Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/3YlzNf6aRVMvHUcqfB44tkzDppU.roa
File: 3YlzNf6aRVMvHUcqfB44tkzDppU.roa (raw, json)
Hash identifier: 48kbq9OSTrkqDkr/S99mhXQT/0GCpa2+pCAnpi8TyKU=
Subject key identifier: DD:89:73:35:FE:9A:45:53:2F:1D:47:2A:7C:1E:38:B6:4C:C3:A6:95
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019E8792D3D466540F65904735C19FA38C9C
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/3YlzNf6aRVMvHUcqfB44tkzDppU.roa
Signing time: Tue 02 Jun 2026 09:03:27 +0000
ROA not before: Tue 02 Jun 2026 09:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 103.76.85.0/24 maxlen: 24
116.206.92.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
195.78.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:92:d3:d4:66:54:0f:65:90:47:35:c1:9f:a3:8c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jun 2 09:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd897335fe9a45532f1d472a7c1e38b64cc3a695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:e9:b0:d7:7f:ff:da:71:54:4b:ae:e1:ff:
86:72:d6:3b:f9:46:fd:4a:d1:28:0f:06:6f:65:c1:
74:db:bb:05:fb:ed:39:34:95:1a:20:7f:41:85:8d:
8e:1f:f9:81:09:96:29:b5:ab:2f:17:79:56:7e:9a:
6d:f8:4f:f5:32:6c:5d:85:77:78:bf:0b:96:8b:a4:
8d:f8:06:d1:8f:aa:dc:e5:f9:cd:d1:34:00:8f:68:
05:51:0d:f8:1b:37:a2:8a:de:6d:84:d6:ef:a8:19:
b8:63:9c:80:03:01:ca:63:08:f9:28:27:9c:8a:4a:
64:53:0f:6a:c4:3f:69:e6:4f:72:4e:ef:41:d0:50:
9e:9c:29:e3:75:4c:dd:4d:e2:79:e8:0f:a9:d5:f2:
c1:d9:9a:42:9b:88:c9:3c:33:f8:d8:70:c8:21:09:
ba:e0:1d:8b:4a:c4:50:b4:9a:27:7d:2c:54:81:d8:
7c:b7:02:1d:41:2b:b4:46:8b:80:9a:2a:0b:96:93:
14:14:f3:69:d2:bc:8a:4c:43:db:e2:80:df:77:e6:
d2:a8:a7:8a:0c:e4:03:a0:2a:b9:b9:e5:d4:39:b9:
0b:a4:b4:bd:a9:06:5a:9d:4c:aa:5d:10:7f:ac:94:
15:a1:9e:df:0c:39:54:6b:a9:7c:71:1c:9b:38:4a:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:73:35:FE:9A:45:53:2F:1D:47:2A:7C:1E:38:B6:4C:C3:A6:95
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/3YlzNf6aRVMvHUcqfB44tkzDppU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.85.0/24
116.206.92.0/23
195.78.48.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3a:77:c6:ed:ec:9e:47:77:48:38:11:c4:ed:a8:fc:34:d9:
30:f8:ae:63:81:bb:c6:91:53:63:9a:6b:dd:0b:cd:a0:0a:aa:
20:db:bd:5f:ce:f7:c2:61:5a:11:a0:52:22:84:69:40:9b:58:
86:c1:af:c7:d8:ea:7f:4b:92:05:dc:4f:a5:70:fe:7a:e3:03:
0b:ca:4f:a4:11:25:75:d0:dc:80:9e:55:d1:95:c8:12:1b:05:
a3:cc:72:45:61:fd:aa:ef:c5:22:ad:5e:43:19:8b:1a:7a:95:
48:d7:5a:27:69:63:88:d2:e2:c3:29:2d:84:9a:35:17:d8:8c:
ad:09:0f:92:7f:4b:24:97:38:e6:c6:88:94:95:c7:77:91:89:
61:67:b7:22:05:c3:7e:62:a4:02:2d:b6:a0:c2:81:de:1b:58:
d4:fa:c6:01:b1:05:49:09:eb:05:87:28:e3:66:e4:de:1c:ac:
a2:70:ee:ae:60:87:c5:dd:71:79:db:85:ce:45:03:6d:30:5d:
ab:ec:8b:92:bb:20:eb:7a:de:4c:44:58:95:7e:af:cf:92:db:
a6:4c:7f:17:10:a3:de:7f:4a:52:65:77:19:e1:4c:e3:5a:38:
d4:7e:dd:ab:37:c6:84:4e:fd:df:a5:ac:91:89:74:d9:3f:7f:
8f:c7:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:52 2026 by rpki-client