Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/tG_Uy1Kjt0djd6eNr0SnZwfFvxU.roa
File: tG_Uy1Kjt0djd6eNr0SnZwfFvxU.roa (raw, json)
Hash identifier: lslP3yUNJb6Vf+oXG06SH5hiuiZoQlpL9oGg6sB5KoQ=
Subject key identifier: B4:6F:D4:CB:52:A3:B7:47:63:77:A7:8D:AF:44:A7:67:07:C5:BF:15
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019FF53E09EE85A0B4D9CBA16D7D10BC7312
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/tG_Uy1Kjt0djd6eNr0SnZwfFvxU.roa
Signing time: Wed 12 Aug 2026 09:11:51 +0000
ROA not before: Wed 12 Aug 2026 09:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9002
IP address blocks: 104.233.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:3e:09:ee:85:a0:b4:d9:cb:a1:6d:7d:10:bc:73:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 12 09:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b46fd4cb52a3b7476377a78daf44a76707c5bf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:18:bd:59:30:94:45:08:d6:d2:b2:86:9b:
d0:00:5b:6d:16:35:d3:d2:ef:f3:61:68:a9:31:49:
4b:d4:fe:6f:fe:4b:5a:43:4a:cd:18:dc:dd:0c:70:
af:75:2b:50:ad:5c:d0:a2:68:ae:41:ae:19:18:84:
16:6d:41:8c:f5:4c:5b:58:ae:dc:33:7d:c2:ba:e0:
9f:08:9c:df:b7:7a:61:07:14:73:01:79:ef:f5:e2:
d1:d3:1c:d4:4f:c0:4c:64:97:f6:41:24:e4:e5:b5:
03:61:af:8a:9a:54:10:26:4b:59:74:30:59:88:b9:
c7:5f:a1:8b:2d:09:11:cd:3f:a1:e8:c2:0d:4f:5c:
94:9d:cb:71:27:e5:4b:eb:ff:be:42:3d:e0:3e:ac:
37:38:e0:28:7f:62:99:39:b9:08:37:6a:a0:71:d0:
34:d3:41:65:14:0b:c7:4e:08:cc:a2:c6:5b:71:ba:
1d:82:e3:d2:2e:5a:e7:03:f1:d0:3d:79:fa:20:f5:
34:7e:8d:be:f0:52:30:0a:ad:d1:5e:67:ac:55:25:
37:97:71:b6:ab:f1:dc:ee:14:b2:d8:f9:62:4d:0b:
6d:67:c6:19:78:0c:04:36:a8:83:b8:63:e9:df:06:
ca:4e:9a:f3:d0:d1:09:4f:e1:9b:b6:f5:2c:1a:fa:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6F:D4:CB:52:A3:B7:47:63:77:A7:8D:AF:44:A7:67:07:C5:BF:15
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/tG_Uy1Kjt0djd6eNr0SnZwfFvxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.6.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5d:5f:01:2d:93:4f:6b:d2:e4:30:93:47:03:0a:3c:8c:5c:
26:7b:32:6d:e7:07:9d:dd:ea:c3:d8:48:39:87:2b:97:80:1b:
9f:39:fa:e1:87:b8:9b:b9:a8:58:28:1d:fc:bd:df:10:0e:84:
67:e7:ab:d3:f6:13:5e:01:ab:02:a0:ef:c0:d9:25:76:57:e9:
3e:42:09:9f:41:9b:a2:57:ad:50:32:96:55:2c:78:14:04:fe:
23:c4:2f:b3:88:b4:46:62:c3:76:8d:c7:3e:3d:5a:ce:31:8b:
dc:4a:69:8a:17:0d:66:09:56:cc:6c:de:72:eb:4f:60:f1:cf:
93:3f:db:0e:cb:f6:53:71:b7:74:a6:95:05:bc:0f:80:da:80:
8a:36:32:3f:c5:56:2a:4e:e8:77:cc:33:2b:f7:32:93:e1:bc:
33:d5:42:3e:88:57:66:ad:75:f1:e3:d5:94:56:57:47:1b:b3:
47:8f:b0:16:4d:2f:95:1d:20:08:62:06:7b:ca:7a:b7:6f:6b:
62:75:d6:9b:be:04:4c:f2:ed:8c:9e:f8:ec:61:1b:09:23:e1:
3e:2b:e3:90:7e:cd:e2:cd:5f:65:6d:ce:f2:da:1f:31:75:b7:
97:11:b8:06:46:87:0f:e9:92:3f:64:49:2d:a6:9d:2c:2b:6e:
34:ac:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:08:43 2026 by rpki-client