Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8m-T5CmnDl8agwt3dhoeiRm0u3U.roa
File: 8m-T5CmnDl8agwt3dhoeiRm0u3U.roa (raw, json)
Hash identifier: R0gmKNacHzT/IfKAntF2LksTohYEO69eEKXPqWMI8Ag=
Subject key identifier: F2:6F:93:E4:29:A7:0E:5F:1A:83:0B:77:76:1A:1E:89:19:B4:BB:75
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019D914DAEFC7C40CE1F7B2F80C15D790AEE
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8m-T5CmnDl8agwt3dhoeiRm0u3U.roa
Signing time: Wed 15 Apr 2026 13:21:20 +0000
ROA not before: Wed 15 Apr 2026 13:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213918
IP address blocks: 104.238.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:4d:ae:fc:7c:40:ce:1f:7b:2f:80:c1:5d:79:0a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 15 13:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f26f93e429a70e5f1a830b77761a1e8919b4bb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a1:8d:e7:15:f7:e8:2a:b3:f7:63:01:19:7e:
2e:f6:97:20:e9:83:c7:ef:06:6e:e9:24:63:cf:f0:
a3:46:e8:96:99:5c:9b:14:7a:61:f4:de:3e:98:36:
5e:d6:ed:2a:ac:a1:39:38:3a:54:54:17:f9:26:94:
88:d6:76:3d:30:0f:c4:c4:2f:c4:1e:5a:74:44:a4:
f7:80:a7:58:c3:e3:c1:e6:bb:3a:58:f2:4f:ed:20:
3f:a9:7c:a1:49:ba:2d:9f:d8:12:98:02:45:f8:60:
38:bd:ad:bd:8a:c1:68:5c:50:c8:06:9a:b6:9d:01:
60:bd:c0:2d:11:ba:80:31:f3:6e:be:29:ae:8a:8c:
f3:26:6d:12:29:1a:74:f5:62:74:26:8b:3f:bf:d2:
f1:38:07:65:4b:aa:1b:4b:d8:a0:49:e9:67:e2:5a:
32:46:85:50:cb:34:c6:c3:3a:a4:94:43:b0:a1:44:
14:dc:f9:04:6c:ac:cf:2e:28:fa:1c:38:6f:a8:54:
ad:03:c7:57:4b:4d:1b:cd:91:33:d1:79:a7:fd:01:
1b:5d:ac:be:ca:51:07:e8:3b:93:ff:5a:63:79:a1:
8b:da:4a:0a:37:2e:c8:e3:28:7a:af:c3:51:6c:9d:
71:d6:a8:23:5c:94:7c:c0:e6:18:50:4b:1f:12:06:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:93:E4:29:A7:0E:5F:1A:83:0B:77:76:1A:1E:89:19:B4:BB:75
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8m-T5CmnDl8agwt3dhoeiRm0u3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.31.0/24
Signature Algorithm: sha256WithRSAEncryption
43:85:2e:03:56:34:18:f2:3a:bf:7b:70:e0:30:b7:20:78:f4:
ea:18:bb:29:e0:c7:de:97:40:27:3e:87:f1:28:d9:b8:f8:ef:
55:68:c9:27:37:16:a8:a8:08:65:bd:0b:a7:72:17:5c:86:74:
f0:44:09:37:8e:70:57:0b:fd:55:c5:08:db:e8:f6:2f:72:b3:
45:4a:eb:2d:ce:7a:12:75:09:ea:ba:13:32:64:1a:d9:ca:31:
27:7b:51:3c:13:6c:a8:18:31:54:8e:b5:44:fc:26:0c:2d:fa:
3c:0b:0a:1e:2f:32:25:31:a0:c0:c0:23:a3:fb:3a:87:07:4a:
36:59:df:fe:d6:12:2f:c7:42:ae:8b:82:a2:06:cc:33:46:22:
3b:49:04:25:41:74:5b:53:a9:43:a8:1f:a7:b8:a3:99:e4:28:
ad:b6:51:8f:d0:c7:b5:c2:44:98:57:1c:c3:d4:d9:e8:5b:2c:
ba:36:a7:75:39:a9:f4:fe:c8:f8:44:5f:8b:9a:40:c7:a6:b2:
44:f1:17:5e:50:c7:f5:b8:75:56:37:82:24:a5:a0:fc:91:26:
5f:95:62:a5:10:38:26:54:c3:cc:8f:32:10:b8:6a:32:5c:ee:
13:74:28:0d:51:60:dd:aa:72:ea:ed:60:0b:84:77:c9:cb:a4:
1e:17:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:17 2026 by rpki-client