Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sBc8GPwkS14OOAaEPfES-JNTu6Q.roa
File: sBc8GPwkS14OOAaEPfES-JNTu6Q.roa (raw, json)
Hash identifier: Y/BQ5Pau/RVLCtxT27x88AGjB01qSiJfOPNi8ZSn/TQ=
Subject key identifier: B0:17:3C:18:FC:24:4B:5E:0E:38:06:84:3D:F1:12:F8:93:53:BB:A4
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A1881AA5DED5D86DC306F71138E5FD6589
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sBc8GPwkS14OOAaEPfES-JNTu6Q.roa
Signing time: Thu 29 Oct 2026 14:40:09 +0000
ROA not before: Thu 29 Oct 2026 14:40:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 64.137.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:1a:a5:de:d5:d8:6d:c3:06:f7:11:38:e5:fd:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 29 14:40:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0173c18fc244b5e0e3806843df112f89353bba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:09:7a:e0:c1:fc:e8:a3:c7:b9:0d:b3:96:
de:5e:1c:35:89:83:76:e8:51:54:2b:2f:fa:ca:4f:
63:b8:ee:c7:b2:81:e3:f8:df:34:f8:ba:84:a6:ab:
0e:17:79:7a:e0:19:01:62:cc:49:a0:46:24:e3:f2:
db:cc:3c:75:42:e3:c5:ef:13:2e:9b:24:ea:e2:90:
6d:52:a2:db:90:89:b4:cb:f5:46:53:b3:b7:0f:57:
51:1e:3b:4e:7e:4e:d2:72:c0:7d:16:56:db:0a:24:
6f:f4:29:9e:b5:6d:d8:5b:74:6f:b8:7a:1c:86:8b:
94:8b:4a:03:ef:c0:81:67:8f:55:10:55:c7:c0:3d:
de:21:cb:11:a7:94:94:a2:ac:4a:c0:b3:c2:2e:96:
2a:e1:2e:dd:e1:25:40:b0:6f:97:e1:8a:91:9b:c3:
b7:a0:ff:bd:8f:2f:df:7f:35:a8:e8:72:24:ea:1b:
d7:70:6e:2d:9b:44:d3:f3:c5:fa:39:d4:c4:94:c6:
71:99:f8:c1:cc:a5:f7:e8:75:64:9d:15:78:cc:11:
57:d9:59:6f:15:b6:ec:27:fb:51:54:0e:8b:d6:a8:
24:87:11:c8:df:ec:45:46:a8:b7:a6:3d:44:90:6b:
51:7c:54:19:57:5f:b3:2c:ef:ad:b3:7f:54:53:d8:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:17:3C:18:FC:24:4B:5E:0E:38:06:84:3D:F1:12:F8:93:53:BB:A4
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sBc8GPwkS14OOAaEPfES-JNTu6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.52.0/23
Signature Algorithm: sha256WithRSAEncryption
01:07:af:f8:fd:17:e2:9c:d2:d7:be:93:11:b3:67:91:98:ed:
86:41:39:03:ef:fe:07:ff:c9:3b:e8:bf:32:f6:6f:c2:a7:75:
2c:cb:5c:5d:88:d4:b5:a3:e5:87:cf:80:9a:37:9b:8a:4f:68:
6f:7f:eb:f6:e9:ef:59:38:8b:81:18:5a:9e:c5:ca:04:f0:61:
d0:cf:e6:e6:20:37:87:8a:57:6b:0f:4d:6a:00:87:7c:c7:b7:
e6:a1:e7:8c:22:d4:2c:e9:a6:b9:2d:75:9c:02:89:01:8b:bb:
9c:c8:21:88:81:72:5e:b8:ab:f9:4c:78:d5:0c:30:c5:0d:db:
cf:36:dc:1d:7a:ca:de:45:e3:41:4a:c3:19:35:cb:fc:92:31:
38:d4:76:9f:e4:dc:1f:00:89:50:d1:ab:d5:c1:3d:c8:48:8f:
0e:73:87:3b:b4:0e:ac:fc:a3:42:d1:63:be:8c:46:fd:7e:2c:
b0:b0:cc:dc:c2:9c:ca:f8:42:32:8d:c1:47:26:3e:c3:2e:12:
8a:79:38:82:94:5d:b6:fa:fd:59:38:59:4f:c2:16:ff:cd:4b:
2d:50:31:dc:3d:93:49:ac:0b:2b:8b:cb:86:ac:e0:14:92:2f:
fb:52:b3:77:48:fb:76:59:06:f9:96:84:c1:6b:66:7d:d7:c8:
db:02:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:31 2026 by rpki-client