Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/rG7dswKt8GEd8XvrsvQDGqVY9AU.roa
File: rG7dswKt8GEd8XvrsvQDGqVY9AU.roa (raw, json)
Hash identifier: wPGv7gMVlEjaXe9Qo2BdWhyQZ8+ASUUyG6BVpr3xGqc=
Subject key identifier: AC:6E:DD:B3:02:AD:F0:61:1D:F1:7B:EB:B2:F4:03:1A:A5:58:F4:05
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A1A60DE38A4ADDF35BF4F5364A793A48C9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/rG7dswKt8GEd8XvrsvQDGqVY9AU.roa
Signing time: Wed 04 Nov 2026 10:14:50 +0000
ROA not before: Wed 04 Nov 2026 10:14:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 104.238.13.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:0d:e3:8a:4a:dd:f3:5b:f4:f5:36:4a:79:3a:48:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 4 10:14:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac6eddb302adf0611df17bebb2f4031aa558f405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:ca:86:a5:02:ea:af:56:32:72:bd:cf:d9:
1c:77:52:96:b7:80:b8:88:70:6e:ba:7d:7f:a0:9f:
d8:3b:c4:1d:23:0e:47:4a:6a:17:a0:39:9f:bd:ec:
60:d4:d3:72:1b:59:8e:e3:c5:56:e4:84:38:cd:62:
a4:d5:f9:19:c7:92:7d:8a:51:65:19:6a:29:e6:da:
56:d8:ba:11:27:61:6e:74:8c:8a:39:42:16:0c:e9:
96:e0:88:b6:93:a1:18:d8:7b:7f:5e:3f:00:eb:9b:
9a:19:a7:e2:d1:55:d5:cb:c5:9f:28:c3:53:e3:fd:
40:f7:17:25:b2:88:80:01:c2:30:ea:0d:ea:ba:c1:
f8:34:99:9f:74:8c:0e:10:76:6d:1b:3b:95:35:b4:
1a:95:50:ac:0e:68:a7:e6:a0:86:6d:60:b4:ab:b5:
fe:03:f3:b9:f0:fe:5d:cf:8b:03:21:f7:2b:9d:55:
50:43:a3:2d:fe:a8:8a:ce:b1:cf:ee:5e:0b:89:86:
76:3a:50:a4:01:dd:6d:97:a3:2c:24:3e:42:4d:51:
31:12:32:b0:4f:bf:ce:2d:f2:2a:37:47:29:de:7e:
c2:b0:3b:f1:c9:0b:7e:c9:52:1f:c8:b6:a6:1c:da:
8a:b1:f3:1e:a0:c3:2a:70:69:9a:70:bc:7b:b5:98:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:DD:B3:02:AD:F0:61:1D:F1:7B:EB:B2:F4:03:1A:A5:58:F4:05
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/rG7dswKt8GEd8XvrsvQDGqVY9AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.13.0/24
104.249.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ea:94:d3:20:57:ea:03:95:5b:5d:53:ac:a7:61:eb:d6:70:
fb:67:dc:fd:07:fb:fd:49:43:f8:b4:4d:87:63:d0:04:af:36:
3e:0d:2d:02:6c:38:12:5b:26:9f:41:03:44:d6:77:cd:f2:5e:
c0:91:57:a3:2a:c6:85:13:58:7f:15:6a:d9:15:cb:79:2b:c7:
61:d0:9e:03:7d:69:94:09:39:3c:98:c0:eb:21:54:71:06:35:
03:3f:00:c2:3f:ba:58:a1:84:52:6e:72:a5:f3:e7:44:7a:55:
4e:19:6d:88:a3:6a:6e:95:82:ec:f9:e0:d9:18:cb:32:94:a4:
38:47:40:e1:95:5f:c2:dc:f0:fe:37:c0:40:19:a5:10:5c:45:
6b:1b:98:4e:33:a0:0c:60:5b:7c:18:1d:b0:d0:e6:8f:08:98:
65:a1:49:4e:cf:41:14:90:32:b1:35:50:11:10:fd:e0:83:08:
ee:e0:62:74:00:bd:58:4f:99:70:4d:a0:3a:25:41:10:83:11:
44:71:2f:3e:a7:ee:83:80:80:04:a2:f0:d5:36:7b:18:34:57:
f9:7a:89:22:1f:da:3a:fa:51:2b:c0:2b:4a:b1:aa:e5:89:6e:
38:11:ee:85:6e:4b:b1:d4:b7:9f:b5:f2:b5:57:54:af:56:3d:
0b:a8:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:18:10 2026 by rpki-client