Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nweMMXjk-LzNxzx_8cOQtiUby1M.roa
File: nweMMXjk-LzNxzx_8cOQtiUby1M.roa (raw, json)
Hash identifier: pe2/kfRL/sPr+c/LKdqRKmdAqvstf2be3koPjdv34F0=
Subject key identifier: 9F:07:8C:31:78:E4:F8:BC:CD:C7:3C:7F:F1:C3:90:B6:25:1B:CB:53
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01A1351A7FACB704C1A23190597E90AEC2B9
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nweMMXjk-LzNxzx_8cOQtiUby1M.roa
Signing time: Tue 13 Oct 2026 11:51:31 +0000
ROA not before: Tue 13 Oct 2026 11:51:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138968
IP address blocks: 103.24.204.0/22 maxlen: 22
103.76.85.0/24 maxlen: 24
103.100.156.0/24 maxlen: 24
103.100.157.0/24 maxlen: 24
103.137.212.0/22 maxlen: 22
103.200.30.0/23 maxlen: 23
103.212.33.0/24 maxlen: 24
103.212.34.0/23 maxlen: 23
103.213.248.0/24 maxlen: 24
103.213.250.0/24 maxlen: 24
116.206.92.0/22 maxlen: 24
144.48.9.0/24 maxlen: 24
203.189.232.0/23 maxlen: 24
203.189.234.0/23 maxlen: 24
203.189.234.0/24 maxlen: 24
2a0f:6700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:1a:7f:ac:b7:04:c1:a2:31:90:59:7e:90:ae:c2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Oct 13 11:51:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f078c3178e4f8bccdc73c7ff1c390b6251bcb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:eb:f2:d5:e5:c1:9b:cf:8c:94:0b:2e:4c:
16:59:7c:71:71:73:1a:e0:f2:c6:54:a4:41:97:7f:
fd:69:69:61:20:a8:69:b1:ef:c7:c8:c0:b0:c3:01:
5e:05:ce:b4:16:b3:84:14:24:03:ef:30:95:22:5a:
62:96:55:4e:b1:d0:cd:41:3f:ad:4d:26:28:51:fb:
4f:3a:b5:45:32:cf:31:60:ac:44:a7:4e:5a:f2:2c:
8d:98:dd:c4:20:e0:bd:df:67:74:aa:ac:a9:15:bb:
0b:57:1e:c9:1a:3d:cb:7e:a1:a9:78:5a:12:ba:ab:
29:3e:b9:59:cd:0d:d4:7c:5b:8b:32:df:de:90:e7:
51:c0:f0:c8:3d:b9:26:1a:ec:fc:c9:88:f9:78:b0:
6d:8e:30:6f:8d:7a:41:ef:24:4d:cf:1b:40:e6:bf:
69:46:7a:e6:82:a4:7c:0e:99:b9:e1:bf:ac:e8:ca:
2a:fa:75:75:0a:70:24:9e:63:d2:97:ed:b1:e3:b7:
34:52:5d:4f:77:f1:77:46:fa:19:b0:15:80:9b:26:
ed:42:3f:16:d6:b6:fa:29:3e:90:fd:92:5c:3e:ea:
31:b5:a5:26:0c:35:ee:6f:21:93:b6:a0:d9:1d:67:
37:0b:56:55:7d:52:aa:f8:0e:5c:06:02:6d:95:86:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:8C:31:78:E4:F8:BC:CD:C7:3C:7F:F1:C3:90:B6:25:1B:CB:53
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nweMMXjk-LzNxzx_8cOQtiUby1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.204.0/22
103.76.85.0/24
103.100.156.0/23
103.137.212.0/22
103.200.30.0/23
103.212.33.0-103.212.35.255
103.213.248.0/24
103.213.250.0/24
116.206.92.0/22
144.48.9.0/24
203.189.232.0/22
IPv6:
2a0f:6700::/29
Signature Algorithm: sha256WithRSAEncryption
b6:b4:c8:1c:58:3a:a5:26:09:73:47:23:56:84:60:b3:33:9e:
97:36:26:0f:dd:5d:b0:27:67:35:de:7a:d5:da:6e:f4:82:d6:
4e:60:e7:b8:e8:6b:1b:6d:9b:19:61:65:62:06:5b:a5:63:ef:
d0:bb:14:0e:c3:7e:c3:6a:62:65:0b:d8:8a:35:cd:62:38:2f:
0c:5b:14:1d:10:2c:28:1b:0d:93:19:6e:f4:65:c2:44:08:ba:
7a:0a:7a:65:e9:5a:f4:94:92:61:0d:1e:d2:d8:1f:04:6c:6a:
ef:4b:5e:0a:55:fe:81:1a:e7:ce:c8:18:50:e3:be:60:6f:81:
70:6c:42:01:4b:4f:be:e3:65:87:75:57:06:76:77:eb:30:c2:
11:cc:56:da:ca:c9:b4:db:85:30:45:d0:8f:9d:96:d2:09:83:
e0:1d:8e:ee:a5:11:d2:b9:8b:39:80:5b:ad:01:32:22:21:e1:
37:c8:01:68:7a:59:df:a5:d2:7f:0b:a8:db:aa:40:9b:5a:84:
62:e0:2e:9e:f6:31:40:65:09:65:0d:27:75:6a:bf:6a:15:84:
4e:1f:50:fe:df:92:99:8c:fe:28:ef:bc:ff:88:12:b7:bd:8d:
62:9a:f2:74:28:3d:03:c3:c8:97:f3:4b:eb:53:15:5c:ff:a6:
20:13:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:25 2026 by rpki-client