Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/S1VPLjveybx7fHVMMPRYPbjmeRk.roa
File: S1VPLjveybx7fHVMMPRYPbjmeRk.roa (raw, json)
Hash identifier: FU9wMHNP4VnysF27TlJnI9MKKx688ddZjJaLUgXJGrs=
Subject key identifier: 4B:55:4F:2E:3B:DE:C9:BC:7B:7C:75:4C:30:F4:58:3D:B8:E6:79:19
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019D0B04B0D13CC8A02FFFFE7D0DA08509FB
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/S1VPLjveybx7fHVMMPRYPbjmeRk.roa
Signing time: Fri 20 Mar 2026 11:32:29 +0000
ROA not before: Fri 20 Mar 2026 11:32:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 104.238.31.0/24 maxlen: 24
204.52.104.0/24 maxlen: 24
216.173.88.0/23 maxlen: 23
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:04:b0:d1:3c:c8:a0:2f:ff:fe:7d:0d:a0:85:09:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 20 11:32:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b554f2e3bdec9bc7b7c754c30f4583db8e67919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:83:d6:7c:c0:3b:a6:ea:25:08:07:65:b9:
38:f3:3f:76:a8:f1:f5:b1:93:8a:f5:71:ca:3d:0e:
e5:20:44:15:8f:e4:60:a6:d0:a0:11:fa:f5:06:32:
ca:7d:d1:e7:76:2d:e7:0d:4b:60:26:d4:29:99:c7:
28:98:a7:be:8f:8a:0b:83:c3:4c:e6:e9:fb:e0:66:
0b:2d:44:d0:b4:ba:32:52:98:87:ac:7b:89:25:30:
42:ec:1a:1d:1e:9c:31:09:b9:46:4f:f5:7e:fe:d2:
c8:95:1a:c4:f8:72:2d:9a:4f:47:9a:eb:be:e3:34:
1d:06:bc:f4:2a:65:d0:bd:30:9c:e5:1d:f0:fa:4e:
48:8e:b7:03:ba:b3:de:ad:27:ea:3f:2c:04:e8:4c:
91:94:2e:e1:1a:d8:75:a6:6b:a4:57:99:76:21:e6:
4b:34:b1:7d:ee:45:2e:25:61:a6:a9:b4:5d:45:71:
6b:99:e7:69:65:df:06:5d:53:95:a7:90:c3:fc:40:
b4:77:36:9b:6a:ca:22:09:58:e5:e5:f7:7e:5b:33:
7c:9a:b6:d7:4d:40:6a:a4:6d:96:56:ab:98:d1:15:
f8:dd:ed:e4:60:a4:7c:c1:35:2f:57:52:fa:4f:3c:
5a:27:94:ec:65:9f:65:cb:76:9c:38:6b:cc:b5:58:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:4F:2E:3B:DE:C9:BC:7B:7C:75:4C:30:F4:58:3D:B8:E6:79:19
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/S1VPLjveybx7fHVMMPRYPbjmeRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.31.0/24
204.52.104.0/24
216.173.88.0/23
216.173.92.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:4f:fc:9a:e3:8e:c1:06:f7:ac:f3:c3:2b:ab:e1:e1:1f:c6:
0e:c9:c2:bc:32:d7:92:28:b1:eb:f8:3b:fd:26:ec:64:cd:cb:
c0:cf:b8:ce:29:13:32:d7:78:56:7f:ec:23:21:ed:c6:08:0d:
83:62:95:71:e2:f0:62:d9:22:10:4e:38:b0:10:d0:77:c9:fa:
dd:b0:fd:2c:58:87:8c:29:19:cd:d7:70:1b:a1:16:d7:89:4c:
d9:c9:ab:1d:5e:72:fa:ef:87:a9:eb:d1:b6:a1:89:34:e2:62:
87:0d:98:8b:f5:98:37:1a:45:50:e6:5c:15:44:d0:4f:43:ea:
0a:5f:4e:c7:a6:51:54:ff:2b:e1:89:b1:fa:98:aa:2e:a8:8b:
e0:14:72:bd:06:2e:29:31:ac:2e:df:3c:51:8f:eb:52:de:7b:
86:03:b4:54:a6:94:a5:0c:3a:9c:c3:7a:60:87:01:d2:24:45:
c5:d5:69:b9:9f:9f:1e:5b:8d:46:dd:9c:f2:d3:8b:2e:40:ec:
d9:e4:df:14:15:10:1c:fc:26:0b:c5:ad:03:2a:20:d5:79:2c:
d3:7c:5a:c5:2d:37:56:dd:82:0e:f8:6f:b5:3c:fb:d7:80:9a:
b5:f6:b2:2a:0a:92:79:6b:eb:4e:c2:8e:d6:9b:54:04:7b:ff:
a6:c0:a4:8b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ0LBLDRPMigL//+fQ2ghQn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjYwMzIwMTEzMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjU1NGYyZTNiZGVjOWJjN2I3Yzc1NGMzMGY0NTgzZGI4ZTY3OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDGD1nzAO6bqJQgHZbk48z92qPH1
sZOK9XHKPQ7lIEQVj+RgptCgEfr1BjLKfdHndi3nDUtgJtQpmccomKe+j4oLg8NM
5un74GYLLUTQtLoyUpiHrHuJJTBC7BodHpwxCblGT/V+/tLIlRrE+HItmk9Hmuu+
4zQdBrz0KmXQvTCc5R3w+k5IjrcDurPerSfqPywE6EyRlC7hGth1pmukV5l2IeZL
NLF97kUuJWGmqbRdRXFrmedpZd8GXVOVp5DD/EC0dzabasoiCVjl5fd+WzN8mrbX
TUBqpG2WVquY0RX43e3kYKR8wTUvV1L6TzxaJ5TsZZ9ly3acOGvMtVhzPwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEtVTy473sm8e3x1TDD0WD245nkZMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvUzFWUExqdmV5Yng3ZkhWTU1QUllQYmptZVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaO4fAwQA
zDRoAwQB2K1YAwQB2K1cMA0GCSqGSIb3DQEBCwUAA4IBAQANT/ya447BBves88Mr
q+HhH8YOycK8MteSKLHr+Dv9JuxkzcvAz7jOKRMy13hWf+wjIe3GCA2DYpVx4vBi
2SIQTjiwENB3yfrdsP0sWIeMKRnN13AboRbXiUzZyasdXnL674ep69G2oYk04mKH
DZiL9Zg3GkVQ5lwVRNBPQ+oKX07HplFU/yvhibH6mKouqIvgFHK9Bi4pMawu3zxR
j+tS3nuGA7RUppSlDDqcw3pghwHSJEXF1Wm5n58eW41G3Zzy04suQOzZ5N8UFRAc
/CYLxa0DKiDVeSzTfFrFLTdW3YIO+G+1PPvXgJq19rIqCpJ5a+tOwo7Wm1QEe/+m
wKSL
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:59 2026 by rpki-client