Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/dyRkPw_Wgnkcsg-KlHLl58bkM3I.roa
File: dyRkPw_Wgnkcsg-KlHLl58bkM3I.roa (raw, json)
Hash identifier: P1/S907NZKJYyVb3ZIocqBJrz96aUfXN02sqKPQRYNA=
Subject key identifier: 77:24:64:3F:0F:D6:82:79:1C:B2:0F:8A:94:72:E5:E7:C6:E4:33:72
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01A028E84CC10D69231EAA3BD90F5BC3F218
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/dyRkPw_Wgnkcsg-KlHLl58bkM3I.roa
Signing time: Sat 22 Aug 2026 09:58:27 +0000
ROA not before: Sat 22 Aug 2026 09:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138968
IP address blocks: 103.24.204.0/22 maxlen: 22
103.76.85.0/24 maxlen: 24
103.100.156.0/24 maxlen: 24
103.100.157.0/24 maxlen: 24
103.137.212.0/22 maxlen: 22
103.200.30.0/23 maxlen: 23
103.212.33.0/24 maxlen: 24
103.212.34.0/23 maxlen: 23
103.213.248.0/23 maxlen: 23
116.206.92.0/22 maxlen: 24
144.48.9.0/24 maxlen: 24
203.189.232.0/23 maxlen: 24
203.189.234.0/23 maxlen: 24
203.189.234.0/24 maxlen: 24
2a0f:6700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:e8:4c:c1:0d:69:23:1e:aa:3b:d9:0f:5b:c3:f2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Aug 22 09:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7724643f0fd682791cb20f8a9472e5e7c6e43372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:7b:e0:4e:43:5c:b2:fc:db:26:88:62:c3:
f6:db:5d:2f:36:f9:e6:f1:9d:f0:78:86:d5:3f:e0:
0d:84:3a:47:b8:5f:28:5a:9b:9f:35:95:71:45:f3:
db:d0:90:42:0e:62:77:6b:5c:6b:45:21:88:3c:2e:
c7:63:8c:d8:24:a3:37:86:33:35:ef:b9:05:99:a7:
9a:56:d4:78:3f:95:aa:6a:46:3b:42:95:9c:2b:29:
6e:36:8b:99:a6:89:42:40:7d:1c:e6:61:48:08:f0:
8f:d4:49:5b:17:ea:7d:cf:f3:99:27:1a:e3:e5:65:
37:d4:01:6b:a5:9c:df:dc:fd:a9:6e:bb:86:ed:f3:
36:6f:54:d6:57:3d:91:55:45:d9:7b:05:81:4a:0c:
c1:a0:15:d3:5d:e3:a7:9a:2c:89:64:6f:58:3c:3a:
a7:0e:ed:c4:de:f9:a7:19:69:8a:7e:3b:4e:65:ed:
53:51:b2:f7:80:65:df:c8:7c:d8:9c:6c:82:9a:ed:
9b:fe:9c:78:6c:2e:a8:bc:7c:d5:53:56:74:3e:41:
d2:3e:f2:92:01:bc:38:d5:69:6d:3e:e8:ef:e0:d4:
34:65:1f:55:b6:26:73:58:28:aa:47:9a:65:5f:33:
f1:00:4b:0f:5d:a9:68:38:54:96:27:1e:e6:f4:36:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:24:64:3F:0F:D6:82:79:1C:B2:0F:8A:94:72:E5:E7:C6:E4:33:72
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/dyRkPw_Wgnkcsg-KlHLl58bkM3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.204.0/22
103.76.85.0/24
103.100.156.0/23
103.137.212.0/22
103.200.30.0/23
103.212.33.0-103.212.35.255
103.213.248.0/23
116.206.92.0/22
144.48.9.0/24
203.189.232.0/22
IPv6:
2a0f:6700::/29
Signature Algorithm: sha256WithRSAEncryption
3e:2a:56:53:a9:93:ff:50:6e:ac:d2:0a:65:76:32:1f:fe:12:
2a:dc:b9:9a:6a:f8:77:4f:af:d6:f8:07:52:60:a9:67:3d:60:
66:88:8d:2a:0a:67:b9:f6:ef:23:d5:2c:50:90:b9:ed:5c:38:
b1:7b:e7:e2:76:04:fb:fb:d1:06:1d:96:de:22:a4:dc:0a:5c:
6c:26:08:86:29:6e:22:2f:82:29:32:43:50:16:b3:48:92:29:
51:5c:0e:68:e4:87:16:42:b1:17:1e:bc:19:39:f4:c1:15:2a:
2e:0b:3a:e3:94:66:26:a2:30:cf:a7:bf:17:c1:89:c2:db:8a:
26:14:65:96:59:75:cd:26:86:23:d4:03:72:b0:bc:72:05:34:
b6:25:b1:4d:56:8d:3f:65:b0:b9:36:63:47:72:26:0b:e9:10:
67:20:2c:20:1d:06:78:e8:3b:4a:5e:e7:fb:ba:32:67:ff:74:
b9:33:3e:7c:95:4d:84:d9:e5:03:e4:4c:3a:8e:ee:0e:5f:c8:
42:f3:0a:c8:e7:74:3b:2b:63:ff:c3:11:de:86:c5:c4:a2:78:
ed:c2:b6:d7:70:66:b2:48:05:c1:08:21:96:29:04:3c:44:13:
29:5a:73:33:38:1e:d0:24:68:f3:3e:d2:a9:9d:56:0e:76:57:
ef:a2:6f:3a
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAaAo6EzBDWkjHqo72Q9bw/IYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjYwODIyMDk1ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzI0NjQzZjBmZDY4Mjc5MWNiMjBmOGE5NDcyZTVlN2M2ZTQzMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2N74E5DXLL82yaIYsP2210vNvnm
8Z3weIbVP+ANhDpHuF8oWpufNZVxRfPb0JBCDmJ3a1xrRSGIPC7HY4zYJKM3hjM1
77kFmaeaVtR4P5WqakY7QpWcKyluNouZpolCQH0c5mFICPCP1ElbF+p9z/OZJxrj
5WU31AFrpZzf3P2pbruG7fM2b1TWVz2RVUXZewWBSgzBoBXTXeOnmiyJZG9YPDqn
Du3E3vmnGWmKfjtOZe1TUbL3gGXfyHzYnGyCmu2b/px4bC6ovHzVU1Z0PkHSPvKS
Abw41WltPujv4NQ0ZR9VtiZzWCiqR5plXzPxAEsPXaloOFSWJx7m9DZMzQIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFHckZD8P1oJ5HLIPipRy5efG5DNyMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvZHlSa1B3X1dnbmtjc2ctS2xITGw1OGJrTTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQCZxjMAwQA
Z0xVAwQBZ2ScAwQCZ4nUAwQBZ8geMAwDBABn1CEDBAJn1CADBAFn1fgDBAJ0zlwD
BACQMAkDBALLvegwDQQCAAIwBwMFAyoPZwAwDQYJKoZIhvcNAQELBQADggEBAD4q
VlOpk/9QbqzSCmV2Mh/+EircuZpq+HdPr9b4B1JgqWc9YGaIjSoKZ7n27yPVLFCQ
ue1cOLF75+J2BPv70QYdlt4ipNwKXGwmCIYpbiIvgikyQ1AWs0iSKVFcDmjkhxZC
sRcevBk59MEVKi4LOuOUZiaiMM+nvxfBicLbiiYUZZZZdc0mhiPUA3KwvHIFNLYl
sU1WjT9lsLk2Y0dyJgvpEGcgLCAdBnjoO0pe5/u6Mmf/dLkzPnyVTYTZ5QPkTDqO
7g5fyELzCsjndDsrY//DEd6GxcSieO3CttdwZrJIBcEIIZYpBDxEEylaczM4HtAk
aPM+0qmdVg52V++ibzo=
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:43:06 2026 by rpki-client