Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/putwklBPnj1JGOLLxL48FbAvJQo.roa
File: putwklBPnj1JGOLLxL48FbAvJQo.roa (raw, json)
Hash identifier: 53SiIIxG8DR88drYfVMSXZ7IeFn+dKd25D+p3O1kcto=
Subject key identifier: A6:EB:70:92:50:4F:9E:3D:49:18:E2:CB:C4:BE:3C:15:B0:2F:25:0A
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01A02587207475B8A801835C05B82C6B4390
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/putwklBPnj1JGOLLxL48FbAvJQo.roa
Signing time: Fri 21 Aug 2026 18:13:27 +0000
ROA not before: Fri 21 Aug 2026 18:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 103.213.249.0/24 maxlen: 24
103.213.251.0/24 maxlen: 24
116.206.95.0/24 maxlen: 24
144.48.11.0/24 maxlen: 24
195.78.48.0/24 maxlen: 24
203.189.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:87:20:74:75:b8:a8:01:83:5c:05:b8:2c:6b:43:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Aug 21 18:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6eb7092504f9e3d4918e2cbc4be3c15b02f250a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:b8:d7:7f:77:d7:0b:40:f6:e4:d0:51:74:
16:c8:43:0a:c8:9d:a0:6c:61:ea:3e:97:98:bc:11:
7a:04:fd:17:24:7c:fd:17:78:01:c4:5d:bb:32:91:
ce:50:80:f0:bf:49:de:1e:c1:0e:40:b7:e2:a3:5d:
71:fd:35:2b:de:cb:e0:1c:7c:45:31:47:13:c1:79:
4a:2e:4c:82:f7:91:0f:9b:8f:88:8f:77:7d:17:e9:
21:e9:03:51:9a:a1:97:b6:4d:1f:64:5e:b9:69:2a:
fb:63:69:27:e1:93:1d:f2:a2:2d:14:6b:90:94:cd:
2f:01:51:61:02:47:64:cb:33:78:6a:86:5a:b0:33:
dc:5a:16:ab:3b:ae:3e:68:20:ad:ec:fc:20:e0:b4:
e9:f8:2a:e6:8a:b9:0d:e9:c2:2f:4a:81:42:f5:aa:
e0:74:86:63:5f:4e:3d:c2:c2:1b:5a:cb:a6:b9:b1:
df:c5:f7:c8:bf:36:be:07:03:6d:5d:c4:c6:85:c4:
84:3b:8a:81:dc:6c:4a:03:75:a9:27:31:03:43:04:
bf:b5:79:61:70:33:63:0f:7a:3f:73:7d:3f:0b:ee:
d6:c7:d9:3c:06:ff:67:5b:8c:41:96:59:24:88:cd:
3d:0e:92:2e:12:aa:97:39:3b:50:d4:d6:0e:66:db:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EB:70:92:50:4F:9E:3D:49:18:E2:CB:C4:BE:3C:15:B0:2F:25:0A
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/putwklBPnj1JGOLLxL48FbAvJQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.249.0/24
103.213.251.0/24
116.206.95.0/24
144.48.11.0/24
195.78.48.0/24
203.189.233.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f9:82:4f:9b:2a:cc:27:2c:a5:5e:8d:01:80:b9:46:63:de:
3b:12:7f:3a:0f:fe:51:b2:01:40:ad:11:3d:0f:f6:8c:f1:b9:
3d:2b:20:ea:e3:ef:58:df:99:1f:44:6d:71:b5:d2:8b:6a:0d:
e4:8b:c6:2f:f5:ef:69:e6:1c:2b:e5:84:89:22:0f:d5:53:3d:
60:8c:18:94:55:05:c4:7c:21:ac:c8:19:69:50:58:1b:18:92:
4d:3b:1f:94:55:94:20:d6:4f:d0:48:a2:f8:e8:92:04:58:8d:
77:65:80:ba:18:a4:3f:05:30:f2:31:e9:d9:08:4b:60:51:90:
ac:29:a3:a4:0f:43:5f:af:5a:e7:06:d6:2d:bd:61:19:c2:03:
1b:55:ac:c7:34:a8:de:1c:8d:0f:00:44:83:a3:16:df:8b:15:
59:6e:47:2c:0b:73:9c:ad:70:c8:cb:8f:0b:94:7b:45:d5:5a:
e0:86:aa:b3:5b:20:34:05:46:62:ad:b2:79:71:f6:ae:a1:0c:
2a:2f:78:35:4c:1d:6e:e3:28:f4:d7:2b:ca:61:20:87:e5:f3:
c0:62:88:99:2f:cb:15:93:54:2d:11:2d:6a:32:77:8a:b8:40:
79:c4:12:6a:82:c1:c4:80:2a:17:53:33:96:fe:02:b0:07:e4:
e6:50:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 18:45:37 2026 by rpki-client