Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tBzf215xb2SmjcIjAyZpNpc6HDU.roa
File: tBzf215xb2SmjcIjAyZpNpc6HDU.roa (raw, json)
Hash identifier: XWWHL1+dogI/UaRL0VZB79JoXQ+KViYeQDlMcrD4uSk=
Subject key identifier: B4:1C:DF:DB:5E:71:6F:64:A6:8D:C2:23:03:26:69:36:97:3A:1C:35
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A00E58AF686C88B5445FC1A46FB3F7DA90
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tBzf215xb2SmjcIjAyZpNpc6HDU.roa
Signing time: Mon 17 Aug 2026 06:11:28 +0000
ROA not before: Mon 17 Aug 2026 06:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 103.114.41.0/24 maxlen: 24
2a0a:2d02::/32 maxlen: 32
2a13:18c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:58:af:68:6c:88:b5:44:5f:c1:a4:6f:b3:f7:da:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 17 06:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b41cdfdb5e716f64a68dc22303266936973a1c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:54:23:e1:14:86:59:f6:92:a9:37:8e:f4:
6e:10:34:76:a4:68:e7:eb:69:bc:a8:bc:95:32:b1:
75:14:ae:d8:64:66:b0:de:5d:79:25:20:e1:4b:49:
cc:84:e5:6d:fc:83:1f:49:b5:5b:78:a6:22:6c:40:
35:9f:48:d4:70:b5:3d:71:3a:63:5c:9a:57:e9:db:
68:13:1b:d1:d3:14:d6:9c:e9:eb:eb:89:27:f9:0d:
1f:d4:86:68:28:a3:98:24:2e:4a:aa:84:0f:d9:bf:
59:25:ba:24:1b:86:af:b5:75:c0:74:2b:f0:0e:8e:
4b:d3:2e:65:3b:d2:e2:81:d7:52:d0:3a:b8:1d:01:
65:b5:46:26:91:d5:5c:a9:39:66:b4:cb:27:09:63:
1a:31:b1:68:e2:f2:14:26:64:c7:6f:73:31:2e:86:
23:84:34:b1:04:32:e8:60:b1:05:95:b3:08:19:ed:
df:ea:fd:1f:63:24:c7:05:b0:54:70:98:23:0d:ae:
10:27:7b:c5:97:7e:b8:bb:01:83:48:ce:af:e5:06:
bd:74:aa:d1:c6:a0:3e:27:16:96:37:db:15:1c:d2:
02:b5:d4:b7:7b:53:cb:99:8e:e2:d1:ec:27:06:4d:
fa:9b:74:b1:c1:86:f5:b4:e7:d2:08:0b:17:a1:d4:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:DF:DB:5E:71:6F:64:A6:8D:C2:23:03:26:69:36:97:3A:1C:35
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tBzf215xb2SmjcIjAyZpNpc6HDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.41.0/24
IPv6:
2a0a:2d02::/32
2a13:18c2::/32
Signature Algorithm: sha256WithRSAEncryption
aa:e0:d6:c2:85:13:9b:10:d0:cf:72:66:47:3e:20:d3:9c:53:
5a:c0:f5:5f:1e:36:94:13:65:25:ee:cb:a9:77:8c:0a:fd:76:
ba:9c:5a:7c:92:6c:11:e0:31:6f:30:ee:0a:d1:d6:7f:6b:33:
27:e5:52:55:b1:d0:99:65:7e:66:f8:eb:b4:59:de:d8:85:f2:
dc:88:1c:39:1c:ae:4f:49:e9:57:cb:76:2f:35:6a:0c:7c:a3:
cf:5a:23:80:95:4a:9d:79:d5:8a:1b:95:9c:0d:b7:d2:c6:8b:
13:12:7b:a3:e5:b8:94:b9:46:fc:21:5c:d5:dc:7f:17:c7:07:
df:5d:3e:19:39:31:48:c6:ba:3e:45:52:47:10:89:04:cc:dd:
24:3f:48:c9:5b:e5:19:6f:ff:63:65:3b:07:3f:1f:46:36:a6:
bc:81:16:fc:61:f0:af:90:3c:56:e1:90:f7:54:37:ad:c4:79:
5b:71:de:3e:ff:a4:c8:65:12:2a:c8:6d:cb:bd:35:67:9e:5f:
44:7a:09:c1:cb:18:08:df:9c:43:51:62:fd:9a:b5:c3:2b:a5:
f7:44:e8:10:76:e8:31:1a:ca:7c:2e:c2:30:8a:43:6e:96:61:
63:e9:cf:f0:a0:fb:c4:92:81:4e:9a:94:02:dc:35:72:28:5d:
a1:c0:33:f9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaAOWK9obIi1RF/BpG+z99qQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODE3MDYxMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDFjZGZkYjVlNzE2ZjY0YTY4ZGMyMjMwMzI2NjkzNjk3M2ExYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSBUI+EUhln2kqk3jvRuEDR2pGjn
62m8qLyVMrF1FK7YZGaw3l15JSDhS0nMhOVt/IMfSbVbeKYibEA1n0jUcLU9cTpj
XJpX6dtoExvR0xTWnOnr64kn+Q0f1IZoKKOYJC5KqoQP2b9ZJbokG4avtXXAdCvw
Do5L0y5lO9LigddS0Dq4HQFltUYmkdVcqTlmtMsnCWMaMbFo4vIUJmTHb3MxLoYj
hDSxBDLoYLEFlbMIGe3f6v0fYyTHBbBUcJgjDa4QJ3vFl364uwGDSM6v5Qa9dKrR
xqA+JxaWN9sVHNICtdS3e1PLmY7i0ewnBk36m3SxwYb1tOfSCAsXodSz2QIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFLQc39tecW9kpo3CIwMmaTaXOhw1MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvdEJ6ZjIxNXhiMlNtamNJakF5WnBOcGM2SERVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAZ3IpMBQE
AgACMA4DBQAqCi0CAwUAKhMYwjANBgkqhkiG9w0BAQsFAAOCAQEAquDWwoUTmxDQ
z3JmRz4g05xTWsD1Xx42lBNlJe7LqXeMCv12upxafJJsEeAxbzDuCtHWf2szJ+VS
VbHQmWV+ZvjrtFne2IXy3IgcORyuT0npV8t2LzVqDHyjz1ojgJVKnXnVihuVnA23
0saLExJ7o+W4lLlG/CFc1dx/F8cH310+GTkxSMa6PkVSRxCJBMzdJD9IyVvlGW//
Y2U7Bz8fRjamvIEW/GHwr5A8VuGQ91Q3rcR5W3HePv+kyGUSKshty701Z55fRHoJ
wcsYCN+cQ1Fi/Zq1wyul90ToEHboMRrKfC7CMIpDbpZhY+nP8KD7xJKBTpqUAtw1
cihdocAz+Q==
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:26 2026 by rpki-client