Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/7nwts5ws-fMMSxy-8pJTQR9gITc.roa
File: 7nwts5ws-fMMSxy-8pJTQR9gITc.roa (raw, json)
Hash identifier: Br1aPVQ/MDPFln/dorC6zaO4NMHwdT4UseXqNZyUUJY=
Subject key identifier: EE:7C:2D:B3:9C:2C:F9:F3:0C:4B:1C:BE:F2:92:53:41:1F:60:21:37
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019CF605A20541C10954CC5F2BFD6BB04DA5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/7nwts5ws-fMMSxy-8pJTQR9gITc.roa
Signing time: Mon 16 Mar 2026 09:41:30 +0000
ROA not before: Mon 16 Mar 2026 09:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216253
IP address blocks: 104.233.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:05:a2:05:41:c1:09:54:cc:5f:2b:fd:6b:b0:4d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 16 09:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee7c2db39c2cf9f30c4b1cbef29253411f602137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:e2:7c:df:41:3b:8a:0b:11:cf:8b:d1:bf:
47:d9:e4:79:b3:ff:32:0a:ea:e4:e0:68:7c:fb:69:
21:3a:4e:39:7a:90:f7:c2:5a:17:5e:8f:24:40:13:
1c:19:03:d0:3d:c2:a6:e8:66:20:18:97:54:f5:e4:
b4:20:e5:84:62:9d:f9:c1:77:e5:c2:83:4c:0d:90:
8a:64:12:64:77:42:de:12:de:04:24:67:1f:63:aa:
ad:29:43:5b:36:45:47:4b:65:96:7b:f9:0e:09:1a:
d9:a7:b3:a8:a7:38:de:c3:79:16:41:f6:f8:a7:79:
12:09:57:4e:cf:df:c6:ff:d9:09:23:47:9c:74:41:
47:d5:a8:bc:49:63:c5:2a:20:ae:b2:53:35:58:cc:
de:0c:af:cf:5d:29:23:ea:c6:ee:4d:41:1c:83:f0:
64:ae:c7:80:0c:74:32:7c:9e:dc:32:f7:4c:4c:c9:
4b:a9:08:5c:9f:e0:5c:a4:bf:06:f8:3c:24:39:fa:
94:9e:bf:78:47:ec:de:11:2f:96:72:4d:ad:67:70:
86:c1:33:2a:1f:77:d7:2b:0b:ea:66:5c:90:53:b2:
67:13:48:69:48:05:34:ea:0b:c1:be:e7:80:71:f5:
4a:5f:df:4a:cc:4e:9e:18:cd:99:61:7e:c3:f8:62:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:2D:B3:9C:2C:F9:F3:0C:4B:1C:BE:F2:92:53:41:1F:60:21:37
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/7nwts5ws-fMMSxy-8pJTQR9gITc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.56.0/24
Signature Algorithm: sha256WithRSAEncryption
84:13:06:89:4b:cb:a7:d9:75:3b:1e:52:33:3f:81:a1:a6:35:
2b:14:f3:eb:79:51:c0:95:a0:41:20:76:6b:f4:a1:87:cc:a1:
bc:e5:e5:1a:c3:2c:5d:02:c9:20:e2:34:d1:bd:d0:0b:5b:f3:
97:62:8d:d8:0f:70:cc:73:b3:7d:d5:d3:24:fc:cf:d1:b6:e6:
64:5d:f4:ea:60:4c:a7:59:c2:6f:45:9f:52:a3:71:89:8d:b9:
7d:45:70:75:6c:5b:d5:4c:f5:05:0b:67:3c:dd:57:2b:c5:7a:
c5:9d:3b:19:72:c0:c5:33:36:bc:04:2e:bd:ee:fa:4e:53:f6:
da:42:63:45:98:54:8a:93:f4:5c:82:27:e9:c8:80:13:8c:62:
ec:d6:88:a2:98:5a:6c:4b:63:c1:08:0f:4a:46:5c:d3:03:84:
01:c0:f2:33:6c:71:d8:3b:6a:57:6d:0f:7d:08:19:53:ed:57:
fa:d5:17:98:5a:dc:86:87:11:3f:d5:06:88:5d:25:ce:70:3e:
29:64:15:c0:f1:e8:2c:9e:19:4d:53:02:06:83:39:d6:a9:e9:
43:fd:48:8a:95:45:eb:b7:51:d4:27:8e:16:7a:f6:27:79:0a:
3b:45:2f:7e:58:ab:93:04:51:98:42:77:e0:c3:3f:60:bc:84:
f2:e6:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:41:02 2026 by rpki-client