Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/GZ6UBoQpzQZ5nnueVLzAmnKmgtU.roa
File: GZ6UBoQpzQZ5nnueVLzAmnKmgtU.roa (raw, json)
Hash identifier: JQ9oHlCO6nVyRvoDL2t1IbPT0MDRKsWss7+nbXLpRjQ=
Subject key identifier: 19:9E:94:06:84:29:CD:06:79:9E:7B:9E:54:BC:C0:9A:72:A6:82:D5
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019CBFDEAB9ADD3D588DFF80B132BDD59E1B
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/GZ6UBoQpzQZ5nnueVLzAmnKmgtU.roa
Signing time: Thu 05 Mar 2026 21:19:26 +0000
ROA not before: Thu 05 Mar 2026 21:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201136
IP address blocks: 103.216.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:de:ab:9a:dd:3d:58:8d:ff:80:b1:32:bd:d5:9e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Mar 5 21:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=199e94068429cd06799e7b9e54bcc09a72a682d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:eb:ee:d6:7a:50:4e:b0:1d:c7:2c:71:5d:63:
5f:09:84:f8:ae:40:a5:c3:e5:95:34:6d:ca:eb:c1:
c2:b1:cd:94:f4:a4:ec:de:fa:af:58:20:8b:e0:82:
98:1f:9f:e7:bc:9b:f8:8b:4a:85:51:c7:60:3b:53:
79:2a:43:1b:0d:49:fc:30:c5:b3:70:14:ba:b3:c0:
bd:b3:23:db:ee:3c:f1:76:be:0c:e8:a8:e6:c1:fd:
4b:d6:54:95:3e:21:d0:18:26:1e:cf:a4:e6:5a:60:
ff:b9:56:de:48:3c:e8:72:d0:1a:f0:67:66:c4:62:
84:a7:09:c1:fb:67:65:fb:71:e7:fa:f9:4f:77:11:
1a:81:65:e7:db:2e:03:78:45:fc:51:45:67:5f:87:
52:af:66:0c:75:0e:f5:08:ee:fb:17:eb:59:82:b4:
da:87:59:4b:16:eb:6a:ea:84:cc:20:53:bb:25:ee:
ea:2d:af:f2:6a:eb:cd:71:9f:70:dd:a9:3d:02:7a:
de:eb:c8:27:20:57:64:94:d9:15:26:1a:2f:0c:fe:
21:c0:be:d3:4c:24:e5:7f:c0:28:84:e8:fa:a1:bf:
ea:fd:f0:db:9c:c0:77:93:09:84:0d:c1:39:29:84:
33:96:1f:0b:5f:66:42:1f:3e:80:b8:57:fc:1c:c3:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:94:06:84:29:CD:06:79:9E:7B:9E:54:BC:C0:9A:72:A6:82:D5
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/GZ6UBoQpzQZ5nnueVLzAmnKmgtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.174.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b1:1f:2a:2c:f0:14:4c:25:51:92:0b:fd:66:bf:6b:3d:3c:
1b:10:27:1e:28:d5:92:db:7e:74:66:66:9a:fa:8e:58:79:07:
3d:38:26:5f:c5:1e:c8:a4:a9:40:93:c0:24:2a:42:57:4d:33:
ec:64:d2:85:3c:d2:0c:5f:4c:4b:f6:be:b1:03:d6:a5:97:a8:
56:c8:a4:34:c4:01:8a:84:01:6a:0a:00:ca:9f:5c:d9:08:d4:
13:5b:7b:c6:04:e9:4f:63:a0:1a:cb:75:49:fd:e0:b2:4a:30:
47:d7:a8:5c:bd:d1:09:30:cb:b9:69:94:88:c1:2b:70:b2:98:
e9:10:f5:91:b0:df:7e:fb:93:7b:18:87:cb:1c:ab:0a:4d:53:
fc:58:74:da:ab:3d:32:3d:a8:0e:a6:19:fb:38:8d:b1:df:11:
a6:cd:56:b3:e6:4b:6d:ed:4a:67:13:82:86:23:85:01:26:5f:
2d:fb:3e:5b:8b:f2:bd:b6:e1:ce:5e:a3:c9:a4:cb:f9:31:87:
88:eb:82:1b:42:ad:6e:45:d2:fc:b7:5f:d0:9c:77:1e:e9:46:
bf:a3:0f:e2:14:fd:92:2f:6f:04:da:41:f9:54:17:1a:77:52:
59:80:05:34:18:f5:16:34:d2:2b:4d:b4:89:f7:a9:20:48:00:
a9:84:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:02:27 2026 by rpki-client