Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/d0bKqLDVT9i-MCQKTK8YbEUqVLM.roa
File: d0bKqLDVT9i-MCQKTK8YbEUqVLM.roa (raw, json)
Hash identifier: EeuLafzAZnsr+DGOi2eZXZcBrdc3AJiujy5QjDpVZRo=
Subject key identifier: 77:46:CA:A8:B0:D5:4F:D8:BE:30:24:0A:4C:AF:18:6C:45:2A:54:B3
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 01A0484E6DA92E24C06049D8A632D29DE08F
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/d0bKqLDVT9i-MCQKTK8YbEUqVLM.roa
Signing time: Fri 28 Aug 2026 12:18:14 +0000
ROA not before: Fri 28 Aug 2026 12:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 103.219.212.0/23 maxlen: 32
185.72.240.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:4e:6d:a9:2e:24:c0:60:49:d8:a6:32:d2:9d:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Aug 28 12:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7746caa8b0d54fd8be30240a4caf186c452a54b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:7c:3c:db:41:6b:54:17:09:df:2a:01:0c:
4c:fa:79:ae:60:a8:29:e5:da:55:44:a4:c3:17:6d:
a3:46:cc:ca:b7:86:f9:86:b1:1d:ff:6a:3b:f3:c9:
61:39:75:cc:17:78:01:cf:28:5e:5f:fc:d8:4e:16:
3f:bb:96:fe:92:36:49:17:6e:24:c1:77:78:56:23:
ba:19:a3:c3:83:fe:90:4f:16:5e:55:21:d2:0d:b7:
61:9f:7c:3f:ce:b8:d5:42:5b:fd:ee:22:1a:6b:b9:
a7:9d:70:fc:67:15:5a:d3:a2:39:4e:f8:f9:f6:81:
15:18:02:8d:46:87:e6:38:a1:67:1b:c0:a7:3e:93:
dd:2d:8c:d7:e0:6f:7e:75:e6:a3:ee:ab:84:fb:fd:
9f:28:8c:d1:99:ee:fc:fd:d2:86:dd:d9:99:e7:32:
bc:4a:c2:4e:97:6c:75:65:15:72:89:03:7b:a9:23:
81:4c:93:f9:80:91:ca:18:ab:c6:08:da:9f:7c:9c:
da:b0:32:fa:8b:99:73:26:9c:21:fc:06:0a:ec:83:
9f:45:cd:0a:fc:98:ee:75:a0:7a:96:17:8c:f4:d2:
ee:74:07:50:d0:24:1f:99:13:e4:88:7a:0b:be:a8:
67:0a:69:4c:86:9a:d8:d0:4c:72:01:dc:a3:00:59:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:CA:A8:B0:D5:4F:D8:BE:30:24:0A:4C:AF:18:6C:45:2A:54:B3
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/d0bKqLDVT9i-MCQKTK8YbEUqVLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.212.0/23
185.72.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:7b:18:4f:0e:1a:3d:76:39:42:ac:a3:d9:ba:33:56:57:75:
1c:0a:77:21:31:ca:be:0f:69:be:0b:ff:d4:df:a3:99:96:eb:
54:fb:21:ac:8b:ac:18:82:ff:71:bc:13:57:6f:45:9f:a3:a2:
a1:ee:15:46:5f:8c:41:cf:19:f2:13:7f:c2:7e:1e:26:2f:98:
6b:12:85:c7:e7:a4:51:ac:73:f5:ad:3e:d4:7c:d6:55:46:81:
30:41:22:18:7d:a8:d0:41:c7:c2:43:ab:ce:58:cc:48:32:17:
ab:e0:3f:5e:72:5a:24:00:71:20:4c:ff:b4:40:c8:e2:41:d3:
08:b6:69:70:60:f5:75:10:0e:23:ef:44:0c:1c:46:5b:f4:4a:
16:aa:bd:fe:be:47:97:47:95:07:d2:c5:75:d8:88:d5:a7:52:
70:43:c4:48:e0:d8:69:48:da:92:2a:b0:6c:48:59:7a:7f:8c:
63:9c:ed:88:90:9e:88:78:8e:fd:68:36:bc:99:46:84:7b:6b:
38:d5:25:bd:66:ed:1b:d3:f8:64:a4:d5:d6:51:6d:ac:77:bb:
0b:26:89:e8:f5:c5:35:4d:b8:b5:38:44:d8:af:52:a9:ca:01:
92:5a:f2:0c:59:e0:a2:b6:0f:86:e0:ac:1a:34:3f:6e:f3:07:
69:af:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:49:53 2026 by rpki-client