Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Tu_T42E3ufkr5EdGed7Q5Y9QfTE.roa
File: Tu_T42E3ufkr5EdGed7Q5Y9QfTE.roa (raw, json)
Hash identifier: G6AYRvUu0pSmXmi05gBtAjztEBx1iYtCbNAeG2Wv4tE=
Subject key identifier: 4E:EF:D3:E3:61:37:B9:F9:2B:E4:47:46:79:DE:D0:E5:8F:50:7D:31
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019FBE43B30EF9D16E400C916057541B1200
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Tu_T42E3ufkr5EdGed7Q5Y9QfTE.roa
Signing time: Sat 01 Aug 2026 16:58:55 +0000
ROA not before: Sat 01 Aug 2026 16:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 103.213.249.0/24 maxlen: 24
103.213.251.0/24 maxlen: 24
116.206.95.0/24 maxlen: 24
195.78.48.0/24 maxlen: 24
203.189.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:43:b3:0e:f9:d1:6e:40:0c:91:60:57:54:1b:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Aug 1 16:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eefd3e36137b9f92be4474679ded0e58f507d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:e3:c0:64:b7:6e:b7:d4:1d:16:24:6c:82:
20:12:b9:16:a7:3b:dc:4f:15:19:54:a5:4b:97:37:
96:15:da:7f:b7:e0:39:60:56:0b:22:66:a1:a5:5b:
b4:61:75:08:1d:db:d7:27:51:82:ff:4e:34:a6:99:
59:12:17:3a:24:87:5f:05:db:e2:37:72:ba:28:19:
46:ec:6c:b9:49:60:7d:0a:d4:c6:95:5b:ff:d7:3a:
9e:98:9e:e9:28:c6:20:6c:33:43:ab:da:cf:13:f1:
95:b1:e8:3c:d7:4d:22:88:9c:aa:b4:2f:40:ca:8e:
56:6d:00:03:58:d4:76:d8:6f:97:e5:65:16:09:24:
66:47:4f:d2:cc:18:69:fe:a4:4c:76:c2:70:6d:62:
b2:4b:e5:1a:93:67:43:3d:bf:75:c7:87:65:9b:2c:
29:ab:7e:f3:c1:3e:02:ed:70:a3:b4:04:bf:dc:56:
83:08:ec:12:8b:51:83:a8:7d:90:c1:88:e2:4c:2b:
fb:e0:2f:62:06:f3:08:07:49:3e:42:00:73:20:9e:
52:04:b8:ef:95:f4:15:e8:12:0a:e8:ac:59:29:b1:
c5:5d:4d:db:e9:4b:66:08:c1:8a:cc:2f:08:c0:15:
d5:78:e7:0d:22:73:9a:f9:8e:48:c0:38:bc:17:d1:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EF:D3:E3:61:37:B9:F9:2B:E4:47:46:79:DE:D0:E5:8F:50:7D:31
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Tu_T42E3ufkr5EdGed7Q5Y9QfTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.249.0/24
103.213.251.0/24
116.206.95.0/24
195.78.48.0/24
203.189.233.0/24
Signature Algorithm: sha256WithRSAEncryption
43:72:ef:b0:3f:99:1b:9e:ab:3d:bc:14:57:22:1a:e6:e4:12:
1f:a8:54:ce:64:b9:98:8f:00:ad:34:1c:37:a2:96:d8:8c:5f:
be:82:ae:ec:c7:89:0e:3a:7c:63:d4:c5:a6:a9:05:c8:b0:a1:
ae:01:29:c0:dc:43:6f:63:06:ae:a5:f4:93:37:be:c2:ee:a3:
6c:95:e1:cc:b0:80:ef:53:31:46:96:47:bc:ea:3a:f8:56:dd:
38:db:70:09:93:d4:fa:24:4b:28:43:9b:1e:cd:2b:cc:41:15:
1d:7c:3d:3c:32:46:90:d7:a2:f2:70:26:4e:09:b3:ef:13:29:
96:07:d6:c4:c9:dc:52:70:92:8d:70:87:a4:e2:5e:a2:1d:38:
4c:37:9e:80:9e:39:96:a5:28:22:0a:9b:3d:86:61:1d:f3:9c:
24:33:51:5b:98:2a:56:2e:d3:c7:fd:eb:89:9c:75:c8:2f:36:
19:45:9d:57:bc:1e:ac:e8:df:68:ba:2e:85:75:42:d0:0d:54:
b2:61:9a:21:09:dd:02:0f:20:1d:bd:12:dd:b3:6f:aa:ba:97:
2e:31:86:5e:76:b0:99:88:2a:7b:31:0d:31:7a:7c:38:db:16:
60:ca:7d:26:9e:00:f4:2c:13:08:5c:e4:57:b7:62:fc:25:d7:
09:fe:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 10:15:04 2026 by rpki-client