Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/rq-qjicB2qccsWJI4sD4fSfbc3Q.roa
File: rq-qjicB2qccsWJI4sD4fSfbc3Q.roa (raw, json)
Hash identifier: /7ZJNyO2fJIFeB6I+9IvzjTNxwGYGuvftmvLbT70G7M=
Subject key identifier: AE:AF:AA:8E:27:01:DA:A7:1C:B1:62:48:E2:C0:F8:7D:27:DB:73:74
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019EEE48451400250E51378C19FD0259D0F7
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/rq-qjicB2qccsWJI4sD4fSfbc3Q.roa
Signing time: Mon 22 Jun 2026 07:42:54 +0000
ROA not before: Mon 22 Jun 2026 07:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216253
IP address blocks: 64.137.54.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.238.0.0/24 maxlen: 24
104.238.1.0/24 maxlen: 24
104.238.31.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:48:45:14:00:25:0e:51:37:8c:19:fd:02:59:d0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 22 07:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aeafaa8e2701daa71cb16248e2c0f87d27db7374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:0e:27:10:a9:3e:53:90:c7:e7:77:8e:ca:
3c:10:ef:a3:55:97:2c:e4:a6:bf:28:12:ef:ce:50:
8e:c2:4a:e6:a3:ec:19:bc:19:a5:fb:f0:fd:f2:5b:
71:66:0a:80:87:27:f7:f3:2f:f0:a6:14:2b:47:b3:
9a:ba:5f:be:10:f7:b2:d6:6f:4f:d3:fd:46:e3:1d:
c3:48:14:92:fc:b6:97:35:55:0f:79:48:27:a5:b3:
e9:ff:87:2c:c5:b4:9a:47:52:5f:fe:8f:41:74:af:
1c:07:d1:6a:5c:90:39:e4:c7:fd:74:70:ca:1b:f6:
13:3c:f6:52:84:3d:58:7f:82:2d:71:16:5c:16:2a:
dd:83:0f:e8:5c:52:69:10:81:e9:8a:f3:bd:19:b2:
4c:46:c6:f5:5e:ed:78:97:ac:4b:11:6f:8d:c9:c0:
2b:92:d1:49:82:e4:9f:58:db:99:ea:f7:4e:12:7c:
5e:24:2f:95:4d:22:e5:1d:a8:a3:d1:02:c5:dc:11:
65:d8:39:63:18:e8:f1:8b:9e:34:32:7f:a9:0b:55:
00:57:cf:b0:d6:8e:e1:1a:91:64:da:64:97:64:03:
ae:ee:c2:6f:f5:3c:60:69:3e:a3:40:a4:cd:57:30:
30:7f:99:d6:19:c1:2b:1f:dc:1c:95:f2:8f:1a:77:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AF:AA:8E:27:01:DA:A7:1C:B1:62:48:E2:C0:F8:7D:27:DB:73:74
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/rq-qjicB2qccsWJI4sD4fSfbc3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.54.0/24
104.222.189.0/24
104.233.56.0/24
104.238.0.0/23
104.238.31.0/24
104.249.44.0/23
Signature Algorithm: sha256WithRSAEncryption
42:ca:d0:9e:2a:70:40:79:4a:b2:ca:68:9c:7c:b4:7b:e6:c1:
12:43:b9:9b:bc:4d:d2:37:1f:3a:df:e5:d3:50:c4:bd:a7:99:
cc:94:b0:d7:1b:ff:48:f5:62:c9:9c:45:ed:49:f9:60:1b:cf:
a1:9f:e8:b2:bb:cd:6f:87:9f:04:ab:32:d9:57:cb:18:9d:14:
ce:8d:f6:2f:52:f4:03:dd:71:56:24:83:b6:5f:ec:60:25:2d:
5e:81:27:a9:ad:26:03:99:ad:4e:23:47:f4:92:94:15:68:12:
66:3c:0d:99:3b:d0:fd:2f:77:b1:b9:cf:ee:64:36:72:40:bf:
c1:17:44:4e:79:d2:14:42:0f:a4:e2:3a:01:26:99:71:36:f8:
54:cc:90:8a:04:9e:46:6a:aa:de:d3:ab:15:49:6e:09:38:6f:
5f:07:fa:2b:ae:f6:07:97:a2:59:ef:87:59:b6:73:62:1f:a2:
fe:63:16:cb:bb:37:c6:f5:9d:a6:13:83:5b:25:5c:10:48:ce:
f4:03:ea:0e:ab:3c:78:aa:c9:95:6e:60:03:a8:f8:05:9b:48:
7c:e6:48:b4:d7:36:ee:74:06:8f:98:c9:80:9e:a0:a8:1b:ac:
3a:a4:06:27:88:c2:d6:e6:9c:e1:b7:25:c3:dd:19:00:12:6e:
f4:e3:fe:03
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ7uSEUUACUOUTeMGf0CWdD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjYwNjIyMDc0MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWFmYWE4ZTI3MDFkYWE3MWNiMTYyNDhlMmMwZjg3ZDI3ZGI3Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVEOJxCpPlOQx+d3jso8EO+jVZcs
5Ka/KBLvzlCOwkrmo+wZvBml+/D98ltxZgqAhyf38y/wphQrR7Oaul++EPey1m9P
0/1G4x3DSBSS/LaXNVUPeUgnpbPp/4csxbSaR1Jf/o9BdK8cB9FqXJA55Mf9dHDK
G/YTPPZShD1Yf4ItcRZcFirdgw/oXFJpEIHpivO9GbJMRsb1Xu14l6xLEW+NycAr
ktFJguSfWNuZ6vdOEnxeJC+VTSLlHaij0QLF3BFl2DljGOjxi540Mn+pC1UAV8+w
1o7hGpFk2mSXZAOu7sJv9TxgaT6jQKTNVzAwf5nWGcErH9wclfKPGncaawIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFK6vqo4nAdqnHLFiSOLA+H0n23N0MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvcnEtcWppY0IycWNjc1dKSTRzRDRmU2ZiYzNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAQIk2AwQA
aN69AwQAaOk4AwQBaO4AAwQAaO4fAwQBaPksMA0GCSqGSIb3DQEBCwUAA4IBAQBC
ytCeKnBAeUqyymicfLR75sESQ7mbvE3SNx863+XTUMS9p5nMlLDXG/9I9WLJnEXt
SflgG8+hn+iyu81vh58EqzLZV8sYnRTOjfYvUvQD3XFWJIO2X+xgJS1egSeprSYD
ma1OI0f0kpQVaBJmPA2ZO9D9L3exuc/uZDZyQL/BF0ROedIUQg+k4joBJplxNvhU
zJCKBJ5Gaqre06sVSW4JOG9fB/orrvYHl6JZ74dZtnNiH6L+YxbLuzfG9Z2mE4Nb
JVwQSM70A+oOqzx4qsmVbmADqPgFm0h85ki01zbudAaPmMmAnqCoG6w6pAYniMLW
5pzhtyXD3RkAEm704/4D
-----END CERTIFICATE-----
Generated at Wed Jun 24 10:22:46 2026 by rpki-client