Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vr12k-d9tAvqIhff4aCJBHFTnMc.roa
File: vr12k-d9tAvqIhff4aCJBHFTnMc.roa (raw, json)
Hash identifier: 46bPIBPfYgH4vialu4VL8gBXJQDRA6obns7gfJOT91M=
Subject key identifier: BE:BD:76:93:E7:7D:B4:0B:EA:22:17:DF:E1:A0:89:04:71:53:9C:C7
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A033DABC0B46B7ED7612AB4F87D123C6BA
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vr12k-d9tAvqIhff4aCJBHFTnMc.roa
Signing time: Mon 24 Aug 2026 12:59:28 +0000
ROA not before: Mon 24 Aug 2026 12:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22653
IP address blocks: 104.249.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:da:bc:0b:46:b7:ed:76:12:ab:4f:87:d1:23:c6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 24 12:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bebd7693e77db40bea2217dfe1a0890471539cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:a8:a4:d5:7c:4a:07:1c:d0:6e:63:16:03:
9d:96:eb:35:17:99:ba:cf:71:c6:16:af:54:dd:78:
c8:a4:1e:50:b7:7a:de:f4:e3:ee:78:23:5e:1c:36:
e7:2b:f7:dd:75:33:13:b6:b4:a1:a6:fb:85:ce:09:
27:1f:0e:9b:25:1a:a9:41:07:e2:95:54:7b:1b:03:
8f:c3:2b:70:8d:1b:27:07:35:22:03:9f:a4:3a:7f:
63:c7:c1:8b:9b:82:6d:ee:f5:14:c0:ba:dc:6f:40:
96:c2:73:38:38:e3:a9:da:5b:4f:91:73:a8:94:57:
ad:5b:68:eb:63:4a:5b:75:22:12:48:70:a9:37:47:
9f:05:72:0c:2d:0d:49:4a:f5:1a:67:ac:1d:03:a2:
7b:d6:f6:a1:91:6e:7d:85:71:a3:81:04:7e:ea:50:
5e:f9:64:d0:b7:06:60:47:87:fb:ad:c6:8b:6f:1a:
d8:30:0b:0a:55:26:dc:69:df:fa:69:fe:60:50:02:
4f:7a:a7:ec:78:a7:10:73:cc:69:ec:f4:7f:ab:79:
ad:12:ae:eb:10:87:6f:8c:6e:42:9c:9c:6a:a9:ac:
4e:2c:21:58:87:dc:c9:9f:3f:12:59:5d:b6:46:b7:
e9:6c:79:d6:00:48:72:dd:e1:3e:22:9c:b6:12:25:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:76:93:E7:7D:B4:0B:EA:22:17:DF:E1:A0:89:04:71:53:9C:C7
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vr12k-d9tAvqIhff4aCJBHFTnMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a6:b7:0e:20:eb:bf:3e:b5:39:52:41:c4:c1:36:67:b0:71:
d5:cd:e2:34:d9:6a:4a:d3:eb:09:4e:02:2b:fb:ec:09:d0:ac:
8b:bf:44:21:c0:94:87:53:aa:22:d1:85:72:00:83:e8:8c:b7:
97:e4:39:55:ef:87:b0:fb:05:ea:3e:2f:1b:a4:7f:f9:40:9a:
d9:99:7e:98:ad:30:40:44:2d:f2:27:5f:6c:3d:ac:94:89:01:
9d:eb:fe:5a:b8:4f:38:a7:01:e0:79:d7:f9:67:0c:45:5e:d2:
a2:36:21:b7:12:10:b3:3f:98:e7:3a:f7:bd:ee:ee:4f:7e:e3:
8b:45:16:c8:10:92:63:82:4a:2b:5b:36:f2:d3:54:cc:87:3a:
a1:55:ef:91:dd:5d:9b:1a:23:6f:b0:d6:fd:57:d6:08:02:9f:
bf:9a:95:b6:97:9b:75:c6:dd:8f:7a:ca:82:6b:12:61:b7:e2:
e4:8f:a0:a2:34:d9:bb:c4:b4:83:69:81:11:fa:9e:09:4a:a4:
59:81:00:ce:b5:b9:a5:fc:2b:11:5b:47:9d:6c:e5:1c:28:fd:
45:ad:f9:d7:8d:3e:6f:d7:f7:e9:fe:0e:60:b0:2a:d1:96:2e:
89:1f:8d:9d:44:64:97:6d:9f:d3:fd:ca:e0:1e:22:86:6c:a7:
de:e1:68:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:59:53 2026 by rpki-client