl7fKcjPc32MI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.167.0/24
104.233.12.0/22
104.233.26.0/24
104.238.10.0/24
104.239.75.0/24
104.239.78.0/24
104.239.80.0/23
104.239.104.0/22
104.239.111.0/24
104.239.124.0-104.239.126.255
216.173.76.0/24
216.173.82.0/24
216.173.102.0/24
216.173.106.0/24
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:20:02:ce:21:b7:9f:65:7f:4d:08:b6:13:2b:a5:27:1a:ab:
4b:0f:b5:3a:d9:a8:8d:fc:31:7c:35:b2:b5:e0:1a:b9:d4:78:
b4:a2:64:5e:1d:6b:3c:98:26:79:9a:85:ba:7a:d2:0d:2b:df:
50:d8:90:15:0c:3f:b1:b9:c4:e4:35:a2:e0:d9:28:3d:f0:17:
05:55:cf:d8:3b:16:f6:9d:d1:ba:13:69:31:ec:bf:86:5a:ea:
29:2e:af:29:81:9c:74:e1:38:11:6a:b1:21:c6:92:c1:8f:df:
fa:3d:2d:8e:ca:24:9a:a6:ab:5b:b3:f1:eb:83:66:43:bb:b8:
67:f6:49:d6:c3:a6:d4:e6:6e:7c:7b:63:de:d4:4e:ab:a5:0f:
5b:ac:d9:ca:7e:ab:5b:a5:e5:e0:f7:b9:4e:e2:86:76:5f:9b:
da:d5:6f:b0:ea:0b:7e:10:d1:ca:e6:aa:77:0c:b5:21:7c:e8:
1d:3c:f7:84:68:37:0f:2d:ed:d5:81:7d:47:ac:6d:1d:63:90:
7a:58:86:dc:47:81:de:5e:b5:cc:76:4f:88:38:dd:13:4b:04:
5c:d7:ba:49:8d:e5:7a:6d:fe:26:65:c7:26:75:07:2d:a4:73:
03:a7:7c:27:a7:da:ff:56:da:4f:c7:8a:d6:f7:2e:cb:8c:d0:
92:7e:e1:8f
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZ7Xak4HEhownXDaNf0nCNJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjYwNjE3MjEwODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjg3NGNhOWU5ZjU1NmNiNzk0NWY5N2I3Y2E3MjMzZGNkZjYzMDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15Opr5doZUpRvFATrEK93S5qNeOu
GfRtnEveRU0lvP2Of8hYnWaqc4h5BKSocWptne6X90BpQsgSz1UQbpiKrAU//2mZ
kFxGZZS3iPWYczw2vvg0o7p14ZclG5UTigVHYo2ZU0FVkEndHb8geaUCqTHdqiWk
9oJLYOazZd3g1L+N2INS01keFaCbeaToYEuwx5BcwpoJ8jeXcncWCjiDrJqWKsc3
mY3sjH3RZpjk8u5ZuTnlfdKMW2+pG/uUMaO5L8JSoyjzIOxjefDt656GW7/RYdkv
Iif/NYqCgYzS7yIhN5fYz3EnBzBcF74/g3CuE57E7IdXkWNV/WlNQn4m0QIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFKuHTKnp9VbLeUX5e3ynIz3N9jCOMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvcTRkTXFlbjFWc3Q1UmZsN2ZLY2pQYzMyTUk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQALSunAwQC
aOkMAwQAaOkaAwQAaO4KAwQAaO9LAwQAaO9OAwQBaO9QAwQCaO9oAwQAaO9vMAwD
BAJo73wDBABo734DBADYrUwDBADYrVIDBADYrWYDBADYrWoDBADYrXgwDQYJKoZI
hvcNAQELBQADggEBAHsgAs4ht59lf00IthMrpScaq0sPtTrZqI38MXw1srXgGrnU
eLSiZF4dazyYJnmahbp60g0r31DYkBUMP7G5xOQ1ouDZKD3wFwVVz9g7Fvad0boT
aTHsv4Za6ikurymBnHThOBFqsSHGksGP3/o9LY7KJJqmq1uz8euDZkO7uGf2SdbD
ptTmbnx7Y97UTqulD1us2cp+q1ul5eD3uU7ihnZfm9rVb7DqC34Q0crmqncMtSF8
6B0894RoNw8t7dWBfUesbR1jkHpYhtxHgd5etcx2T4g43RNLBFzXukmN5Xpt/iZl
xyZ1By2kcwOnfCen2v9W2k/Hitb3LsuM0JJ+4Y8=
-----END CERTIFICATE-----
Generated at Sat Jun 20 08:05:07 2026 by rpki-client