Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/26wx0i0pj9Kx0t2ab8xINQ96gUM.roa
File: 26wx0i0pj9Kx0t2ab8xINQ96gUM.roa (raw, json)
Hash identifier: eCq4bZJbLNiHTBZMmwmtRKa813MJ5bYZW73o+LEriV0=
Subject key identifier: DB:AC:31:D2:2D:29:8F:D2:B1:D2:DD:9A:6F:CC:48:35:0F:7A:81:43
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019DFC864B9E940F2F9C281D3F10548D85E3
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/26wx0i0pj9Kx0t2ab8xINQ96gUM.roa
Signing time: Wed 06 May 2026 09:02:32 +0000
ROA not before: Wed 06 May 2026 09:02:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211001
IP address blocks: 104.222.179.0/24 maxlen: 24
104.239.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:86:4b:9e:94:0f:2f:9c:28:1d:3f:10:54:8d:85:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 6 09:02:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbac31d22d298fd2b1d2dd9a6fcc48350f7a8143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:15:59:1b:dd:2f:ec:9e:35:ca:bc:fc:3b:95:
9c:62:65:ff:f2:10:25:bd:a7:cf:4d:d8:a2:1e:9b:
1e:d5:86:d7:10:72:41:46:68:e1:12:b1:10:05:51:
b8:db:7d:ce:8a:04:40:83:a6:18:77:b2:cc:1a:87:
35:43:a0:2a:75:11:c4:08:13:00:fa:1b:57:fa:b1:
eb:f4:b2:8c:4c:04:f5:4f:6b:42:f9:88:df:bd:0c:
fa:56:5d:00:ef:1f:dc:2a:2d:a3:aa:80:80:55:c4:
f8:29:e2:2e:d1:98:b0:46:65:01:9f:9a:be:8f:2b:
83:5d:c8:aa:78:0e:f3:2f:8d:ab:1d:f9:9a:15:cc:
87:54:19:f1:69:a5:4b:2a:3a:86:c6:94:ee:da:b0:
1a:5c:cb:f6:8b:12:3f:c4:42:65:3e:0f:03:3b:70:
e3:ba:4b:16:ac:60:db:92:b7:48:1f:87:93:d7:78:
cb:53:cd:4d:d1:e5:86:4f:38:14:eb:06:cf:5b:78:
0b:98:de:c5:17:9f:af:e3:59:85:e4:53:61:02:6e:
a9:10:53:7c:c5:d4:61:f6:eb:ff:aa:fa:11:b3:30:
97:f7:5f:fc:bf:4f:31:b7:5f:0f:db:de:2f:87:4a:
35:f0:99:81:4e:ac:bc:46:d9:9f:e0:0f:6d:88:76:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:31:D2:2D:29:8F:D2:B1:D2:DD:9A:6F:CC:48:35:0F:7A:81:43
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/26wx0i0pj9Kx0t2ab8xINQ96gUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.222.179.0/24
104.239.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:46:63:0d:39:5a:bd:1a:64:a2:22:c3:eb:32:8c:05:9e:f1:
75:ea:c0:16:63:67:2d:d5:97:e9:30:7e:1f:c7:d3:1a:98:96:
70:3f:97:9d:11:13:82:e6:95:ff:c9:d4:31:9b:d6:72:ea:1e:
c1:97:b6:0e:1e:ab:df:15:bc:11:26:64:28:9b:a8:e8:76:99:
45:f2:d8:fe:d2:5b:8f:de:a7:5c:8d:47:73:51:7b:3e:86:0f:
39:31:d7:3b:d2:63:f1:7a:87:29:c0:b5:60:6c:dc:1f:06:8a:
9d:c4:24:d8:fc:95:c4:18:4a:21:fd:12:bd:ab:e0:96:0e:7d:
cf:37:43:61:7a:5e:71:78:16:2e:b9:17:1b:7e:cd:24:ba:b3:
e2:51:c9:72:a8:13:3a:b1:54:91:72:16:a7:d9:b0:ed:a8:9f:
5b:8f:22:70:6a:77:4a:af:fc:38:4c:cc:ec:4c:3c:9b:32:f6:
ad:88:11:9c:70:72:38:b4:7c:0c:d2:94:1e:ca:d0:d5:e9:3e:
31:5b:4a:3b:46:79:43:95:2c:95:4c:83:48:d5:ed:7b:24:70:
c1:20:fb:cf:fd:28:e7:89:c2:d5:11:90:31:c8:44:dd:8c:8d:
2a:62:87:7c:8a:b2:e2:0f:49:a7:01:fe:f0:0d:0c:e7:fb:56:
ca:f2:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:13 2026 by rpki-client