Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6IhVLY_OS6UvcpsseJOk0l27Fgs.roa
File: 6IhVLY_OS6UvcpsseJOk0l27Fgs.roa (raw, json)
Hash identifier: EUbxG76w9mZ47bLtAJ8uIe0yzd1pcbmtyVrn9SUA9tE=
Subject key identifier: E8:88:55:2D:8F:CE:4B:A5:2F:72:9B:2C:78:93:A4:D2:5D:BB:16:0B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F40D711B531EE41C2988A6DDF523A2B07
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6IhVLY_OS6UvcpsseJOk0l27Fgs.roa
Signing time: Wed 08 Jul 2026 08:27:44 +0000
ROA not before: Wed 08 Jul 2026 08:27:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 103.114.41.0/24 maxlen: 24
2a13:18c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:d7:11:b5:31:ee:41:c2:98:8a:6d:df:52:3a:2b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 8 08:27:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e888552d8fce4ba52f729b2c7893a4d25dbb160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:21:56:34:47:88:56:1a:41:d1:c1:cb:3f:
11:4e:f2:b4:d4:62:aa:97:a4:1f:12:83:76:ba:c3:
5f:6b:2d:1a:fc:b5:ef:d6:f7:71:31:42:ec:32:22:
25:3d:de:50:f4:95:9d:df:07:69:76:87:de:c1:4e:
01:ff:37:78:77:80:86:e7:62:d0:1e:8a:63:ef:cc:
ab:af:a5:0e:c7:bf:80:e4:6f:5e:ec:60:2b:09:16:
39:b5:1d:54:d4:fe:0f:27:04:44:b9:60:4d:21:5b:
db:9b:80:6d:5f:83:f5:05:c8:e4:21:f1:8d:d0:28:
09:0a:64:f3:a4:36:46:b8:4d:6b:1e:27:ac:89:c1:
12:e2:e4:18:9d:0a:41:da:5d:39:8f:b3:5a:1b:34:
22:cc:9f:fd:c2:cd:84:7a:d5:8f:cd:4a:fe:c2:1e:
0f:87:e5:aa:04:df:7e:79:8c:45:c3:e9:dc:3c:8d:
92:b5:11:7a:7d:d6:c9:0f:ba:05:c1:70:60:b2:dc:
eb:b2:29:94:66:90:5b:5f:45:8c:3e:cc:eb:a3:e0:
59:7f:95:bd:9e:61:6b:c1:52:2a:d1:75:f7:5d:36:
54:c8:36:50:39:2b:44:06:08:03:0c:76:2c:88:80:
94:d3:a6:7c:e0:0e:b6:28:46:b2:16:9a:2a:c2:b1:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:55:2D:8F:CE:4B:A5:2F:72:9B:2C:78:93:A4:D2:5D:BB:16:0B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6IhVLY_OS6UvcpsseJOk0l27Fgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.41.0/24
IPv6:
2a13:18c2::/32
Signature Algorithm: sha256WithRSAEncryption
1b:ec:08:03:62:f8:c9:e7:97:f9:2b:56:1f:24:fd:ab:7e:e6:
94:a3:be:43:51:70:d1:25:6e:28:48:39:d9:0d:d0:04:68:e4:
b0:d3:12:8c:cc:54:7b:b8:f8:d2:cd:bc:fc:60:96:8a:17:ac:
b1:13:e0:e7:18:7d:bf:3e:c8:24:77:65:e0:47:6b:8c:81:bb:
9c:e5:0b:ec:53:39:92:a8:ae:e8:07:64:1d:3b:81:74:dd:15:
7c:b5:6e:9a:52:e3:a9:54:3a:f8:00:bf:5b:d7:42:cc:b0:ed:
25:a4:4e:d9:f2:fc:02:90:2f:5f:dc:26:ba:49:63:33:1d:c5:
7c:2b:04:8f:72:40:c5:5f:ff:00:34:41:9a:c2:f4:9e:1e:0a:
60:c4:36:a4:e2:33:8c:67:ec:b1:70:d1:47:a4:15:a8:22:94:
ec:68:6e:c6:dc:68:a8:40:90:4c:e6:be:16:40:66:4b:ee:c1:
ef:58:2e:d4:d7:c7:34:82:62:af:43:6b:0a:2c:85:76:ee:55:
65:2c:08:05:e0:d9:b0:3b:3f:51:41:14:26:a3:77:14:2d:26:
ac:eb:6f:c8:d3:0a:5f:34:e1:6e:43:11:a0:f3:cd:b1:a8:e2:
69:ba:4a:56:88:47:b1:86:f0:a0:50:06:df:90:0d:62:ba:4c:
81:0a:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:21:42 2026 by rpki-client