Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/C-83qlmTweIkAUdNFd6Hvbg0DSo.roa
File: C-83qlmTweIkAUdNFd6Hvbg0DSo.roa (raw, json)
Hash identifier: iScbZf9jf1nJKNzbvFA8kDAu2fecgEYSOgkKctpSbu0=
Subject key identifier: 0B:EF:37:AA:59:93:C1:E2:24:01:47:4D:15:DE:87:BD:B8:34:0D:2A
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019E1C659107CD8718F0F3D78DFA97ACFFE6
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/C-83qlmTweIkAUdNFd6Hvbg0DSo.roa
Signing time: Tue 12 May 2026 13:34:38 +0000
ROA not before: Tue 12 May 2026 13:34:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199959
IP address blocks: 104.239.74.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:65:91:07:cd:87:18:f0:f3:d7:8d:fa:97:ac:ff:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 12 13:34:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bef37aa5993c1e22401474d15de87bdb8340d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:50:ce:b2:b6:78:01:dd:84:5e:80:5c:71:
46:05:78:1f:05:33:a7:eb:d4:a0:3e:6a:6c:17:33:
ea:28:e3:cc:5a:d2:51:82:a3:c3:f6:f0:d5:88:41:
c1:8b:ff:db:24:9e:d7:95:fe:2b:c6:d0:fc:ba:4f:
e1:ff:22:21:e7:18:10:45:ac:c9:b1:58:67:59:6c:
04:c6:22:1a:51:fc:12:3b:9a:05:cc:51:93:17:0d:
5e:95:93:10:e6:0e:d2:84:7d:80:f9:12:a7:a8:e2:
f0:fa:ee:59:1d:8a:5b:58:cb:2c:87:26:71:b6:f0:
9b:b6:61:98:1e:32:82:43:8e:c5:19:25:cd:c2:1a:
3b:3e:f0:76:72:2b:89:9d:0e:40:63:90:92:43:99:
fe:aa:eb:dd:69:00:e7:5b:b9:1c:c3:e6:d0:27:f0:
02:04:0f:1f:d5:fc:3a:d4:84:d1:11:67:fa:2e:f3:
7a:16:a2:9e:e6:6a:4b:a8:6f:aa:c9:ca:a9:3d:2a:
8a:62:df:ab:80:78:3b:bb:54:1a:58:67:81:3f:50:
bb:49:e5:8c:c0:3b:84:43:8e:3f:53:b2:5d:8f:40:
74:6e:65:fb:87:18:b7:c9:8b:ba:12:63:bd:b3:25:
f8:3c:d5:fb:e7:ea:c9:8d:8d:ca:da:9d:07:93:d0:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EF:37:AA:59:93:C1:E2:24:01:47:4D:15:DE:87:BD:B8:34:0D:2A
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/C-83qlmTweIkAUdNFd6Hvbg0DSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.74.0/24
104.239.89.0/24
104.239.102.0/24
104.239.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1f:9a:44:a1:48:b4:7a:a8:53:1d:b7:fa:71:dc:24:1b:0e:
ec:75:7d:c4:49:3e:a5:24:5a:d6:20:75:20:0a:2d:ec:99:eb:
03:e0:32:2b:4d:9c:d8:32:4d:17:f6:1b:78:10:ee:68:90:2a:
dd:f7:de:e7:5b:3c:41:e3:28:2b:aa:0b:f3:e6:7a:22:f8:6e:
a3:d1:75:e5:97:06:d3:cd:2d:1a:ed:bb:71:0f:df:f7:e8:56:
82:6e:c9:c6:20:85:9e:e7:62:e3:55:1f:6b:29:ba:ef:02:d6:
98:67:47:b5:55:47:3e:8d:cf:65:02:3f:78:70:f2:30:05:10:
ea:5f:12:7d:28:ee:fd:17:5a:71:54:9a:c5:24:f2:54:be:71:
44:3c:a1:68:45:b8:62:a4:83:cf:47:60:8d:43:2b:f7:af:21:
51:eb:e5:1f:f1:3d:76:71:d4:5c:1b:83:e9:8f:39:9f:f4:6f:
be:6b:54:20:91:b5:a4:5c:c8:6b:a0:10:7f:4a:da:47:a4:c1:
ee:93:8a:96:fd:93:08:d9:75:ba:43:31:83:70:65:75:96:c9:
51:c6:87:c3:17:e9:42:d4:89:ae:65:16:9a:8a:94:80:07:d3:
18:71:66:45:bf:cd:b9:10:bf:8a:9c:44:50:db:59:05:3d:52:
19:9b:53:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:02 2026 by rpki-client