Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vy7-YX9DEXzukHABChEY8N_d7uM.roa
File: vy7-YX9DEXzukHABChEY8N_d7uM.roa (raw, json)
Hash identifier: o5VHi/ZuUf3flqRcskZhurQ11+4Lhiq2YyKp9mKMLbE=
Subject key identifier: BF:2E:FE:61:7F:43:11:7C:EE:90:70:01:0A:11:18:F0:DF:DD:EE:E3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019CD75AB25D4EE27F086C1CDE9A97578F3C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vy7-YX9DEXzukHABChEY8N_d7uM.roa
Signing time: Tue 10 Mar 2026 10:46:11 +0000
ROA not before: Tue 10 Mar 2026 10:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 45.43.148.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:5a:b2:5d:4e:e2:7f:08:6c:1c:de:9a:97:57:8f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 10 10:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf2efe617f43117cee9070010a1118f0dfddeee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:f6:82:fc:98:ce:94:07:87:61:7b:93:5f:
9c:06:0c:00:b3:30:c3:af:65:81:b8:30:82:7d:bf:
b4:b6:bf:6e:8c:5f:b3:2a:d6:e0:0c:00:24:15:70:
bc:ea:79:88:f0:8c:b1:1c:cb:83:98:e2:34:ec:80:
38:01:5e:05:ed:4a:17:3d:51:44:a2:16:36:1b:11:
cc:23:24:3e:18:cf:ac:44:0e:e8:8a:25:d1:3d:65:
e5:40:76:58:4c:74:78:26:b4:d0:ca:cb:b1:21:f4:
66:03:86:9e:47:bb:ee:e0:a3:fa:d8:55:50:82:16:
fa:a4:88:31:8a:39:db:68:98:4c:cb:f5:8e:d5:bb:
cd:62:5c:14:24:23:06:72:3f:ee:2d:d9:73:78:46:
e2:1d:b4:4d:65:a9:9f:63:4b:d7:94:08:5e:49:a8:
da:b0:79:31:9c:ca:25:90:44:a1:33:39:2b:4f:59:
10:65:9a:5b:48:ed:e8:cc:f0:5f:a6:12:da:40:48:
52:08:b4:d2:8f:7c:95:dc:0a:f8:3a:62:52:1a:2a:
b4:e4:e1:58:71:3a:9b:f9:ad:a9:bf:ea:1f:48:75:
f1:cd:5e:25:87:81:2d:21:04:99:20:8c:f8:b5:6f:
62:ec:23:a0:53:39:cf:05:aa:b1:97:fb:bb:fc:a6:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:FE:61:7F:43:11:7C:EE:90:70:01:0A:11:18:F0:DF:DD:EE:E3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vy7-YX9DEXzukHABChEY8N_d7uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.148.0/24
45.43.151.0/24
104.238.28.0/24
104.239.14.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:74:25:d5:a9:25:8a:66:1a:ce:2a:49:b2:7d:b8:85:69:6c:
b4:03:5a:5b:63:bd:25:86:29:96:ed:d8:a8:87:4a:3c:6f:2e:
75:20:63:79:1c:05:38:65:09:6b:ed:c5:58:ba:91:09:54:b3:
f4:51:be:fd:3e:16:d2:66:be:9c:b2:5d:53:64:75:75:c3:cd:
09:77:8e:56:7d:55:fb:61:a7:9f:f3:01:80:8a:f6:fc:d9:d4:
91:e4:bd:7e:44:1a:e4:9d:c9:d8:24:82:9e:c3:22:80:8e:40:
79:71:77:d3:31:5f:a9:81:b1:89:da:52:ac:c1:e9:b8:26:a0:
7d:f6:bc:d3:c9:93:b3:7a:93:74:5d:ba:85:1b:fa:8d:8f:ca:
3f:3b:c1:53:bc:81:17:91:71:55:dd:bb:28:59:84:3c:8d:93:
ee:04:ca:7e:d3:66:c0:a3:cf:c1:d8:a5:bf:8f:93:8b:e7:85:
63:da:3d:11:96:70:a3:e4:10:28:a2:76:0c:85:a7:10:23:c0:
bd:4d:b7:1f:a6:09:d4:48:23:09:26:47:c5:79:db:75:ad:28:
a3:cf:47:34:55:1d:af:78:09:a9:27:c1:3f:05:a4:22:28:e0:
1a:d0:e9:d8:53:b0:c6:35:27:e8:0c:f6:2e:92:0c:51:db:87:
5c:4f:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:10:13 2026 by rpki-client