Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/vlCU_jKVb-ZZ0zgdIckXQlbofnE.roa
File: vlCU_jKVb-ZZ0zgdIckXQlbofnE.roa (raw, json)
Hash identifier: F7ufbbnx0G/EjYRWZjeOIumItPkq8wyc5zgiz3d3dS8=
Subject key identifier: BE:50:94:FE:32:95:6F:E6:59:D3:38:1D:21:C9:17:42:56:E8:7E:71
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FE9B48B058B8B5091FCB1B4B732164A8D
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/vlCU_jKVb-ZZ0zgdIckXQlbofnE.roa
Signing time: Mon 10 Aug 2026 03:25:51 +0000
ROA not before: Mon 10 Aug 2026 03:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 103.205.87.0/24 maxlen: 24
103.207.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e9:b4:8b:05:8b:8b:50:91:fc:b1:b4:b7:32:16:4a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 10 03:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be5094fe32956fe659d3381d21c9174256e87e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:08:0c:3c:26:f9:e7:a5:9d:6b:2f:3a:d9:
a5:6d:66:7b:f5:a8:ad:53:09:af:08:43:30:41:9d:
ac:4b:6c:43:41:81:ff:04:f9:d3:6e:61:59:c4:9b:
7c:33:fa:35:d0:b5:7f:30:83:60:70:d3:e3:d4:68:
d5:45:1f:95:66:eb:95:d5:64:2c:93:86:5c:51:e0:
76:b4:a2:3e:9b:2d:16:df:63:e4:ba:32:39:40:80:
2a:86:75:5d:b1:c5:df:42:2a:67:ed:a0:50:ee:ff:
98:a7:f0:03:b6:ee:af:6a:23:71:78:61:6f:b0:cb:
8a:63:38:7b:11:ea:1e:79:4c:9e:85:29:07:33:c0:
6e:31:3a:04:1d:47:07:d4:04:80:0b:05:2d:d5:cb:
f6:6e:9c:a0:da:51:64:8a:c1:b8:f4:67:56:13:85:
a1:1a:cc:f5:0e:ef:b1:4a:ad:54:89:18:08:73:80:
c3:cf:97:6b:b7:49:2c:54:8b:bc:bf:57:ee:c6:0d:
bb:ce:ae:4b:bc:5b:9d:ed:07:2d:22:5a:33:47:99:
37:0c:27:b2:54:58:04:d3:af:5f:58:76:03:e8:2e:
50:5c:ca:5b:a9:ed:ab:35:57:9c:7e:69:1e:bb:d2:
a8:d2:00:61:16:96:a3:19:f2:17:a2:57:6a:11:5d:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:50:94:FE:32:95:6F:E6:59:D3:38:1D:21:C9:17:42:56:E8:7E:71
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/vlCU_jKVb-ZZ0zgdIckXQlbofnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.205.87.0/24
103.207.160.0/24
Signature Algorithm: sha256WithRSAEncryption
30:de:83:c3:58:71:d0:0f:ae:6e:fb:71:c0:8f:92:e0:2a:1e:
97:19:a9:9b:c5:bb:05:6c:c9:29:0e:65:e5:fb:05:cd:d3:1c:
9e:81:06:a3:1f:14:76:32:6b:f2:f7:39:6d:b0:39:22:6a:4c:
40:a5:0b:13:cb:8d:0a:60:08:30:86:d0:d1:f4:5c:a1:3d:b3:
62:59:01:a7:3e:56:13:4c:24:77:2e:c8:8c:9a:e8:a8:8c:0d:
1f:1c:cd:38:0d:e2:c4:4c:98:9a:d8:fb:45:7b:e9:fa:68:14:
4d:c1:f7:00:f8:7f:0a:f9:3e:42:72:b1:a8:b6:33:0d:73:7b:
35:93:15:cf:cd:cd:99:e6:5c:80:1d:02:3d:fd:8e:ca:6f:fc:
bd:bd:e7:8f:d0:9b:7b:9f:1f:bd:d7:bf:5d:20:c9:9b:67:01:
67:6d:7b:1f:01:45:54:76:8b:d5:05:75:3a:c5:27:34:60:dc:
70:73:33:b5:1c:0d:fd:bb:cf:16:6c:cf:21:cf:3b:c7:89:81:
9b:8e:62:00:98:41:a4:fc:db:a9:a7:74:e7:62:84:35:00:ed:
11:fd:66:59:db:3e:1a:1f:03:24:5b:3a:7a:9f:49:dc:8b:a4:
24:d4:c9:6f:96:d0:db:ad:c1:91:80:91:82:33:29:6b:bb:72:
b9:1b:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:26:39 2026 by rpki-client