Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/mwC6MKa_JaWowyw2WhaQtGJ8cBU.roa
File: mwC6MKa_JaWowyw2WhaQtGJ8cBU.roa (raw, json)
Hash identifier: oc9OWN5cse8gqT8UGgSTo1cj+MCP+VmGebDH3qUQknc=
Subject key identifier: 9B:00:BA:30:A6:BF:25:A5:A8:C3:2C:36:5A:16:90:B4:62:7C:70:15
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 019F2368A15E9AEB85FD5610C788CEA6A56A
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/mwC6MKa_JaWowyw2WhaQtGJ8cBU.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 103.110.160.0/22 maxlen: 32
103.113.29.0/24 maxlen: 24
103.195.144.0/22 maxlen: 32
103.219.212.0/23 maxlen: 32
185.72.240.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a1:5e:9a:eb:85:fd:56:10:c7:88:ce:a6:a5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b00ba30a6bf25a5a8c32c365a1690b4627c7015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:1d:13:af:89:26:ca:0f:90:66:bf:5e:dd:
fd:06:01:b7:f8:a1:95:47:33:d3:b3:a8:45:78:3f:
db:a3:26:9c:5c:3c:39:41:01:6e:90:82:a0:63:a3:
d0:ea:c9:d3:b4:c0:97:bf:8b:dc:20:ac:25:05:0b:
0f:08:58:28:ab:af:85:a3:8c:d8:37:44:2f:c5:26:
ce:1d:89:83:7f:ca:ba:95:a7:04:2a:49:1d:d3:83:
a8:a6:c7:9f:74:66:d9:ab:3c:23:ef:9a:63:e1:8f:
1c:e0:93:df:dd:63:0a:c7:de:f3:d3:8d:63:b5:e4:
2d:bc:30:7a:10:0a:02:d0:79:30:78:2a:1e:07:3c:
8a:48:92:8f:7a:52:7d:e4:9c:32:c4:3e:e7:c2:62:
04:c3:06:c2:80:56:91:e6:2d:b0:1e:d5:46:2d:9b:
78:84:01:04:f9:ad:65:fb:92:34:d8:b2:e7:13:d4:
5f:ef:5a:5f:89:af:3a:59:91:11:71:1b:32:f4:96:
87:8b:4e:0e:b7:29:e1:66:bd:b4:0c:43:84:f2:2a:
b9:61:53:4d:fe:48:a2:5e:0b:16:c0:c7:72:55:b2:
94:7c:36:a7:29:97:05:84:2d:5e:4c:8e:8b:11:81:
cf:48:bf:80:63:95:b5:a4:75:ba:8f:91:9b:73:89:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:00:BA:30:A6:BF:25:A5:A8:C3:2C:36:5A:16:90:B4:62:7C:70:15
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/mwC6MKa_JaWowyw2WhaQtGJ8cBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.110.160.0/22
103.113.29.0/24
103.195.144.0/22
103.219.212.0/23
185.72.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:88:a1:04:f5:1b:1a:53:8a:4c:ae:68:30:6e:df:71:2f:a7:
54:ff:8d:ee:69:61:2c:91:9f:f6:97:d3:bc:09:a2:8d:03:e3:
f1:e5:9e:5e:b0:b7:36:81:84:cf:37:c6:51:55:59:b3:ec:45:
bd:df:f1:d7:8d:55:f4:96:c3:6c:a5:14:95:b9:9a:8f:e7:55:
36:bc:da:23:8e:7f:4d:9a:d6:25:7c:dd:dc:8c:bb:f5:7a:ae:
dd:3e:84:8c:76:60:c2:cc:2f:02:cc:5e:b8:ff:11:0a:82:9c:
12:90:c0:23:5f:2b:7a:ff:55:dd:ef:45:7d:85:d4:a6:57:18:
c5:98:b9:c9:a7:00:e8:fe:be:b7:7e:4b:70:c6:da:71:f8:50:
35:7e:19:41:0d:67:4d:6a:c2:cd:4d:5b:65:a1:04:69:de:4a:
0f:37:cd:b9:ca:94:b4:23:8b:be:87:59:2f:97:91:2d:59:30:
75:bd:c1:14:6c:42:51:47:e6:29:1e:25:c4:a5:9c:49:5c:2b:
57:9d:8b:bc:86:5d:77:7f:43:91:c0:75:35:d6:61:23:f8:31:
45:20:b6:ae:9c:05:ed:1d:7a:eb:f6:f9:2e:b0:0e:d9:02:76:
13:2c:5f:e2:6a:d3:d7:65:4c:88:cf:26:6e:6c:6d:85:7f:6a:
31:5f:19:ad
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ8jaKFemuuF/VYQx4jOpqVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmI4MDI2ZDY0OTI2MDNhZmE0MTNkNzM1NGY3ZTRmMTU5
NDdmMmEwHhcNMjYwNzAyMTUxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjAwYmEzMGE2YmYyNWE1YThjMzJjMzY1YTE2OTBiNDYyN2M3MDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AUdE6+JJsoPkGa/Xt39BgG3+KGV
RzPTs6hFeD/boyacXDw5QQFukIKgY6PQ6snTtMCXv4vcIKwlBQsPCFgoq6+Fo4zY
N0QvxSbOHYmDf8q6lacEKkkd04OopsefdGbZqzwj75pj4Y8c4JPf3WMKx97z041j
teQtvDB6EAoC0HkweCoeBzyKSJKPelJ95JwyxD7nwmIEwwbCgFaR5i2wHtVGLZt4
hAEE+a1l+5I02LLnE9Rf71pfia86WZERcRsy9JaHi04OtynhZr20DEOE8iq5YVNN
/kiiXgsWwMdyVbKUfDanKZcFhC1eTI6LEYHPSL+AY5W1pHW6j5Gbc4nyvQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJsAujCmvyWlqMMsNloWkLRifHAVMB8GA1UdIwQY
MBaAFM27gCbWSSYDr6QT1zVPfk8VlH8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJ1QUp0WkpKZ092cEJQWE5VOS1UeFdVZnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmIt
ZTE1NDM3MzgwMDk5LzEvbXdDNk1LYV9KYVdvd3l3MldoYVF0R0o4Y0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmItZTE1NDM3MzgwMDk5
LzEvemJ1QUp0WkpKZ092cEJQWE5VOS1UeFdVZnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCZ26gAwQA
Z3EdAwQCZ8OQAwQBZ9vUAwQCuUjwMA0GCSqGSIb3DQEBCwUAA4IBAQCNiKEE9Rsa
U4pMrmgwbt9xL6dU/43uaWEskZ/2l9O8CaKNA+Px5Z5esLc2gYTPN8ZRVVmz7EW9
3/HXjVX0lsNspRSVuZqP51U2vNojjn9NmtYlfN3cjLv1eq7dPoSMdmDCzC8CzF64
/xEKgpwSkMAjXyt6/1Xd70V9hdSmVxjFmLnJpwDo/r63fktwxtpx+FA1fhlBDWdN
asLNTVtloQRp3koPN825ypS0I4u+h1kvl5EtWTB1vcEUbEJRR+YpHiXEpZxJXCtX
nYu8hl13f0ORwHU11mEj+DFFILaunAXtHXrr9vkusA7ZAnYTLF/iatPXZUyIzyZu
bG2Ff2oxXxmt
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:24 2026 by rpki-client