Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa
File: Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa (raw, json)
Hash identifier: cLm3e28GZktVy8Z4+oH4LT/NSGscOWAbP/gVnhYJ0do=
Subject key identifier: 22:4F:32:19:E0:4D:9A:F9:26:EF:B3:A8:ED:53:A7:F1:BA:02:E1:4E
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01A042E79A0EABFBB22BDEECC6E22D52A218
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa
Signing time: Thu 27 Aug 2026 11:07:49 +0000
ROA not before: Thu 27 Aug 2026 11:07:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197860
IP address blocks: 103.76.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:e7:9a:0e:ab:fb:b2:2b:de:ec:c6:e2:2d:52:a2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Aug 27 11:07:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=224f3219e04d9af926efb3a8ed53a7f1ba02e14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:a0:13:48:ca:ea:b3:e0:a3:28:37:f1:9e:
38:5a:a8:53:6e:e1:37:39:5e:a0:1a:8b:b5:e6:58:
11:f5:79:44:81:72:87:69:4b:61:c6:81:4d:7c:4f:
e4:92:9d:b4:f7:f0:99:0b:fa:64:97:9f:25:8b:1a:
f2:70:8e:ba:e4:17:c7:a5:a4:bc:4e:b8:d1:07:8f:
b0:69:0b:75:ad:b4:b3:b6:78:d3:e7:13:b9:77:13:
86:82:c9:ee:2d:b1:5f:c5:68:9b:c8:0f:f7:61:69:
52:11:ea:42:06:e8:66:4f:11:b7:3d:8f:ec:48:48:
58:cf:1e:1d:1f:df:8b:0f:b1:05:bd:56:86:d7:c0:
89:bb:56:81:27:2c:85:9f:48:8d:28:71:34:2c:df:
87:e4:e8:b2:6c:7d:22:16:74:a2:18:92:7a:21:0f:
67:28:d9:6b:50:76:8d:77:1f:89:24:35:b9:c0:91:
9b:f7:c7:36:48:21:1c:d4:dc:06:fe:52:04:f9:12:
04:c9:0b:3a:40:2c:ee:86:5f:24:5d:9e:c1:c9:05:
4c:69:e2:ff:35:3b:3b:45:8d:7e:35:bc:02:32:d1:
25:5a:57:60:e8:6c:01:57:9a:9a:1d:45:f6:1c:80:
de:d1:c8:e6:fa:92:b0:1f:92:b5:5d:95:a7:05:2c:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:32:19:E0:4D:9A:F9:26:EF:B3:A8:ED:53:A7:F1:BA:02:E1:4E
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.86.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cc:a7:72:e3:68:7a:31:ce:ec:1a:9f:9d:21:10:94:eb:39:
2a:14:d2:0a:44:a8:36:64:0e:0e:40:96:3d:60:43:27:cd:30:
fb:5b:28:8a:f0:6a:63:bc:34:f5:74:de:0c:a5:83:b6:d9:b0:
63:fc:7e:9f:5c:26:81:1c:6d:55:91:45:17:6c:63:e3:3e:a2:
99:b6:4e:ed:9b:ba:63:be:eb:01:35:0e:5a:0f:e2:a9:e0:fb:
60:dd:83:5f:2f:9f:67:e7:a7:51:97:90:ab:34:4f:38:6d:30:
36:af:45:36:00:fc:77:f5:66:6a:fc:04:92:44:51:df:21:09:
44:b6:49:78:87:e9:45:ca:12:37:a4:ab:70:49:13:2a:0a:96:
91:5f:88:c2:7e:08:c9:ab:48:e1:b7:22:af:e9:67:21:44:24:
24:00:48:a8:3c:2d:26:be:56:97:bd:b6:94:c0:49:ee:d0:e1:
0f:15:de:db:ad:98:50:57:a1:91:35:f6:f9:88:dc:ba:bb:e6:
1c:c7:f2:27:2f:dc:ba:1f:c4:13:9a:37:12:56:1d:00:23:aa:
1b:ed:1d:57:49:a3:50:bb:5d:4e:83:1a:3e:f2:ba:48:39:e1:
d2:22:ea:da:af:dc:fb:07:90:88:6e:25:09:a0:9f:da:df:9b:
61:c7:df:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBC55oOq/uyK97sxuItUqIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjYwODI3MTEwNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjRmMzIxOWUwNGQ5YWY5MjZlZmIzYThlZDUzYTdmMWJhMDJlMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyigE0jK6rPgoyg38Z44WqhTbuE3
OV6gGou15lgR9XlEgXKHaUthxoFNfE/kkp209/CZC/pkl58lixrycI665BfHpaS8
TrjRB4+waQt1rbSztnjT5xO5dxOGgsnuLbFfxWibyA/3YWlSEepCBuhmTxG3PY/s
SEhYzx4dH9+LD7EFvVaG18CJu1aBJyyFn0iNKHE0LN+H5OiybH0iFnSiGJJ6IQ9n
KNlrUHaNdx+JJDW5wJGb98c2SCEc1NwG/lIE+RIEyQs6QCzuhl8kXZ7ByQVMaeL/
NTs7RY1+NbwCMtElWldg6GwBV5qaHUX2HIDe0cjm+pKwH5K1XZWnBSz02wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCJPMhngTZr5Ju+zqO1Tp/G6AuFOMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvSWs4eUdlQk5tdmttNzdPbzdWT244Ym9DNFU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0xWMA0G
CSqGSIb3DQEBCwUAA4IBAQBZzKdy42h6Mc7sGp+dIRCU6zkqFNIKRKg2ZA4OQJY9
YEMnzTD7WyiK8GpjvDT1dN4MpYO22bBj/H6fXCaBHG1VkUUXbGPjPqKZtk7tm7pj
vusBNQ5aD+Kp4Ptg3YNfL59n56dRl5CrNE84bTA2r0U2APx39WZq/ASSRFHfIQlE
tkl4h+lFyhI3pKtwSRMqCpaRX4jCfgjJq0jhtyKv6WchRCQkAEioPC0mvlaXvbaU
wEnu0OEPFd7brZhQV6GRNfb5iNy6u+Ycx/InL9y6H8QTmjcSVh0AI6ob7R1XSaNQ
u11Ogxo+8rpIOeHSIurar9z7B5CIbiUJoJ/a35thx99k
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:40 2026 by rpki-client