Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4WqZn8IHYXdDymujlDx0phWgaes.roa
File: 4WqZn8IHYXdDymujlDx0phWgaes.roa (raw, json)
Hash identifier: UplkpFb3lQUewco18zmqBQoY5gvGO1meQBxpviQChHo=
Subject key identifier: E1:6A:99:9F:C2:07:61:77:43:CA:6B:A3:94:3C:74:A6:15:A0:69:EB
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019DF35B22E3B4962FBE6928BE89D51B1246
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4WqZn8IHYXdDymujlDx0phWgaes.roa
Signing time: Mon 04 May 2026 14:18:49 +0000
ROA not before: Mon 04 May 2026 14:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 45.43.147.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.243.192.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:5b:22:e3:b4:96:2f:be:69:28:be:89:d5:1b:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 4 14:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e16a999fc207617743ca6ba3943c74a615a069eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:02:af:e2:d2:6d:07:6c:6c:0e:8d:96:6e:
81:e3:d9:af:c6:37:c6:3d:df:8c:dc:fb:b3:bb:61:
81:b8:99:df:ab:f5:9a:7d:71:8a:2a:67:0c:ad:e9:
c0:36:c8:be:ae:77:af:43:09:27:b3:93:9a:b5:e9:
93:74:04:58:f2:7e:81:04:4d:a0:cf:87:65:3f:e8:
4b:8d:07:7b:ce:7b:8e:35:a1:fd:dc:91:9b:7f:81:
d5:67:70:c2:4a:97:5b:e7:b1:0a:da:f5:3d:d9:0c:
e7:d0:e8:29:8c:19:74:b6:9f:9f:5e:7f:fc:16:5b:
d6:6d:8b:9f:2a:c4:48:e4:8d:b3:d6:76:41:3b:cd:
44:75:e7:e9:01:e4:c2:6a:52:06:b8:ed:c1:4e:bf:
4b:62:d7:ea:d2:5b:fa:fe:f8:e9:5a:10:26:55:52:
59:fc:58:c3:d0:e4:b8:f0:52:bc:1e:a7:08:09:ad:
ec:43:24:61:e3:18:17:51:d8:9d:8e:f9:85:f7:4e:
ec:e2:4f:87:03:bd:16:66:83:b6:ad:a8:7a:d5:91:
66:a1:cb:0a:7e:44:a0:a1:35:d1:e2:f5:42:d7:17:
eb:a5:a8:5a:33:c3:35:a1:ba:57:18:79:33:4d:38:
37:99:88:7e:c1:7b:a2:45:86:7b:00:f3:41:de:9d:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6A:99:9F:C2:07:61:77:43:CA:6B:A3:94:3C:74:A6:15:A0:69:EB
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4WqZn8IHYXdDymujlDx0phWgaes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.147.0/24
45.43.158.0/24
104.233.58.0/24
104.239.8.0/24
104.239.29.0/24
104.239.58.0/23
104.239.89.0/24
104.243.192.0/24
104.249.11.0/24
104.249.18.0/24
104.249.20.0/24
104.249.43.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a6:76:46:81:22:96:9e:1b:d7:3e:40:c3:3b:2b:6b:e0:6c:
86:a8:29:b3:39:02:3e:12:54:70:2e:bf:b3:5e:b2:03:cf:dc:
23:15:7a:45:cc:5c:3d:ff:57:0e:84:24:fc:0e:b9:93:9f:9f:
30:54:9c:4b:67:4d:d5:8c:c9:0b:6b:00:91:b8:b9:5c:c4:e1:
37:55:0e:2b:fd:13:47:d4:92:ad:5e:b2:ee:79:91:49:c8:0a:
69:a2:35:94:c3:40:a8:b2:4a:7c:e3:ee:aa:55:66:19:61:60:
1a:1f:a3:b4:a9:44:54:45:6b:f7:08:ab:8b:6a:a3:da:1e:d2:
d7:76:df:ab:ed:59:8d:fe:a1:d1:52:50:12:90:f4:2e:35:d3:
0b:7a:33:b5:fb:91:33:16:0c:99:c4:f7:91:2b:e6:2a:fb:3b:
d1:61:e2:fe:dd:6d:1a:b9:5e:e7:d6:56:ff:78:45:79:c5:ce:
6a:24:29:60:30:5f:75:e4:30:47:2f:f2:a7:84:41:8e:ae:7b:
6f:b7:05:29:93:c5:39:8a:5b:29:ea:e4:1e:f1:a6:af:d3:e0:
06:70:00:06:1a:07:34:b1:72:03:5f:5d:1d:ce:87:44:ed:10:
36:1d:ef:99:83:6a:d4:64:aa:75:38:7a:65:dd:85:c4:5b:ba:
a3:46:c1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:21 2026 by rpki-client