Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/qIg2XpXa-svWQfgOJuGymZyqIOo.roa
File: qIg2XpXa-svWQfgOJuGymZyqIOo.roa (raw, json)
Hash identifier: 1fPR+4RzMuotW22NPG4OI/dZoy8XwZU4Lt4oQG8dlZk=
Subject key identifier: A8:88:36:5E:95:DA:FA:CB:D6:41:F8:0E:26:E1:B2:99:9C:AA:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A067A3C2922245F75D903A5D7D933C0B7C
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/qIg2XpXa-svWQfgOJuGymZyqIOo.roa
Signing time: Thu 03 Sep 2026 14:19:40 +0000
ROA not before: Thu 03 Sep 2026 14:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63902
IP address blocks: 103.205.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:a3:c2:92:22:45:f7:5d:90:3a:5d:7d:93:3c:0b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 3 14:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a888365e95dafacbd641f80e26e1b2999caa20ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:cd:56:4d:72:7b:a2:d0:97:5f:21:29:43:
50:bd:0c:55:b2:69:53:93:79:a8:76:1b:77:69:ef:
30:51:0b:10:13:23:27:ab:df:ff:17:b9:74:f1:79:
88:ab:76:53:c5:03:26:10:dc:23:a6:a0:25:9b:90:
66:cc:b9:52:a2:49:3e:1f:80:e3:f8:57:70:c2:fa:
df:c2:9a:a5:a4:4d:9c:bd:f5:b8:4c:c5:e9:5f:d8:
f8:ad:95:2e:17:55:84:68:39:eb:e8:e2:04:88:64:
86:16:a7:12:d2:72:11:41:af:bb:a8:2c:31:0b:44:
ca:27:44:88:59:21:9d:39:cf:03:d0:c6:46:b2:42:
dc:a4:a7:07:e0:5f:66:19:e9:bb:7d:ff:9d:d6:0f:
6f:40:9b:24:97:ba:d9:da:c3:ef:05:a6:82:aa:26:
a6:65:eb:83:8f:87:f8:98:64:0a:c2:fc:d4:3c:f6:
0a:d7:f3:af:99:a8:57:4e:5c:13:14:27:2d:36:b0:
08:25:9b:2a:ce:ca:03:53:6a:ba:f8:95:2c:16:04:
da:24:6c:f2:6a:cb:f5:0d:07:7d:28:78:64:2a:f5:
db:70:77:cc:aa:28:9e:0d:07:9f:43:24:93:9d:c5:
38:8e:e0:d0:2b:e9:e0:cd:ca:11:47:7d:90:21:35:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:88:36:5E:95:DA:FA:CB:D6:41:F8:0E:26:E1:B2:99:9C:AA:20:EA
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/qIg2XpXa-svWQfgOJuGymZyqIOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.205.87.0/24
Signature Algorithm: sha256WithRSAEncryption
92:59:01:c3:73:ee:36:29:5f:16:5c:ad:7a:a7:d9:60:9d:d5:
91:cd:0c:77:c3:47:d2:cf:a9:67:49:34:6c:18:e2:e4:3e:5c:
90:70:af:9f:69:14:c8:76:71:05:bd:28:a2:8b:69:2e:0d:4c:
bb:4d:2a:d4:ca:8e:4b:93:aa:97:11:91:e3:c9:a8:06:3a:64:
cf:b7:c3:94:8f:14:00:13:18:0a:bd:35:2e:97:39:5d:09:84:
ec:b0:41:56:f1:cc:01:60:2b:16:45:8a:16:fb:6e:97:ba:07:
c7:a1:31:7b:13:ed:5a:1b:ff:73:33:18:48:96:11:17:4d:ee:
55:0f:ca:b1:fc:83:2b:a9:cf:f3:35:80:63:32:97:28:c3:a7:
91:a2:04:db:74:28:52:b8:ef:95:46:9f:16:a9:d0:ad:fb:6b:
25:6e:42:4e:bd:91:6d:97:7c:f1:6b:e4:ad:cb:eb:f7:e7:a1:
83:24:e3:bf:de:b1:d2:d5:52:e8:54:6e:89:59:e0:6d:63:9f:
e0:81:32:8d:a7:f5:c1:b8:4f:32:17:46:6f:59:17:58:63:f8:
f2:d9:74:1c:ef:dc:26:79:4f:89:26:ac:69:b9:9b:c5:ee:e3:
35:7c:d2:91:ba:95:45:bd:6a:54:08:3d:01:2d:33:73:77:9a:
8e:70:56:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBno8KSIkX3XZA6XX2TPAt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwOTAzMTQxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODg4MzY1ZTk1ZGFmYWNiZDY0MWY4MGUyNmUxYjI5OTljYWEyMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjjNVk1ye6LQl18hKUNQvQxVsmlT
k3modht3ae8wUQsQEyMnq9//F7l08XmIq3ZTxQMmENwjpqAlm5BmzLlSokk+H4Dj
+FdwwvrfwpqlpE2cvfW4TMXpX9j4rZUuF1WEaDnr6OIEiGSGFqcS0nIRQa+7qCwx
C0TKJ0SIWSGdOc8D0MZGskLcpKcH4F9mGem7ff+d1g9vQJskl7rZ2sPvBaaCqiam
ZeuDj4f4mGQKwvzUPPYK1/OvmahXTlwTFCctNrAIJZsqzsoDU2q6+JUsFgTaJGzy
asv1DQd9KHhkKvXbcHfMqiieDQefQySTncU4juDQK+ngzcoRR32QITW/OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKiINl6V2vrL1kH4DibhspmcqiDqMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvcUlnMlhwWGEtc3ZXUWZnT0p1R3ltWnlxSU9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ81XMA0G
CSqGSIb3DQEBCwUAA4IBAQCSWQHDc+42KV8WXK16p9lgndWRzQx3w0fSz6lnSTRs
GOLkPlyQcK+faRTIdnEFvSiii2kuDUy7TSrUyo5Lk6qXEZHjyagGOmTPt8OUjxQA
ExgKvTUulzldCYTssEFW8cwBYCsWRYoW+26XugfHoTF7E+1aG/9zMxhIlhEXTe5V
D8qx/IMrqc/zNYBjMpcow6eRogTbdChSuO+VRp8WqdCt+2slbkJOvZFtl3zxa+St
y+v356GDJOO/3rHS1VLoVG6JWeBtY5/ggTKNp/XBuE8yF0ZvWRdYY/jy2XQc79wm
eU+JJqxpuZvF7uM1fNKRupVFvWpUCD0BLTNzd5qOcFYh
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:47 2026 by rpki-client