Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/6mhv5UsNi48e2qDq3ejV1I51Uj4.roa
File: 6mhv5UsNi48e2qDq3ejV1I51Uj4.roa (raw, json)
Hash identifier: DnBbdic7iw6ZxNpBPBJIWL6I3IXFvu/CiDUrM9wqPfY=
Subject key identifier: EA:68:6F:E5:4B:0D:8B:8F:1E:DA:A0:EA:DD:E8:D5:D4:8E:75:52:3E
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019F284AE0A14C6D9F8D54D2F21E17E79032
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/6mhv5UsNi48e2qDq3ejV1I51Uj4.roa
Signing time: Fri 03 Jul 2026 14:03:43 +0000
ROA not before: Fri 03 Jul 2026 14:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55933
IP address blocks: 103.76.84.0/23 maxlen: 23
103.76.84.0/24 maxlen: 24
103.100.158.0/23 maxlen: 23
103.100.159.0/24 maxlen: 24
103.212.32.0/23 maxlen: 23
103.212.32.0/24 maxlen: 24
116.206.95.0/24 maxlen: 24
144.48.8.0/22 maxlen: 24
144.48.8.0/23 maxlen: 23
144.48.8.0/24 maxlen: 24
203.189.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:4a:e0:a1:4c:6d:9f:8d:54:d2:f2:1e:17:e7:90:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 3 14:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea686fe54b0d8b8f1edaa0eadde8d5d48e75523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:be:00:f1:9e:10:9e:db:09:90:be:06:70:
9b:dc:8a:e4:be:35:d5:13:bd:b3:2f:88:91:a3:ff:
4d:9c:fe:0a:40:96:ac:18:a5:92:82:10:13:75:f3:
b2:42:db:8a:ac:60:26:96:a9:a3:96:6d:7f:c8:28:
09:9f:a0:49:36:3d:ae:4a:72:18:ea:0c:53:7b:fb:
44:ab:e8:00:71:ad:67:2f:7b:5d:70:e3:7f:e7:8d:
b8:db:a1:48:2b:4a:df:86:0b:a2:a4:a7:9c:86:55:
52:bf:4e:c6:f3:c1:6a:27:77:5a:79:17:5b:ac:6a:
33:02:fc:19:af:74:46:32:2b:8c:77:84:3e:91:7e:
8e:81:c1:50:66:a7:01:eb:f3:2d:6b:13:f3:bc:31:
3d:86:b4:6c:8d:80:c1:76:cd:fa:06:3c:93:76:77:
57:c0:10:e6:28:72:86:ad:7a:59:5c:71:ef:a9:f2:
97:6d:29:75:96:0a:5a:cb:f7:0e:33:a9:56:83:fa:
d3:af:e8:f9:66:d7:40:b8:a3:c2:cf:36:d5:14:b4:
30:74:ea:1a:98:29:a4:be:fb:e1:20:b6:7c:da:67:
44:24:bb:27:67:3f:dc:1f:68:5c:6f:1e:a3:ea:92:
bb:aa:50:4a:17:af:12:2d:6a:e9:d0:6d:63:51:fc:
f3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:68:6F:E5:4B:0D:8B:8F:1E:DA:A0:EA:DD:E8:D5:D4:8E:75:52:3E
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/6mhv5UsNi48e2qDq3ejV1I51Uj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.84.0/23
103.100.158.0/23
103.212.32.0/23
116.206.95.0/24
144.48.8.0/22
203.189.234.0/23
Signature Algorithm: sha256WithRSAEncryption
59:69:93:27:4e:a2:76:e8:94:47:6a:61:8e:ed:03:22:42:a9:
bb:d2:2f:1f:00:4c:fb:f2:ef:8d:28:4b:b9:d5:f0:dc:61:03:
34:d9:30:be:a7:d4:8c:5b:95:6c:ca:95:da:5d:e4:b9:08:9f:
93:41:e8:53:e6:8e:c5:6e:a2:d3:e5:79:78:59:f5:ef:24:f6:
41:3e:f4:83:ec:19:eb:3c:e0:29:db:61:83:bd:83:0b:00:8e:
92:9d:11:68:ff:0a:c1:73:d5:cf:27:a3:9b:2b:80:01:ed:87:
e7:3c:d5:4b:75:bb:3c:2d:1d:79:37:3e:1b:16:ff:13:17:18:
8e:01:0d:db:74:4b:fd:b3:f5:b4:1b:8b:96:d7:1d:35:46:c6:
67:6d:e0:fe:ea:9a:31:4e:eb:62:be:da:79:47:d5:ab:26:36:
a0:c4:07:74:9f:05:81:99:45:8b:63:76:c1:6f:44:21:89:b5:
67:12:84:0e:23:81:62:ec:45:0f:c5:69:c8:e9:26:bb:6b:c1:
94:a3:61:6b:38:3e:df:d3:f5:af:d7:c4:c2:7d:e4:3f:7a:e3:
73:57:5e:10:bd:fd:3d:d2:e1:03:85:19:55:61:e4:df:e5:9b:
2a:d1:b9:8a:f3:f6:10:28:ee:97:f4:1b:cd:df:89:3e:a6:42:
35:0d:7c:ec
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ8oSuChTG2fjVTS8h4X55AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjYwNzAzMTQwMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTY4NmZlNTRiMGQ4YjhmMWVkYWEwZWFkZGU4ZDVkNDhlNzU1MjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY2+APGeEJ7bCZC+BnCb3IrkvjXV
E72zL4iRo/9NnP4KQJasGKWSghATdfOyQtuKrGAmlqmjlm1/yCgJn6BJNj2uSnIY
6gxTe/tEq+gAca1nL3tdcON/542426FIK0rfhguipKechlVSv07G88FqJ3daeRdb
rGozAvwZr3RGMiuMd4Q+kX6OgcFQZqcB6/MtaxPzvDE9hrRsjYDBds36BjyTdndX
wBDmKHKGrXpZXHHvqfKXbSl1lgpay/cOM6lWg/rTr+j5ZtdAuKPCzzbVFLQwdOoa
mCmkvvvhILZ82mdEJLsnZz/cH2hcbx6j6pK7qlBKF68SLWrp0G1jUfzzBwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOpob+VLDYuPHtqg6t3o1dSOdVI+MB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvNm1odjVVc05pNDhlMnFEcTNlalYxSTUxVWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBZ0xUAwQB
Z2SeAwQBZ9QgAwQAdM5fAwQCkDAIAwQBy73qMA0GCSqGSIb3DQEBCwUAA4IBAQBZ
aZMnTqJ26JRHamGO7QMiQqm70i8fAEz78u+NKEu51fDcYQM02TC+p9SMW5VsypXa
XeS5CJ+TQehT5o7FbqLT5Xl4WfXvJPZBPvSD7BnrPOAp22GDvYMLAI6SnRFo/wrB
c9XPJ6ObK4AB7YfnPNVLdbs8LR15Nz4bFv8TFxiOAQ3bdEv9s/W0G4uW1x01RsZn
beD+6poxTutivtp5R9WrJjagxAd0nwWBmUWLY3bBb0QhibVnEoQOI4Fi7EUPxWnI
6Sa7a8GUo2FrOD7f0/Wv18TCfeQ/euNzV14Qvf090uEDhRlVYeTf5Zsq0bmK8/YQ
KO6X9BvN34k+pkI1DXzs
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:53 2026 by rpki-client