Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/3RfQuMvO35LjF-aDp0ezwm98KOs.roa
File: 3RfQuMvO35LjF-aDp0ezwm98KOs.roa (raw, json)
Hash identifier: qeRqL7tGGTsCF4nuohjBCecpUZhIngjaJKUAGFRmgII=
Subject key identifier: DD:17:D0:B8:CB:CE:DF:92:E3:17:E6:83:A7:47:B3:C2:6F:7C:28:EB
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FDC2307F59B77BD7D443C837E7EEA684E
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/3RfQuMvO35LjF-aDp0ezwm98KOs.roa
Signing time: Fri 07 Aug 2026 12:11:51 +0000
ROA not before: Fri 07 Aug 2026 12:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135230
IP address blocks: 103.203.42.0/24 maxlen: 24
103.207.163.0/24 maxlen: 24
185.225.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:23:07:f5:9b:77:bd:7d:44:3c:83:7e:7e:ea:68:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 7 12:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd17d0b8cbcedf92e317e683a747b3c26f7c28eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:cd:99:cb:16:cb:47:21:04:a1:dc:ac:24:
00:a5:de:87:11:d1:13:46:df:8d:b9:61:ee:41:32:
a0:77:7c:2d:89:3c:1e:fd:9b:a6:f0:2f:1e:b5:88:
0f:74:87:6a:74:e8:51:3b:bb:14:15:6a:11:6d:85:
38:1f:6c:cf:08:04:6c:8a:e3:dd:1a:de:ca:b9:da:
13:20:6e:62:b6:09:ad:ba:ac:55:38:e7:9a:e6:e6:
64:10:59:2b:73:21:07:60:e9:82:9f:9e:89:d4:ad:
50:9e:39:d8:d7:cf:c0:3f:17:61:e7:c6:11:2c:2a:
9b:ed:da:12:3c:b5:d1:1c:31:27:3b:a5:d9:de:0f:
71:c1:e9:84:d0:0b:0d:2e:ec:d0:64:27:ba:b2:ac:
7d:67:4d:01:a3:1e:7a:72:f9:21:ba:b1:bc:64:08:
2f:ce:16:eb:a6:2d:f9:8c:b1:59:1d:6e:d7:3a:2f:
97:20:4b:52:58:3d:4e:1a:e8:88:25:83:8a:d9:e4:
75:40:63:1f:50:32:a1:1a:15:e3:a5:f5:dc:00:3c:
17:dd:da:a1:c0:02:33:86:e6:0a:67:33:e8:83:99:
02:35:74:2f:d5:e3:3b:32:8d:0c:ea:b5:87:86:aa:
64:9d:4a:53:46:e5:b2:3e:32:03:0a:25:11:a7:00:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:D0:B8:CB:CE:DF:92:E3:17:E6:83:A7:47:B3:C2:6F:7C:28:EB
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/3RfQuMvO35LjF-aDp0ezwm98KOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.42.0/24
103.207.163.0/24
185.225.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e5:46:ae:99:a8:4d:ed:70:39:2a:7a:84:c2:1a:d1:2b:55:
4a:16:f0:7d:70:db:43:63:59:ce:56:31:00:9f:e7:88:9f:d1:
55:ed:47:2f:1e:78:c4:b7:d3:2e:ce:0d:d7:51:5c:07:6c:ca:
ff:37:58:93:42:54:bd:33:6c:df:d3:1e:6c:27:be:ad:31:4a:
7e:17:ef:14:ef:4e:2e:34:7d:86:85:82:c6:e7:bd:49:e5:12:
b5:27:58:6f:1b:a3:c9:71:e1:f6:49:b3:ba:37:d1:68:88:cc:
2d:5c:4b:12:36:6f:3d:49:18:4b:33:ba:78:78:96:8d:52:68:
30:48:a7:43:08:0e:a0:4f:a8:73:c1:00:65:81:90:62:fb:1e:
10:0c:6a:1d:3d:58:79:96:ae:4f:c3:ea:c0:15:f1:35:ea:0c:
ea:07:81:4a:82:6d:02:44:a7:a3:b7:eb:a5:12:db:0e:bf:1f:
90:15:97:58:d2:3e:81:6e:2c:3b:c8:ae:92:a0:f6:81:35:c2:
d1:68:7b:0b:8b:21:62:f5:43:67:4e:3c:5c:bb:7d:db:49:24:
db:b2:88:45:ca:8c:cd:7f:1c:49:1f:a6:07:55:e1:9d:e2:f5:
09:b4:22:7e:ed:5d:ec:d9:72:28:a1:2d:44:a1:00:70:1c:93:
c7:61:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:59 2026 by rpki-client