Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xg8jMsmoGgGh9Qis8PgaFWRzELA.roa
File: xg8jMsmoGgGh9Qis8PgaFWRzELA.roa (raw, json)
Hash identifier: AB95HsHFfI/UFY2q/b2bDv1W7RaEAlIMQuF4PXugmOE=
Subject key identifier: C6:0F:23:32:C9:A8:1A:01:A1:F5:08:AC:F0:F8:1A:15:64:73:10:B0
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A033DABC5BD7F03B41C16CACE0A6C77989
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xg8jMsmoGgGh9Qis8PgaFWRzELA.roa
Signing time: Mon 24 Aug 2026 12:59:28 +0000
ROA not before: Mon 24 Aug 2026 12:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199959
IP address blocks: 104.239.74.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:da:bc:5b:d7:f0:3b:41:c1:6c:ac:e0:a6:c7:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 24 12:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c60f2332c9a81a01a1f508acf0f81a15647310b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:f5:9b:59:66:22:c1:ce:20:a3:5c:85:6f:
a1:a8:a3:72:18:18:bf:ba:09:1a:99:e2:74:6b:a0:
9f:c3:bb:1c:ce:21:5d:79:21:e5:4e:52:0c:4d:4b:
46:41:db:95:43:ee:f4:6e:f0:cb:db:4d:d0:d8:cf:
f8:81:43:d8:40:7f:49:fb:51:34:79:ef:a7:fc:d9:
31:42:0b:b9:ac:32:1b:4f:97:7c:7b:da:a7:be:34:
10:fa:fa:88:9c:0f:24:eb:54:12:26:b4:8e:c8:59:
c2:5c:f9:0a:cc:f7:c9:a3:3a:08:2d:c2:77:a3:c0:
9d:40:99:47:5c:58:81:73:6c:20:1e:be:6c:54:06:
a9:f7:e2:42:86:4e:49:52:e9:0c:6a:98:a3:3b:ec:
01:51:58:eb:e6:1c:e7:c0:e0:d1:f5:06:2e:d8:ba:
ec:aa:6c:32:8a:35:26:fd:b6:fe:90:7d:f8:fb:1a:
22:e5:6b:48:70:a4:f2:49:0a:42:8d:47:07:19:a1:
2d:cc:4e:5e:13:7c:c0:63:10:98:72:65:79:da:b1:
3d:d2:d4:96:e4:55:cc:0c:31:c6:53:21:e3:b3:f0:
bf:c9:cb:0f:4c:39:bd:d6:fe:e6:0c:0b:39:27:4e:
11:87:6f:5a:4f:63:51:23:6a:ba:52:8b:75:01:53:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0F:23:32:C9:A8:1A:01:A1:F5:08:AC:F0:F8:1A:15:64:73:10:B0
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xg8jMsmoGgGh9Qis8PgaFWRzELA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.74.0/24
104.239.89.0/24
104.239.102.0/24
104.249.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:de:b1:f6:55:fd:e6:5b:5b:c1:a0:6c:66:3c:62:21:b9:d9:
8e:fc:d8:57:b1:de:d6:26:77:d6:c6:c7:ca:80:54:50:81:13:
f8:a6:66:1e:44:a2:2a:95:73:5a:11:d8:9f:f1:16:36:6d:36:
7d:56:6f:e7:5b:88:54:61:71:4b:34:e1:93:c3:8e:9d:e7:41:
34:f9:69:32:3d:ca:3e:f0:3b:70:31:7a:32:7b:b0:88:0e:f8:
1d:64:92:ae:be:77:b6:19:ce:ce:5e:21:f8:58:05:10:e8:72:
fa:8f:ed:37:db:cb:71:ba:10:07:9c:31:c7:59:3f:03:ad:c9:
5b:e0:d0:11:0f:d9:d6:1c:4d:55:6a:c0:4e:ec:08:12:fd:de:
31:0d:61:cf:14:37:21:ad:32:ee:18:c6:ca:d7:79:a1:1a:2d:
c6:b6:9d:91:7b:20:68:4f:55:b7:34:1c:3c:00:7b:4a:35:4d:
c3:76:42:0a:80:76:a0:0d:a4:4b:b3:1d:81:f6:40:40:c9:7b:
3a:f3:04:75:dc:e5:6f:f8:f4:e1:b7:84:b2:03:61:b5:0d:e0:
d5:30:1e:65:05:45:e5:9f:d3:7e:c2:89:bd:5a:d7:7d:de:31:
ca:e7:5e:4e:56:61:b0:7c:a8:50:2f:d2:0c:3c:ea:37:b4:24:
8d:f6:56:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:59:52 2026 by rpki-client