Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OeKav1xlFfI8fYfjAK8rcsTZftk.roa
File: OeKav1xlFfI8fYfjAK8rcsTZftk.roa (raw, json)
Hash identifier: WidrK8/pix/m2qAobQYD+xpOWtqyHmYaIcLEbx0FG54=
Subject key identifier: 39:E2:9A:BF:5C:65:15:F2:3C:7D:87:E3:00:AF:2B:72:C4:D9:7E:D9
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019CFDFF4123F60956BF43EC8A3FCC770E96
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OeKav1xlFfI8fYfjAK8rcsTZftk.roa
Signing time: Tue 17 Mar 2026 22:51:29 +0000
ROA not before: Tue 17 Mar 2026 22:51:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 104.239.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:ff:41:23:f6:09:56:bf:43:ec:8a:3f:cc:77:0e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 17 22:51:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39e29abf5c6515f23c7d87e300af2b72c4d97ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:01:d4:53:47:6f:27:83:b1:ef:5f:82:b1:
b0:ad:9e:07:e9:8a:a3:ec:52:eb:66:4e:93:a8:19:
f8:91:0d:08:94:cb:be:86:26:b9:35:44:f1:c0:9f:
0a:ca:d7:49:ff:40:6c:51:aa:50:a3:41:dd:31:c4:
d7:84:58:52:c0:e2:0b:d4:e6:a4:ce:6b:1f:1b:e4:
d5:af:58:bc:34:5d:1d:e6:75:63:2a:2a:a1:d9:e2:
8c:6b:26:87:92:82:ae:26:ea:d0:c8:cd:67:6e:86:
42:ba:59:d0:d4:e2:ad:0d:61:9e:52:66:b5:9b:a5:
a7:21:87:7b:38:d2:83:fc:8f:1b:2b:7e:d1:21:a8:
df:fc:ff:91:5b:a5:71:51:64:d2:98:57:81:0b:5d:
bd:6a:f5:0c:b6:6a:c7:ca:76:f2:c1:72:e8:5e:26:
ba:8a:82:ee:05:94:4e:72:04:92:d4:93:06:71:47:
b1:af:a1:22:c7:23:ad:cb:ea:c4:bd:34:84:75:c5:
7f:2f:7e:f0:4c:04:c7:b8:1c:9a:6b:e4:ec:f1:12:
c1:84:96:c7:f9:a9:e6:69:22:d3:68:a5:d8:3a:55:
d8:86:0a:f2:ca:b2:f0:51:3b:fe:dc:4d:9d:4d:c9:
ce:d3:08:c9:c6:d6:63:94:0a:9a:29:2e:48:b8:35:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E2:9A:BF:5C:65:15:F2:3C:7D:87:E3:00:AF:2B:72:C4:D9:7E:D9
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OeKav1xlFfI8fYfjAK8rcsTZftk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.100.0/24
Signature Algorithm: sha256WithRSAEncryption
38:41:95:c5:59:53:7d:35:90:6b:e7:1e:7b:c6:5d:34:b7:61:
69:ae:33:f4:49:43:ee:43:f5:80:eb:8c:e5:02:f8:bf:51:c2:
91:82:ab:0d:bb:1f:dd:0f:7b:5e:10:a2:5a:b9:7f:d6:9d:76:
d8:23:e3:ed:dd:ab:82:9b:59:02:3d:96:d0:5e:c0:8b:10:ac:
54:fb:89:42:c0:9e:92:e6:30:21:43:58:46:d5:28:8a:27:8b:
b6:90:16:43:4f:8a:86:40:40:66:fa:4e:11:33:1d:ad:9f:a5:
3b:1c:61:e6:93:08:83:ab:00:48:c6:5e:9d:ee:ce:61:10:e4:
e7:32:ed:0d:96:a3:8a:2f:59:16:f1:cb:5b:f8:27:14:fd:81:
2c:04:d0:4c:54:a0:84:cb:1e:4a:b3:d4:db:dd:4d:52:6c:d0:
48:31:d8:f9:e9:59:63:96:74:47:36:4f:d3:a4:97:52:e0:04:
9d:5f:6e:3c:fd:14:09:77:a1:c0:84:1a:6d:6a:32:72:0b:46:
fb:69:db:0e:97:e3:17:36:e5:86:49:29:d4:9b:9c:c4:d0:54:
87:51:c9:a5:1f:bf:07:6e:6b:9e:c1:d8:ca:9d:eb:d6:bf:a9:
fd:a0:13:d6:0c:bf:64:36:1d:3e:6f:33:50:12:59:f9:7d:b7:
32:74:b2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:41:18 2026 by rpki-client