Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ChCUE7REakENR8d4T_aNUtw-wP0.roa
File: ChCUE7REakENR8d4T_aNUtw-wP0.roa (raw, json)
Hash identifier: NO+QHrwo8/hihQySUjEx463bM7GjrmIIv+HCCXDnVfU=
Subject key identifier: 0A:10:94:13:B4:44:6A:41:0D:47:C7:78:4F:F6:8D:52:DC:3E:C0:FD
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019ED9465F257A06554628A09A6122B8C608
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ChCUE7REakENR8d4T_aNUtw-wP0.roa
Signing time: Thu 18 Jun 2026 05:48:48 +0000
ROA not before: Thu 18 Jun 2026 05:48:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 45.155.91.0/24 maxlen: 24
103.100.170.0/24 maxlen: 24
172.110.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:46:5f:25:7a:06:55:46:28:a0:9a:61:22:b8:c6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jun 18 05:48:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a109413b4446a410d47c7784ff68d52dc3ec0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:f4:14:98:a9:43:1a:11:b3:0c:61:ed:b1:
82:03:7c:13:fd:e4:40:43:0b:3d:01:ea:8f:0d:f1:
c2:c3:ff:f2:7e:8b:81:fe:94:df:50:79:26:f4:ff:
f4:15:ec:0b:8a:6e:4a:df:a2:f3:00:05:b8:af:74:
62:f8:8c:4b:b3:7b:bd:7f:fd:1c:6c:ce:95:db:27:
a1:0b:cf:b8:90:24:e2:8c:7e:ea:06:de:87:60:d3:
e0:0e:8d:dc:ac:cb:64:f9:16:97:fc:74:d1:ba:34:
bc:2a:a2:f4:c0:b5:28:45:ae:ab:f2:a4:87:c7:00:
6c:0d:77:26:4e:03:20:58:47:fb:e5:7e:4b:54:b1:
66:2e:24:b8:49:ba:39:8e:c2:b9:ab:30:ae:05:a9:
0c:8c:5c:1d:0e:49:9e:f1:3d:c8:3e:62:05:6e:ea:
cf:dc:74:29:3e:4f:5d:b9:2e:8f:12:fc:94:8f:9e:
a1:a7:c4:6f:12:af:51:3e:4d:37:d8:8c:4f:0e:cf:
ac:af:a9:74:14:6f:4b:3b:9d:ec:98:62:71:94:7a:
14:19:b5:05:35:db:2b:b4:50:7a:73:e6:c8:ff:ad:
49:a6:63:1f:ab:4c:6c:c6:0e:fa:74:4b:b1:3a:bc:
74:8e:1f:57:27:22:42:a6:21:98:46:bc:a8:87:3e:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:94:13:B4:44:6A:41:0D:47:C7:78:4F:F6:8D:52:DC:3E:C0:FD
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ChCUE7REakENR8d4T_aNUtw-wP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.91.0/24
103.100.170.0/24
172.110.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:31:1e:64:d1:4c:92:3f:21:46:e9:05:b1:1e:06:64:f3:87:
35:59:4f:ef:00:84:b5:2a:8b:3b:82:4c:04:c8:58:23:a8:7e:
5b:a7:15:43:3d:ee:27:d9:ec:4c:e2:ec:83:9e:61:10:8f:65:
b6:28:0c:d3:9c:1c:ee:9e:a7:67:81:c6:45:f3:95:1e:2b:c0:
b9:c0:ea:7a:2c:b0:5d:50:42:5b:4a:b9:ed:f9:ff:2b:da:5b:
30:5d:ae:96:e4:82:31:b0:54:76:96:8b:41:a6:14:dc:1f:64:
91:96:1b:4b:5b:fd:d9:ce:bf:5a:3d:f5:41:49:80:8a:5f:bf:
89:ed:80:95:be:04:ea:ee:52:71:07:58:74:5d:57:db:4e:be:
f1:bc:5a:95:10:6c:e8:e9:60:58:14:56:ec:e6:4d:9f:9f:bf:
b0:b9:47:bc:84:a4:2e:58:a4:0a:4f:06:d1:08:9f:50:43:28:
1a:74:29:51:fd:f2:16:5a:69:9b:07:51:ab:e0:db:82:3c:54:
2e:37:1a:a6:f6:36:da:3a:f8:06:a6:f1:7f:52:c7:b2:63:96:
cd:e9:4b:e2:b2:c3:9e:5b:26:ad:50:bd:4e:de:4a:8c:9a:7b:
74:fd:c2:98:8e:0e:36:9a:8a:c9:60:01:0b:82:8d:a2:91:73:
cf:14:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:45 2026 by rpki-client