Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nSUmZB0jg43RpHkYWlfRXaPrn8c.roa
File: nSUmZB0jg43RpHkYWlfRXaPrn8c.roa (raw, json)
Hash identifier: RpAQ+Ocw+6QgtTuEKxPfy46Zgay038fVhuADeM4LOzQ=
Subject key identifier: 9D:25:26:64:1D:23:83:8D:D1:A4:79:18:5A:57:D1:5D:A3:EB:9F:C7
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01A0259047C5D5701328D62102E46A1AB352
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nSUmZB0jg43RpHkYWlfRXaPrn8c.roa
Signing time: Fri 21 Aug 2026 18:23:27 +0000
ROA not before: Fri 21 Aug 2026 18:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55933
IP address blocks: 103.76.84.0/23 maxlen: 23
103.76.84.0/24 maxlen: 24
103.100.158.0/23 maxlen: 23
103.100.159.0/24 maxlen: 24
103.212.32.0/23 maxlen: 23
103.212.32.0/24 maxlen: 24
116.206.95.0/24 maxlen: 24
144.48.8.0/23 maxlen: 23
144.48.8.0/24 maxlen: 24
203.189.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:90:47:c5:d5:70:13:28:d6:21:02:e4:6a:1a:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Aug 21 18:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d2526641d23838dd1a479185a57d15da3eb9fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4b:61:35:9f:62:80:1f:e7:80:5e:36:1f:92:
43:5f:38:28:92:88:d8:8d:2b:07:e5:5b:04:31:68:
74:55:de:80:b2:c5:2f:77:52:f4:e6:18:30:b0:68:
01:d8:ff:0a:15:f0:5c:17:13:86:9d:7f:f0:a8:90:
76:4b:2a:e5:d5:9b:61:f6:e6:6c:cb:15:b9:e7:93:
4f:76:e1:3d:2b:44:ef:c3:89:fc:31:9c:b5:9b:d8:
d0:94:17:a7:48:48:85:c8:e7:34:c8:45:64:54:12:
67:cc:c7:7b:d1:5b:09:52:59:50:94:b5:6f:07:42:
20:f5:06:e7:e9:3e:65:9d:71:0f:f9:81:f1:01:3e:
fc:08:69:91:a6:ac:04:70:eb:63:18:df:42:6d:47:
b0:ac:e5:5c:db:e9:de:a5:4e:99:d2:32:f0:81:11:
74:3c:f4:fc:04:c0:41:41:92:4f:ad:90:df:1a:be:
ea:58:0c:78:ec:ce:1b:12:0d:2f:99:11:a3:4a:32:
43:e5:46:0e:28:7b:e2:b7:7e:b9:6a:82:bc:a2:30:
63:0a:b2:f2:8b:77:e4:14:c2:bd:05:93:bf:cf:12:
dc:fc:ef:7e:ac:e0:fd:53:b9:d9:fe:f2:85:dd:ef:
e1:76:2a:27:02:cb:95:9c:c6:1e:e9:a8:54:f9:bb:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:26:64:1D:23:83:8D:D1:A4:79:18:5A:57:D1:5D:A3:EB:9F:C7
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nSUmZB0jg43RpHkYWlfRXaPrn8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.84.0/23
103.100.158.0/23
103.212.32.0/23
116.206.95.0/24
144.48.8.0/23
203.189.234.0/23
Signature Algorithm: sha256WithRSAEncryption
41:6d:26:48:59:a9:a0:db:4b:a1:2b:e2:71:51:86:ae:ed:22:
42:f6:02:27:fe:77:3a:96:fa:dc:72:a1:7c:c0:a8:b0:41:39:
a7:e0:a9:0c:28:2e:6c:16:b2:ed:54:04:97:84:7c:eb:ef:b2:
17:85:93:4b:be:6e:3a:ce:49:24:97:65:4c:65:00:c4:0e:bb:
36:3e:92:8b:bd:db:94:d7:71:bc:fe:23:44:fe:e9:a4:19:27:
9f:5d:8b:63:ef:78:4b:32:1a:78:e3:43:8c:24:cf:1e:b9:5d:
e2:0e:0c:72:32:92:2e:b9:da:d1:44:a3:ac:94:76:2b:d3:ea:
ac:80:8b:ea:d9:c6:7e:cc:23:3f:32:75:2c:58:c8:64:ec:53:
93:62:2a:08:84:7c:f2:64:a4:8c:62:71:eb:06:07:3d:d1:0a:
35:87:b0:3a:19:32:c6:3b:38:79:a7:99:0d:af:7e:e3:6b:e2:
32:e7:40:82:96:14:c3:9c:81:63:28:78:8d:88:1e:01:c3:9f:
8f:40:5a:b3:81:5c:0c:05:db:8a:fb:39:5d:53:e2:4c:df:52:
30:b4:27:e3:25:84:1e:53:ff:3c:f4:dc:36:f7:ed:1f:73:8e:
f3:8b:6f:cb:6c:17:df:61:c1:6e:a1:d4:53:bc:27:83:e9:bb:
1e:99:39:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:39:52 2026 by rpki-client