Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/dVmg3H_69aE6cwaIlYTR97afdPo.roa
File: dVmg3H_69aE6cwaIlYTR97afdPo.roa (raw, json)
Hash identifier: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=
Subject key identifier: 75:59:A0:DC:7F:FA:F5:A1:3A:73:06:88:95:84:D1:F7:B6:9F:74:FA
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019F2C7BE07B7080038CBCC1A920483BD87F
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/dVmg3H_69aE6cwaIlYTR97afdPo.roa
Signing time: Sat 04 Jul 2026 09:35:43 +0000
ROA not before: Sat 04 Jul 2026 09:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2497
IP address blocks: 103.76.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2c:7b:e0:7b:70:80:03:8c:bc:c1:a9:20:48:3b:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 4 09:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7559a0dc7ffaf5a13a7306889584d1f7b69f74fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:65:b0:36:23:24:a0:13:e7:7a:7e:24:d5:
f7:20:5e:db:fd:42:8a:4c:3f:08:0a:38:d3:67:b9:
3f:73:d5:c7:1d:0b:53:93:9d:ec:34:bc:6f:7b:3d:
48:5e:1a:59:e8:44:59:65:90:e8:6a:7b:95:e5:66:
2a:db:8e:67:df:23:a7:7b:5c:64:30:d6:0a:0c:c3:
13:25:2f:f0:2c:e0:12:0b:bc:5f:ac:91:0c:f1:0c:
e4:12:7b:68:38:54:59:ba:ed:b0:a8:ca:8f:3a:16:
78:5f:52:18:7c:df:b3:53:82:40:46:46:78:75:26:
6a:52:19:80:2e:dd:eb:ce:b3:e4:11:97:10:bd:8e:
d9:75:fc:9a:5e:0e:d8:ef:ca:78:bd:f9:1d:05:a5:
5c:45:6f:fc:a1:a2:f5:65:e0:0b:84:86:09:e9:44:
19:fd:b7:97:75:f8:69:41:e0:51:22:39:3f:63:a1:
51:04:74:f0:a9:ab:bf:6b:40:14:77:18:39:71:43:
80:96:06:37:0c:a9:60:a7:65:8d:9c:8b:62:79:17:
1f:a3:f5:62:27:91:ad:6d:44:89:f5:20:9c:e1:89:
47:b1:47:53:04:79:66:18:f9:81:60:db:94:9f:d7:
8f:ad:21:58:9b:6f:78:81:88:4e:6f:0b:99:21:17:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:A0:DC:7F:FA:F5:A1:3A:73:06:88:95:84:D1:F7:B6:9F:74:FA
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/dVmg3H_69aE6cwaIlYTR97afdPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.87.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ec:7e:5a:02:34:c7:fc:58:e3:71:6e:c9:fc:de:7e:ef:1d:
25:7e:0e:60:3d:03:ea:61:12:fb:5a:18:2f:5d:86:94:f6:2d:
b4:e6:44:ed:ef:54:f3:d2:b2:55:e9:4c:f7:50:d3:c8:e4:ca:
9e:b7:8c:5d:6c:61:40:ad:fe:89:dc:ee:26:90:4b:61:52:3b:
f1:ab:be:93:4d:98:e5:59:04:fc:2e:77:a6:61:c2:65:75:29:
f1:46:cd:fa:70:b3:f0:57:5a:e2:ec:7e:0b:14:77:21:78:86:
58:9f:02:f2:73:ea:46:f5:e2:85:b4:24:c5:10:4b:24:be:a8:
eb:09:74:84:10:0e:9e:8a:70:cb:4c:c7:24:e9:c5:25:bc:c1:
a6:38:48:a3:bb:8d:d9:57:9f:2d:fc:9e:7c:29:6d:9b:8b:b9:
9b:5d:f3:49:1e:9e:6b:fd:c9:de:29:55:ed:9c:a8:70:40:57:
1a:43:f4:05:4a:39:e0:5e:a4:59:61:00:8e:bf:c9:4b:78:e4:
bf:9d:1b:9e:10:23:74:fb:ff:27:21:70:d9:b6:a2:dd:bb:02:
0c:01:5f:55:fa:05:f9:40:5f:9b:9f:ff:63:11:80:bf:12:bb:
82:bc:7d:07:36:17:31:c2:ac:42:27:4b:49:0d:40:fd:38:23:
7f:cf:50:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8se+B7cIADjLzBqSBIO9h/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjYwNzA0MDkzNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTU5YTBkYzdmZmFmNWExM2E3MzA2ODg5NTg0ZDFmN2I2OWY3NGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiRlsDYjJKAT53p+JNX3IF7b/UKK
TD8ICjjTZ7k/c9XHHQtTk53sNLxvez1IXhpZ6ERZZZDoanuV5WYq245n3yOne1xk
MNYKDMMTJS/wLOASC7xfrJEM8QzkEntoOFRZuu2wqMqPOhZ4X1IYfN+zU4JARkZ4
dSZqUhmALt3rzrPkEZcQvY7ZdfyaXg7Y78p4vfkdBaVcRW/8oaL1ZeALhIYJ6UQZ
/beXdfhpQeBRIjk/Y6FRBHTwqau/a0AUdxg5cUOAlgY3DKlgp2WNnItieRcfo/Vi
J5GtbUSJ9SCc4YlHsUdTBHlmGPmBYNuUn9ePrSFYm294gYhObwuZIRdzAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHVZoNx/+vWhOnMGiJWE0fe2n3T6MB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvZFZtZzNIXzY5YUU2Y3dhSWxZVFI5N2FmZFBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0xXMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ7H5aAjTH/FjjcW7J/N5+7x0lfg5gPQPqYRL7Whgv
XYaU9i205kTt71Tz0rJV6Uz3UNPI5Mqet4xdbGFArf6J3O4mkEthUjvxq76TTZjl
WQT8LnemYcJldSnxRs36cLPwV1ri7H4LFHcheIZYnwLyc+pG9eKFtCTFEEskvqjr
CXSEEA6einDLTMck6cUlvMGmOEiju43ZV58t/J58KW2bi7mbXfNJHp5r/cneKVXt
nKhwQFcaQ/QFSjngXqRZYQCOv8lLeOS/nRueECN0+/8nIXDZtqLduwIMAV9V+gX5
QF+bn/9jEYC/EruCvH0HNhcxwqxCJ0tJDUD9OCN/z1Cs
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:58 2026 by rpki-client