Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ALWlDjtkuCanlBUglBYrOhOEChU.roa
File: ALWlDjtkuCanlBUglBYrOhOEChU.roa (raw, json)
Hash identifier: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=
Subject key identifier: 00:B5:A5:0E:3B:64:B8:26:A7:94:15:20:94:16:2B:3A:13:84:0A:15
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019F5B11889FAB7C11E7393243F52B0329EC
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ALWlDjtkuCanlBUglBYrOhOEChU.roa
Signing time: Mon 13 Jul 2026 10:41:43 +0000
ROA not before: Mon 13 Jul 2026 10:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212720
IP address blocks: 103.216.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:11:88:9f:ab:7c:11:e7:39:32:43:f5:2b:03:29:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jul 13 10:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00b5a50e3b64b826a794152094162b3a13840a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4d:6e:48:98:43:2b:1b:7c:51:b1:26:a6:ab:
1f:b4:3e:98:da:54:ea:19:f7:82:bc:e1:64:3c:ab:
2b:c4:46:2e:f9:e6:86:d5:90:01:1c:81:08:89:d7:
1f:c1:8a:8a:b8:70:8e:9a:10:64:7d:34:3b:d4:35:
47:25:c4:1f:57:b3:7c:d3:f1:5d:21:ff:e3:bf:19:
43:67:96:bb:52:c8:49:78:6c:ab:92:04:d1:20:81:
1f:67:5e:50:9f:49:d1:33:33:1a:29:19:5f:06:4d:
a8:04:d7:5d:51:1a:1f:0a:b2:61:84:f4:0c:59:8d:
6f:07:fa:54:de:b3:4b:99:fb:22:e6:ba:d0:89:ba:
96:bd:59:71:31:51:7f:4f:73:b3:36:51:ec:6a:2f:
8c:87:40:6c:47:8b:47:d2:fa:bd:8a:56:5d:ef:00:
a7:11:26:4f:be:44:91:79:60:a9:5a:d6:2c:38:db:
2b:70:11:ce:dc:3e:48:ba:00:a2:f1:59:c6:01:f2:
e8:c8:f2:7a:28:ae:77:6b:db:2e:b4:6c:7c:22:a7:
aa:aa:ef:7a:3a:a0:17:3d:7d:13:b4:cc:b6:4c:1e:
a3:45:01:25:b2:8e:87:5d:4c:da:af:ed:42:60:e0:
ab:ff:2b:5e:89:5d:c2:20:ce:f7:4b:38:8f:80:76:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B5:A5:0E:3B:64:B8:26:A7:94:15:20:94:16:2B:3A:13:84:0A:15
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ALWlDjtkuCanlBUglBYrOhOEChU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:af:05:03:b5:68:7e:e2:92:4e:22:51:67:36:7d:4a:b7:3b:
b8:ae:fd:37:df:52:a8:1c:55:2a:c7:0b:dc:27:c5:55:1f:5e:
d4:95:24:ff:07:85:bb:cf:f7:84:46:69:48:e7:2e:23:fe:bb:
b3:1e:82:bd:e5:49:e7:06:6d:71:18:1a:dd:12:a9:a1:36:b6:
14:cf:a4:87:1a:4b:82:13:67:91:2e:ef:2d:0e:ba:3a:7a:ce:
da:a2:4c:71:01:10:9d:e6:ac:5d:b1:c8:d9:3d:55:38:e1:11:
9a:fc:05:d6:9a:0a:2e:0e:43:0f:5d:91:28:3a:9b:6b:aa:16:
37:37:f6:91:bc:75:ae:e2:49:d2:51:66:97:62:09:7e:d1:35:
70:7f:6b:0d:9b:61:13:0b:27:70:f0:25:f9:09:b5:a6:c6:09:
fd:65:55:17:0f:99:f3:bf:23:0c:2c:ec:25:46:ea:1a:6b:5a:
a7:92:26:36:13:15:8e:62:9c:ca:c1:1b:96:4f:b6:53:82:15:
28:49:5d:73:d5:df:45:4a:bf:fb:8f:5c:d7:7e:fe:b9:4c:8e:
53:a8:16:e6:4a:0b:8b:5e:b0:5d:7f:b7:29:ae:79:b6:1a:ba:
3e:e2:50:08:8a:0f:54:26:fa:a8:c0:8c:e4:9f:89:e8:45:3b:
1d:a0:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:27:14 2026 by rpki-client