Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/XmiRYshUyB2akhlLCuIKj5Mc-zY.roa
File: XmiRYshUyB2akhlLCuIKj5Mc-zY.roa (raw, json)
Hash identifier: 5H0zHiziwXNzgkD5ITdW8jtnCIOr1tqVB5AZu+3gNBk=
Subject key identifier: 5E:68:91:62:C8:54:C8:1D:9A:92:19:4B:0A:E2:0A:8F:93:1C:FB:36
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 01A06C4B166017FFF75BECFC63278432DAEA
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/XmiRYshUyB2akhlLCuIKj5Mc-zY.roa
Signing time: Fri 04 Sep 2026 12:00:55 +0000
ROA not before: Fri 04 Sep 2026 12:00:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 103.69.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:4b:16:60:17:ff:f7:5b:ec:fc:63:27:84:32:da:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Sep 4 12:00:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e689162c854c81d9a92194b0ae20a8f931cfb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:75:bc:90:47:7e:9b:66:9e:5f:dd:dc:58:
c1:0a:0c:ec:61:e9:76:83:84:a6:c1:14:d3:7f:9f:
35:70:ff:2f:fc:82:2e:28:8f:67:f1:db:ac:9b:31:
cc:2f:a1:63:f3:63:49:e9:f0:3b:7d:2b:89:b1:22:
cf:12:c2:80:f1:37:dd:d7:bd:c0:f4:6e:c4:4b:2e:
de:4a:a3:24:f3:29:c1:f5:4a:4c:8d:5a:da:ad:85:
40:e9:73:57:75:5a:16:1f:f4:86:3e:3e:1e:fc:2b:
bd:74:c9:ae:4e:36:3b:ef:e4:dc:dd:fe:1c:7e:25:
33:dc:9b:c1:d2:39:bc:0b:ce:48:a8:b1:19:dd:c8:
8a:a7:27:93:70:9c:a5:a4:13:13:cc:89:c3:29:45:
df:6b:a8:61:fb:2f:23:c6:8f:37:21:84:62:f9:7b:
a0:c8:85:8e:d0:1d:58:4f:ae:b7:a8:f7:cc:86:a6:
cc:9d:ec:6b:8d:c1:43:55:47:82:00:91:1d:e3:8a:
2c:27:b1:5f:8e:1f:ca:ca:cb:c2:bc:58:06:43:da:
5a:ab:a3:85:ad:46:b9:26:bd:81:6a:56:c4:cd:57:
c2:fb:44:d1:79:20:b0:8e:19:d6:0c:97:8d:7e:b5:
29:de:e8:cf:1b:4b:38:f8:1f:ad:56:9f:be:99:1e:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:91:62:C8:54:C8:1D:9A:92:19:4B:0A:E2:0A:8F:93:1C:FB:36
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/XmiRYshUyB2akhlLCuIKj5Mc-zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:72:09:8b:16:b4:3d:77:c3:f6:bb:b5:e2:a5:7a:8b:22:f7:
37:0e:14:8f:37:b1:ee:d8:2e:20:8e:25:c7:6e:29:a1:bb:6a:
c9:f0:ef:83:ee:61:11:3c:5a:75:eb:9c:7c:9e:cd:67:f9:ef:
26:53:55:3b:54:78:95:7e:d9:1f:f6:21:19:f4:41:b8:de:32:
4f:51:98:77:2f:29:8b:b1:24:66:35:e6:d1:e6:7d:e7:67:ca:
6f:ac:f5:fc:0c:78:45:67:77:63:e1:2d:e6:77:80:e3:6e:69:
71:6a:0b:00:33:ae:10:32:71:05:e1:a1:1f:22:67:b3:bc:ed:
09:4b:92:98:31:60:e7:c3:32:84:02:b9:d9:90:75:91:e8:7d:
94:9d:88:f1:2b:21:42:91:ea:37:aa:04:5d:54:60:4e:21:09:
e7:91:3b:ab:c1:fb:76:9d:13:84:e7:1a:74:e9:86:97:f1:86:
56:db:44:f5:90:4c:c9:e9:82:7b:af:0c:0e:8b:14:73:82:a4:
eb:c6:f4:dd:91:58:ca:a0:8e:f6:6a:cc:9f:43:78:aa:cd:3d:
8d:d4:c6:5e:28:b4:fe:36:23:80:a0:42:18:0a:12:26:d5:83:
7f:d0:c8:cd:da:6d:57:2c:86:14:d1:f4:03:94:30:1e:94:93:
d9:97:ca:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBsSxZgF//3W+z8YyeEMtrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4
MzFhOWQwHhcNMjYwOTA0MTIwMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTY4OTE2MmM4NTRjODFkOWE5MjE5NGIwYWUyMGE4ZjkzMWNmYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvd1vJBHfptmnl/d3FjBCgzsYel2
g4SmwRTTf581cP8v/IIuKI9n8dusmzHML6Fj82NJ6fA7fSuJsSLPEsKA8Tfd173A
9G7ESy7eSqMk8ynB9UpMjVrarYVA6XNXdVoWH/SGPj4e/Cu9dMmuTjY77+Tc3f4c
fiUz3JvB0jm8C85IqLEZ3ciKpyeTcJylpBMTzInDKUXfa6hh+y8jxo83IYRi+Xug
yIWO0B1YT663qPfMhqbMnexrjcFDVUeCAJEd44osJ7Ffjh/KysvCvFgGQ9paq6OF
rUa5Jr2BalbEzVfC+0TReSCwjhnWDJeNfrUp3ujPG0s4+B+tVp++mR43/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF5okWLIVMgdmpIZSwriCo+THPs2MB8GA1UdIwQY
MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt
NzZhMWQ0ZDgzMTk3LzEvWG1pUllzaFV5QjJha2hsTEN1SUtqNU1jLXpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3
LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0XjMA0G
CSqGSIb3DQEBCwUAA4IBAQC3cgmLFrQ9d8P2u7XipXqLIvc3DhSPN7Hu2C4gjiXH
bimhu2rJ8O+D7mERPFp165x8ns1n+e8mU1U7VHiVftkf9iEZ9EG43jJPUZh3LymL
sSRmNebR5n3nZ8pvrPX8DHhFZ3dj4S3md4DjbmlxagsAM64QMnEF4aEfImezvO0J
S5KYMWDnwzKEArnZkHWR6H2UnYjxKyFCkeo3qgRdVGBOIQnnkTurwft2nROE5xp0
6YaX8YZW20T1kEzJ6YJ7rwwOixRzgqTrxvTdkVjKoI72asyfQ3iqzT2N1MZeKLT+
NiOAoEIYChIm1YN/0MjN2m1XLIYU0fQDlDAelJPZl8p3
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:54:58 2026 by rpki-client