Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/aOumDGTQxWZ8hJvNXE1O6jKUHpE.roa
File: aOumDGTQxWZ8hJvNXE1O6jKUHpE.roa (raw, json)
Hash identifier: vCVlUFC6bv1vAp54J7Z4/dZxnu8HsSnhut8xqiafmc8=
Subject key identifier: 68:EB:A6:0C:64:D0:C5:66:7C:84:9B:CD:5C:4D:4E:EA:32:94:1E:91
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019FAD3FE7D2DB7B85D1D95873B2C2951BF1
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/aOumDGTQxWZ8hJvNXE1O6jKUHpE.roa
Signing time: Wed 29 Jul 2026 09:41:14 +0000
ROA not before: Wed 29 Jul 2026 09:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138968
IP address blocks: 103.24.204.0/22 maxlen: 22
103.76.85.0/24 maxlen: 24
103.100.156.0/24 maxlen: 24
103.100.157.0/24 maxlen: 24
103.137.212.0/22 maxlen: 22
103.200.30.0/23 maxlen: 23
103.212.33.0/24 maxlen: 24
103.212.34.0/23 maxlen: 23
103.213.248.0/23 maxlen: 23
116.206.92.0/22 maxlen: 24
144.48.8.0/22 maxlen: 24
203.189.232.0/23 maxlen: 24
203.189.234.0/23 maxlen: 24
203.189.234.0/24 maxlen: 24
2a0f:6700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:3f:e7:d2:db:7b:85:d1:d9:58:73:b2:c2:95:1b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 29 09:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68eba60c64d0c5667c849bcd5c4d4eea32941e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:ab:82:16:55:ee:82:0c:d8:5b:c2:20:00:
cf:77:1c:f3:b1:c6:1f:79:5f:11:8d:02:41:7c:8c:
b6:86:f2:06:1e:6c:20:04:d2:51:bd:2b:67:d9:44:
b6:a6:b7:af:89:e7:1e:49:e9:46:a7:2a:28:1f:17:
9a:df:27:71:f0:48:97:56:0f:ea:23:95:9d:1b:c6:
73:4f:8b:73:ab:f9:78:d7:9b:ef:5d:d2:85:a3:f4:
4c:53:57:d3:95:b0:08:48:c0:10:74:03:ce:a2:f3:
6c:0f:d7:ce:1c:96:59:12:c5:0c:94:f1:ba:4a:be:
2b:76:30:a4:ef:4c:92:56:47:74:c5:4c:4f:e0:bb:
25:ce:a7:8f:7e:06:fd:51:de:e7:7b:67:c6:8f:ac:
82:c0:5b:38:0d:07:63:1f:8c:7e:20:86:97:1e:47:
02:5d:fd:a4:25:ee:6c:27:f6:1f:6b:cc:8f:f7:e6:
56:33:7b:3d:f6:49:f1:c2:79:00:09:2b:e7:b3:d1:
28:71:28:57:f0:c0:a7:82:e7:20:34:8f:ad:9b:16:
c2:f2:f1:8d:15:0a:1e:6d:c8:fb:78:4a:ca:10:2d:
ff:a4:f6:4b:29:de:e8:38:e8:c7:35:98:42:fe:32:
5d:84:33:25:6e:01:cd:ea:15:ce:ae:e9:66:4d:a3:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:A6:0C:64:D0:C5:66:7C:84:9B:CD:5C:4D:4E:EA:32:94:1E:91
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/aOumDGTQxWZ8hJvNXE1O6jKUHpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.204.0/22
103.76.85.0/24
103.100.156.0/23
103.137.212.0/22
103.200.30.0/23
103.212.33.0-103.212.35.255
103.213.248.0/23
116.206.92.0/22
144.48.8.0/22
203.189.232.0/22
IPv6:
2a0f:6700::/29
Signature Algorithm: sha256WithRSAEncryption
aa:2c:75:73:ef:b9:34:42:f6:35:d4:f9:32:9f:d1:9d:9d:0a:
35:2a:8d:c8:2f:5d:f0:8c:e3:c5:a1:19:44:a7:17:24:9b:3e:
fd:9e:45:79:6e:c3:be:a0:13:15:0a:b7:5c:e6:68:0c:0b:5f:
dc:c4:a6:5b:7f:ba:4c:b7:39:8b:7c:c6:c8:5e:50:e3:68:a6:
0e:e2:ef:4a:ad:71:2c:1b:b5:1b:08:00:1b:86:25:1d:37:0b:
53:45:b2:83:f8:b3:eb:98:5b:e2:47:85:41:42:5c:6e:48:6d:
66:1e:a1:fa:4f:be:d9:a3:33:28:2a:d1:72:a6:a2:f2:19:9b:
b8:54:12:19:8b:b4:f6:49:50:ff:90:34:08:e0:45:76:7a:38:
86:24:e2:56:1b:11:68:f0:1d:ec:99:d7:8e:6a:9f:dd:41:38:
cc:12:4d:79:a1:73:87:94:03:7a:33:86:96:30:4e:bb:f7:cb:
e5:99:24:92:bb:3f:73:39:42:d4:d0:64:34:01:bc:e7:3f:71:
6a:81:76:81:67:22:69:6d:75:56:91:3a:0f:37:cf:db:68:eb:
2a:18:5c:df:04:00:19:97:9d:36:4d:38:57:cc:23:d2:ca:27:
2b:8a:5f:40:f6:d1:c7:ff:19:12:b6:3c:3d:a9:89:b0:89:fe:
42:8b:df:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 12:00:24 2026 by rpki-client