Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/JdNTlHvg0FS8mP6nK4j264KXqQs.roa
File: JdNTlHvg0FS8mP6nK4j264KXqQs.roa (raw, json)
Hash identifier: lLIsXvD2gSOCULCXIq1YrXCpVXU3ZGG+GiOW3Tfpx98=
Subject key identifier: 25:D3:53:94:7B:E0:D0:54:BC:98:FE:A7:2B:88:F6:EB:82:97:A9:0B
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019D1EFEF8857808E3ABF6D6B54C455C1DB7
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/JdNTlHvg0FS8mP6nK4j264KXqQs.roa
Signing time: Tue 24 Mar 2026 08:38:39 +0000
ROA not before: Tue 24 Mar 2026 08:38:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214961
IP address blocks: 104.249.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:fe:f8:85:78:08:e3:ab:f6:d6:b5:4c:45:5c:1d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 24 08:38:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25d353947be0d054bc98fea72b88f6eb8297a90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:7d:a7:31:27:d4:47:21:be:91:f7:7b:c4:
72:bc:c4:ea:b4:a3:4b:0a:5b:c9:2a:f6:7c:c5:83:
c2:e1:b2:2f:d0:e5:b1:ed:33:bf:9f:20:69:3e:8d:
a2:53:62:88:a3:93:f1:9b:76:6a:7c:2d:89:cb:ac:
ab:39:b4:6a:9e:67:5f:94:c6:16:a9:41:ca:33:2f:
4e:f9:50:d4:1b:9c:de:c0:f5:67:27:9d:ac:0e:10:
5d:72:44:0e:7a:ec:c4:f9:da:b2:26:2e:5a:6d:28:
a4:27:f2:9e:b5:71:02:e1:5b:fd:f6:a0:cd:23:e5:
6d:56:4b:31:20:f3:80:66:b8:0f:6c:21:ba:3a:92:
c4:59:f5:fc:81:cb:27:e3:20:c2:8a:64:0d:13:a8:
c1:4f:4c:3d:58:57:f1:4c:10:69:78:4a:93:df:81:
d9:b9:95:57:09:06:94:4d:b6:e3:99:18:69:e1:53:
85:2a:17:71:9d:dc:ef:b4:50:87:40:63:e4:ad:17:
ea:50:4b:d8:40:c3:19:13:48:f4:c1:4f:20:55:0a:
41:9a:d5:74:5f:a1:fc:8d:41:7f:89:51:40:5c:65:
84:23:c9:f4:2f:f6:a4:d7:75:09:53:d4:aa:e6:69:
d7:9b:12:11:55:20:bc:c1:2e:60:86:63:ed:d9:af:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D3:53:94:7B:E0:D0:54:BC:98:FE:A7:2B:88:F6:EB:82:97:A9:0B
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/JdNTlHvg0FS8mP6nK4j264KXqQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.10.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e7:ee:20:b8:62:b0:2b:7c:05:53:f5:2f:14:c9:58:f4:56:
57:34:f3:a5:05:70:4a:4e:95:82:c6:1e:32:bf:ec:bf:e1:66:
83:da:9a:8f:49:0b:00:7c:f1:a0:68:aa:82:ff:54:94:68:cb:
c1:8d:1e:6d:a2:1a:54:10:3a:a8:1a:0a:50:51:a9:07:41:f3:
a9:c3:7b:00:35:ff:09:7b:4c:eb:55:40:bb:0a:82:ec:f0:78:
d6:78:f4:63:b1:b1:db:00:53:87:ad:ab:3a:22:40:26:fa:9e:
05:88:a1:11:bb:c7:c6:18:1c:3a:51:c8:8d:27:89:76:9d:5e:
1a:d9:1c:f1:5d:8c:a4:fb:bb:b1:92:91:71:80:a1:c4:5c:94:
64:54:6a:8e:7e:28:60:31:e2:09:d2:95:f7:ba:b3:c8:d1:e8:
13:7e:43:d2:c3:da:36:c5:8f:50:81:55:bf:ae:1d:1e:35:40:
0e:24:e6:e2:6e:20:71:e8:57:f5:a2:9b:2f:9b:ad:e2:69:e1:
6f:06:ae:03:fa:bd:b5:0f:96:c8:79:5e:8b:81:82:2a:89:4e:
a9:78:24:33:ee:ff:54:39:a0:46:09:77:42:6e:d8:6c:d8:c4:
e1:1d:57:47:de:34:4f:80:09:d2:93:c1:05:ab:24:6b:48:27:
dc:c5:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:17 2026 by rpki-client