Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Ia5LqxC4UDeU94BXdFGGowiTk-Q.roa
File: Ia5LqxC4UDeU94BXdFGGowiTk-Q.roa (raw, json)
Hash identifier: trfEQgzbUlz1xLGTVPmFL6RW2N2kOG1uK8fwtE/nm/0=
Subject key identifier: 21:AE:4B:AB:10:B8:50:37:94:F7:80:57:74:51:86:A3:08:93:93:E4
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019CE83D2E7D3141F1246EBF08F4834F162A
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Ia5LqxC4UDeU94BXdFGGowiTk-Q.roa
Signing time: Fri 13 Mar 2026 17:27:29 +0000
ROA not before: Fri 13 Mar 2026 17:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138968
IP address blocks: 103.76.85.0/24 maxlen: 24
103.76.86.0/24 maxlen: 24
103.76.87.0/24 maxlen: 24
116.206.92.0/22 maxlen: 24
144.48.8.0/22 maxlen: 24
203.189.232.0/23 maxlen: 24
2a0f:6700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:3d:2e:7d:31:41:f1:24:6e:bf:08:f4:83:4f:16:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Mar 13 17:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21ae4bab10b8503794f78057745186a3089393e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:12:63:c9:a9:f8:af:cb:64:fd:cd:9b:2f:
14:2b:9a:40:65:85:4b:b4:a5:5a:3b:86:fd:77:09:
30:89:ac:95:12:d0:79:aa:99:d5:66:3b:0e:b2:92:
4e:e1:3f:ef:88:d9:69:99:9c:78:99:21:cf:38:bf:
da:07:89:3f:1f:fb:fe:51:6c:76:a4:ba:f0:a2:80:
66:e9:79:99:c3:c4:47:b8:2e:6e:c5:49:74:01:be:
3b:98:ce:77:52:46:fe:a8:19:cb:6c:a5:bb:5c:e0:
c8:3f:80:18:60:47:09:31:59:02:15:3d:9a:bb:34:
3f:4b:f0:88:a4:6d:f1:49:73:87:7f:5f:86:1c:8e:
b0:4e:ad:2b:90:0e:10:c2:04:5b:03:a8:de:5b:c5:
0e:a6:82:b4:61:b5:6a:c4:f3:23:14:45:9b:fd:43:
e1:8e:bd:a8:1a:c7:8f:b1:2f:eb:d2:25:61:d9:ff:
d4:de:f7:39:2b:30:5f:d6:79:7c:77:bd:ce:65:bd:
85:74:09:5c:95:7e:3d:e2:43:a4:a0:8e:f2:f6:aa:
79:14:20:8b:01:85:89:6d:4a:5a:e0:f1:c4:53:f8:
4f:2c:50:bb:9f:c9:58:da:59:3f:5b:31:5d:5a:a8:
1c:55:5e:1c:5f:e8:07:1c:c4:01:e4:19:25:68:00:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AE:4B:AB:10:B8:50:37:94:F7:80:57:74:51:86:A3:08:93:93:E4
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Ia5LqxC4UDeU94BXdFGGowiTk-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.85.0-103.76.87.255
116.206.92.0/22
144.48.8.0/22
203.189.232.0/23
IPv6:
2a0f:6700::/29
Signature Algorithm: sha256WithRSAEncryption
22:91:5c:87:e9:c2:ae:af:f9:35:e6:a1:ed:b9:4c:74:65:6c:
64:e4:4c:00:7c:8a:a2:f3:98:02:d6:fa:d1:49:f3:73:ba:a6:
30:77:4d:28:e8:77:1f:50:87:3c:f2:78:30:e5:fc:60:d0:51:
a5:ff:f3:7d:ed:eb:a8:3f:d3:ff:15:97:1e:a0:7a:02:99:a9:
bd:5e:7d:f1:29:9c:4a:14:90:9f:24:57:d7:d0:6f:54:77:37:
03:f3:6a:38:5a:2e:09:83:54:46:b6:bf:5e:b3:a2:38:f3:ed:
62:3a:3d:17:c0:b1:03:28:6f:1d:73:02:ed:61:e2:48:37:a0:
2e:51:96:f4:4b:1f:a9:e9:03:39:6a:dd:e1:4f:10:12:60:68:
4a:3b:77:a7:16:25:77:85:57:8d:04:68:aa:53:40:6a:86:83:
2e:40:f1:d4:a9:e2:86:f2:02:cb:73:31:0e:d0:e5:6f:81:21:
5a:52:dc:81:35:db:f3:04:ae:1d:ae:39:1d:7d:a3:f7:84:e1:
da:6b:fc:d4:b8:dc:e2:56:fd:7f:9a:d8:90:d9:83:71:db:6c:
6c:1a:31:fa:17:60:a7:89:74:cf:2e:d6:75:36:72:4d:75:5b:
54:5b:33:cb:a6:db:45:8d:78:ea:6a:fb:b1:ea:46:a7:60:7e:
6d:4f:27:1c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZzoPS59MUHxJG6/CPSDTxYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjYwMzEzMTcyNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWFlNGJhYjEwYjg1MDM3OTRmNzgwNTc3NDUxODZhMzA4OTM5M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQkSY8mp+K/LZP3Nmy8UK5pAZYVL
tKVaO4b9dwkwiayVEtB5qpnVZjsOspJO4T/viNlpmZx4mSHPOL/aB4k/H/v+UWx2
pLrwooBm6XmZw8RHuC5uxUl0Ab47mM53Ukb+qBnLbKW7XODIP4AYYEcJMVkCFT2a
uzQ/S/CIpG3xSXOHf1+GHI6wTq0rkA4QwgRbA6jeW8UOpoK0YbVqxPMjFEWb/UPh
jr2oGsePsS/r0iVh2f/U3vc5KzBf1nl8d73OZb2FdAlclX494kOkoI7y9qp5FCCL
AYWJbUpa4PHEU/hPLFC7n8lY2lk/WzFdWqgcVV4cX+gHHMQB5BklaADRTQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFCGuS6sQuFA3lPeAV3RRhqMIk5PkMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvSWE1THF4QzRVRGVVOTRCWGRGR0dvd2lUay1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBABnTFUD
BANnTFADBAJ0zlwDBAKQMAgDBAHLvegwDQQCAAIwBwMFAyoPZwAwDQYJKoZIhvcN
AQELBQADggEBACKRXIfpwq6v+TXmoe25THRlbGTkTAB8iqLzmALW+tFJ83O6pjB3
TSjodx9QhzzyeDDl/GDQUaX/833t66g/0/8Vlx6gegKZqb1effEpnEoUkJ8kV9fQ
b1R3NwPzajhaLgmDVEa2v16zojjz7WI6PRfAsQMobx1zAu1h4kg3oC5RlvRLH6np
Azlq3eFPEBJgaEo7d6cWJXeFV40EaKpTQGqGgy5A8dSp4obyAstzMQ7Q5W+BIVpS
3IE12/MErh2uOR19o/eE4dpr/NS43OJW/X+a2JDZg3HbbGwaMfoXYKeJdM8u1nU2
ck11W1RbM8um20WNeOpq+7HqRqdgfm1PJxw=
-----END CERTIFICATE-----
Generated at Sat Mar 21 14:30:02 2026 by rpki-client